PT-2025-26043 · Linux +1 · Linux Kernel +1

🗓️ 07 Nov 2023 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 12 Views

Vulnerability in Linux kernel resolved by modifying vfio core and driver migration operations

Reporter	Title	Published	Views	Family All 17570
BDU FSTEC	The vulnerability of the arkfb_set_par() function in the drivers/video/fbdev/arkfb.c driver for kernel-based video buffer devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	10 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the arkfb_set_par() function in the drivers/video/fbdev/arkfb.c driver for kernel-based video buffer devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	10 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the task_can_attach() function in the kernel/sched/core.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	10 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `sof_ipc3_control_load_bytes()` function in the `sound/soc/sof/ipc3-topology.c` module of the Linux operating system’s SoC audio support module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	10 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the functions hisi_acc_vfiopci_open_device() and hisi_acc_vfiopci_close_device() in the drivers/vfio/pci/hisilicon/hisi_acc_vfiopci.c driver for VFIO device controllers in the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.	10 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the functions copy_verifier_state() and do_check() in the kernel/bpf/verifier.c module support the BPF interpreter of the Linux operating system. These vulnerabilities allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.	16 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the vc_uniscr_alloc() function in the drivers/tty/vt/vt.c file of the virtual terminal driver for the Linux operating system allows a attacker to cause a service failure.	16 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `security_read_state_kernel()` function in the `security/selinux/ss/services.c` module of the Linux kernel’s security subsystem allows a attacker to trigger a service failure.	16 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the intel_ethpciRemove() function in the drivers/net/ethernet/stmicro/stmmac/dwmac-intel.c file of the Ethernet network adapter driver module from STMicroelectronics’ Linux operating system allows a hacker to cause a service failure.	16 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the msb_data_clear() function in the drivers/memstick/core/ms_block.c module of the Sony MemoryStick driver for Linux operating systems allows a hacker to cause a system failure.	16 Mar 202600:00	–	bdu_fstec

Source	Link
github	www.github.com/pray77/CVE-2023-3640
bdu	www.bdu.fstec.ru/vul/2025-06232
bdu	www.bdu.fstec.ru/vul/2025-06359
bdu	www.bdu.fstec.ru/vul/2023-01725
bdu	www.bdu.fstec.ru/vul/2025-06245
bdu	www.bdu.fstec.ru/vul/2025-05359
bdu	www.bdu.fstec.ru/vul/2025-06339
bdu	www.bdu.fstec.ru/vul/2023-03960
bdu	www.bdu.fstec.ru/vul/2022-07343
bdu	www.bdu.fstec.ru/vul/2023-04267

10 Jul 2025 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.18.2

CVSS 27.2

EPSS0.16642

SSVC

linux kernel vulnerability vfio core issue migration operations fix hisi driver modification