PT-2025-38169

🗓️ 17 Sep 2025 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 8 Views

Null pointer dereference in the Linux kernel cx88 driver when buffer prepare fails, causing a crash.

Reporter	Title	Published	Views	Family All 16767
BDU FSTEC	The vulnerability of the unix_gc() function in the fnet/unix/garbage.c module of the Linux operating system allows a hacker to cause a service failure.	29 Apr 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the functions pci_init_afu() and cxl_pci_init_adapter() in the drivers/misc/cxl/pci.c module of the Linux kernel allow a hacker to cause a service failure.	29 Apr 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `of_get_dr_timings()` function in the `drivers/memory/of_memory.c` module of the Linux kernel’s memory driver, which allows a hacker to cause a system failure.	29 Apr 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the functions trace_string() and trace_event_rawevent_synth() in the kernel/trace/trace_events_synth.c module, which support Linux’s kernel tracing mechanism, allow a hacker to cause a system failure.	29 Apr 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the moxartprobe() function in the drivers/mmc/host/moxart-mmc.c file of the MMC/SD/SDIO card driver for the Linux operating system allows a hacker to cause a service failure.	29 Apr 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the functions vhost_vsock_alloc_pkt() (drivers/vhost/vsock.c) and virtio_transport_free_pkt() (net/vmw_vsock/virtio_transport_common.c) in the Linux operating system’s IoTLB generic implementation for vhost and vringh kernels allow a hacker to induce a service failure.	29 Apr 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `init_mtd()` function in the `driver/mtd/mtdcore.c` file of the memory driver for the Linux operating system’s kernel allows a hacker to cause a service failure.	29 Apr 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `sc7180_lpass_init()` function in the sound module/soc/qcom/lpass-sc7180.c, which is part of the Linux operating system’s SoC kernel support for audio, allows a hacker to cause a service failure.	29 Apr 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the cxl_calc_capp_routing() function in the drivers/misc/cxl/pci.c module of the Linux kernel allows a hacker to cause a service failure.	29 Apr 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the hswep_has_limit_sbox() function in the arch/x86/events/intel/uncore_snbep.c module, which is part of the Linux kernel support for x86 processors, allows a hacker to trigger a service failure.	29 Apr 202600:00	–	bdu_fstec

Source	Link
suse	www.suse.com/security/cve/CVE-2025-39691
bugzilla	www.bugzilla.suse.com/1249638
bugzilla	www.bugzilla.suse.com/1213016
bugzilla	www.bugzilla.suse.com/1250832
bugzilla	www.bugzilla.suse.com/1250842
bugzilla	www.bugzilla.suse.com/1250275
suse	www.suse.com/security/cve/CVE-2023-53400
bugzilla	www.bugzilla.suse.com/1250963
bugzilla	www.bugzilla.suse.com/1250428
suse	www.suse.com/security/cve/CVE-2022-50357

09 Dec 2025 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 3.15.5 - 7.8

EPSS0.21521

SSVC

linux kernel cx88 driver buffer prepare failure null pointer dereference crash