PT-2025-40694

🗓️ 09 May 2023 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 24 Views

Linux kernel drm i915 fix marks GuC virtual engine requests to prevent use-after-free and leaks.

Reporter	Title	Published	Views	Family All 15491
BDU FSTEC	The vulnerability of the radeon_cs_parser_init() function in the drivers/gpu/drm/radeon/radeon_cs.c file of the DRI graphics card driver for Linux operating systems allows a hacker to cause a system failure.	3 Apr 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the function `drcm_client_modeset_probe()` of the `drivers/gpu/drm/drm_client_modeset.c` file, a part of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system, allows a hacker to cause a service failure.	3 Apr 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the snd_hdac_regmap_sync() function in the sound/hda/hdac_regmap.c module of the Linux kernel’s audio subsystem allows a hacker to cause a system failure.	3 Apr 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the btrfs_truncate_block() function in the fs/btrfs/inode.c file of the file system module in Linux kernel allows a attacker to cause a service failure.	3 Apr 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the cifs_smb3_do_mount() function in the fs/smb/client/cifsfs.c module, which is part of the SMB client support in Linux kernel, allows a hacker to trigger a service failure.	3 Apr 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the az6007_i2c_xfer() function in the drivers/media/usb/dvb-usb-v2/az6007.c driver for multimedia devices in Linux operating systems allows a hacker to induce a service failure.	3 Apr 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the mac80211_hwsim_select_tx_link() function in the drivers/net/wireless/virtual/mac80211_hwsim.c module of the Linux kernel wireless adapter driver allows a hacker to cause a service failure.	3 Apr 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the qla24xx_bsg_request() function in the drivers/scsi/qla2xxx/qla_bsg.c module of the Linux operating system’s SCSI device driver allows a hacker to induce a service failure.	3 Apr 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the rb_end_commit() function in the Linux operating system’s kernel allows a attacker to compromise the accessibility of protected information.	23 Apr 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the driver module md/raid10.c of several Linux device drivers (RAID and LVM), which allows a hacker to cause a service failure.	23 Apr 202600:00	–	bdu_fstec

Source	Link
suse	www.suse.com/security/cve/CVE-2023-53360
suse	www.suse.com/security/cve/CVE-2023-53356
suse	www.suse.com/security/cve/CVE-2023-53352
bugzilla	www.bugzilla.suse.com/1249849
bugzilla	www.bugzilla.suse.com/1252062
bugzilla	www.bugzilla.suse.com/1250831
bugzilla	www.bugzilla.suse.com/1252550
bugzilla	www.bugzilla.suse.com/1249221
suse	www.suse.com/security/cve/CVE-2023-53174
suse	www.suse.com/security/cve/CVE-2025-38718

19 Jan 2026 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.8

EPSS0.08942

SSVC

virtual engines use after free memory leaks kernel fix request handling