PT-2025-4351 · Linux +4 · Linux Kernel +4

🗓️ 10 Jan 2025 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 22 Views

Linux kernel versions before 6.6.73/6.12.10 have a null pointer dereference vulnerability.

Reporter	Title	Published	Views	Family All 17939
BDU FSTEC	The vulnerability of the team_port_add() function in the drivers/net/team/team_core.c component of the Linux kernel allows a hacker to induce a service failure.	28 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the nf_tables_api.c component in the Linux operating system allows a hacker to cause a service failure.	28 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the tomoyo_write_control() function in the tomoyo/common.c component of the Linux kernel allows a hacker to trigger a service failure.	28 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the pcf85063_nvmem_read() function in the drivers/rtc/rtc-pcf85063.c kernel module of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.	28 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the __rxe_cleanup() function in the rxe_pool.c component of the Linux kernel allows a attacker to cause a service failure.	28 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the nfsd4_run_cb_work() function in the nfs4callback.c component of the Linux operating system allows a attacker to cause a service failure.	28 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the misc.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.	28 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the bpf_local_storage.c component in the Linux operating system allows a hacker to trigger a service failure.	28 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the kvalloc() function in the eventlog/acpi.c component of the Linux operating system, which allows a hacker to cause a service failure	28 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s kernel, related to improper control of resource identifiers, allows attackers to trigger a service failure.	28 Sep 202500:00	–	bdu_fstec

Source	Link
bdu	www.bdu.fstec.ru/vul/2025-05087
safe-surf	www.safe-surf.ru/specialists/bulletins-nkcki/721321
ubuntu	www.ubuntu.com/security/CVE-2025-21804
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
ubuntu	www.ubuntu.com/security/CVE-2024-58018
ubuntu	www.ubuntu.com/security/notices/USN-7595-4
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
bdu	www.bdu.fstec.ru/vul/2025-06159
bdu	www.bdu.fstec.ru/vul/2025-04497

17 Jul 2025 00:00Current

5.6Medium risk

Vulners AI Score5.6

CVSS 3.15.5 - 9.8

EPSS0.03558

SSVC

linux kernel vulnerability null pointer dereference denial of service vsock bpf module software update