PT-2025-44114

🗓️ 08 Oct 2025 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 11 Views

Linux kernel io_uring zcrx recv skb flaw may cause descriptor underflow from double counting buffers including fragment lists.

Reporter	Title	Published	Views	Family All 14623
BDU FSTEC	The vulnerability of the mgmt_index_removed() function in the net/bluetooth/mgmt.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.	27 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the btusb_disconnect() function in the drivers/bluetooth/btusb.c module of the Linux Bluetooth device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	27 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the sctp_transport_update_rto() function in the net/sctp/transport.c module of the SCTP protocol implementation in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	27 Jul 202600:00	–	bdu_fstec
BDU FSTEC	Уязвимость функции swap_vma_readahead() модуля mm/swap_state.c подсистемы управления памятью ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации	27 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the imm_detach() function in the drivers/scsi/imm.c module of the Linux operating system’s SCSI device driver allows a attacker to gain access to protected information or cause a service failure.	27 Jul 202600:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the amdgpu_vramattrs_is_visible() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_vram_mgr.c file of the DRI driver for AMD GPU cores in the Linux operating system. This vulnerability allows a attacker to cause a service failure.	27 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the __netpoll_cleanup() function in the net/core/netpoll.c module of the Linux kernel allows a attacker to access protected information or cause a service failure.	27 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the tcf_connmark_dump() function in the net/sched/act_connmark.c module of the network/sched subsystem of the Linux operating system allows a attacker to access protected information or cause service failures.	27 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the nfs4_free_ol_stateid() function in the fs/nfsd/nfs4state.c module, which supports the Network File System in Linux kernels, allows a attacker to cause a service failure.	27 Jul 202600:00	–	bdu_fstec
BDU FSTEC	Уязвимость функции do_timer_create() модуля kernel/time/posix-timers.c подсистемы таймера ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании	27 Jul 202600:00	–	bdu_fstec

Source	Link
ubuntu	www.ubuntu.com/security/CVE-2025-40231
ubuntu	www.ubuntu.com/security/CVE-2025-40077
suse	www.suse.com/security/cve/CVE-2025-68379
ubuntu	www.ubuntu.com/security/CVE-2025-68204
ubuntu	www.ubuntu.com/security/CVE-2025-40079
ubuntu	www.ubuntu.com/security/CVE-2025-68205
ubuntu	www.ubuntu.com/security/CVE-2025-68316
ubuntu	www.ubuntu.com/security/CVE-2025-40167
suse	www.suse.com/security/cve/CVE-2025-68731
suse	www.suse.com/security/cve/CVE-2025-40042

07 Mar 2026 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 24.6

CVSS 3.15.6 - 7.8

CVSS 45.7

EPSS0.00641

SSVC