PT-2025-37596

🗓️ 15 Sep 2025 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 11 Views

Linux kernel libertas fixes memory leak in libertas init adapter on kfifo allocation failure by freeing cmd buffer in the error path.

Reporter	Title	Published	Views	Family All 16631
bdu_fstec	The vulnerability of the md_bitmap_resize() function in the drivers/md/md-bitmap.c file of the Linux device driver for multiple devices (such as RAID and LVM) allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	29 Apr 202600:00	–	bdu_fstec
bdu_fstec	The vulnerability of the fcoe_init() function in the drivers/scsi/fcoe/fcoe.c driver for SCSI devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	29 Apr 202600:00	–	bdu_fstec
bdu_fstec	The vulnerability of the ath11k_mhi_register() function in the drivers/net/wireless/ath/ath11k/mhi.c module of the Atheros/Qualcomm wireless adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.	29 Apr 202600:00	–	bdu_fstec
bdu_fstec	The vulnerability of the xfrm_update_ae_params() function in the net/xfrm/xfrm_user.c module, which is part of the networking functions of the Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	29 Apr 202600:00	–	bdu_fstec
bdu_fstec	The vulnerability of the udf_name_from_CS0() function in the fs/udf/unicode.c module of the Linux kernel file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	29 Apr 202600:00	–	bdu_fstec
bdu_fstec	The vulnerability of the `ucsi_acpi_sync_write()` function in the `drivers/usb/typec/ucsi/ucsi_acpi.c` file of the UCSI interface driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	29 Apr 202600:00	–	bdu_fstec
bdu_fstec	The vulnerability of the raid_component_add() function in the drivers/scsi/raid_class.c module of the Linux operating system’s SCSI device driver allows a hacker to cause a service failure.	29 Apr 202600:00	–	bdu_fstec
bdu_fstec	The vulnerability of the `addrconf_del_dad_work()` function in the `net/ipv6/addrconf.c` module of the Linux operating system’s IPv6 kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	29 Apr 202600:00	–	bdu_fstec
bdu_fstec	The vulnerability of the dwc3_qcom_probe() function in the drivers/usb/dwc3/dwc3-qcom.c driver code of the DesignWare-based USB3 controller driver for the Linux operating system allows a hacker to cause a service failure.	29 Apr 202600:00	–	bdu_fstec
bdu_fstec	The vulnerability of the __sta_infodestroy_part1() function in the net/mac80211/sta_info.c module, part of the mac80211 stack in the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	29 Apr 202600:00	–	bdu_fstec

Source	Link
suse	www.suse.com/security/cve/CVE-2022-50386
bugzilla	www.bugzilla.suse.com/1249782
suse	www.suse.com/security/cve/CVE-2023-53465
suse	www.suse.com/security/cve/CVE-2022-50242
bugzilla	www.bugzilla.suse.com/1248617
ubuntu	www.ubuntu.com/security/CVE-2022-50294
bugzilla	www.bugzilla.suse.com/1250328
bugzilla	www.bugzilla.suse.com/1250325
suse	www.suse.com/security/cve/CVE-2025-38712
bugzilla	www.bugzilla.suse.com/1249877

03 Dec 2025 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.15.5 - 7.8

EPSS0.21314

SSVC