PT-2025-26009 · Linux · Linux Kernel

🗓️ 14 Nov 2023 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 28 Views

Linux kernel vulnerability allows use-after-free due to incorrect inode size handling.

Reporter	Title	Published	Views	Family All 18511
BDU FSTEC	The vulnerability of the aa_pivotroot() function in the security/apparmor/mount.c module of the AppArmor security component for Linux kernel allows a attacker to cause a service failure.	23 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the qcom_smd_parse_edge() function in the drivers/rpmsg/qcom_smd.c module of the Linux kernel allows a hacker to cause a service failure.	23 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the rpc_sysfs_xprt_state_change() function in the net/sunrpc/sysfs.c module of the Linux operating system’s RPC protocol implementation allows a attacker to cause a service failure.	23 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the handle_cap_grant() function in the fs/ceph/caps.c module of the Ceph distributed file system support module for Linux operating systems allows a attacker to cause a service failure.	23 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the cdns3_allocate_trb_pool() function in the drivers/usb/cdns3/cdns3-gadget.c file of the Linux device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	25 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the function ath9k_htc_probe_device() of the drivers/net/wireless/ath/ath9k/htc_drv_init.c file, a driver for Atheros/Qualcomm wireless adapter devices in the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.	25 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `bnxt_ethtool_init()` function in the `drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c` file of the Broadcom Ethernet adapter support driver for the Linux operating system allows a hacker to cause a service failure.	25 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the cp2112_xfer() function in the drivers/hid/hid-cp2112.c driver module of the Linux kernel’s input device subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	25 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the mlx5_esw_vport_disable() function in the drivers/net/ethernet/mellanox/mlx5/core/eswitch.c file of the Mellanox Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.	26 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the drm_gem_shmem_mmap() function in the drivers/gpu/drm/drm_gem_shmem_helper.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.	26 Mar 202600:00	–	bdu_fstec

Source	Link
safe-surf	www.safe-surf.ru/specialists/bulletins-nkcki/699422
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
bdu	www.bdu.fstec.ru/vul/2023-04658
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

28 Jul 2025 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 27.2

CVSS 3.17.8 - 8.8

EPSS0.10458

SSVC

linux kernel vulnerability issue inode size handling use-after-free risk patches not available