Security Bulletin: Vulnerabilities in kernel affects IBM Netezza Appliance

Summary The kernel package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVEs CVE-2025-38110, CVE-2025-38086, CVE-2025-37958, CVE-2025-37797, CVE-2025-22121, CVE-2025-22113, CVE-2025-22091, CVE-2025-22085, CVE-2025-21905, CVE-2024-57980 Vulnerability Detail...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38086)

"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38086 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: ch9200: fix uninitialised access...

Ubuntu: Security Advisory (USN-7834-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 4328-1] linux-6.1 security update

Debian LTS Advisory DLA-4328-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings October 13, 2025 https://wiki.debian.org/LTS Package : linux-6.1 Version : 6.1.153-1 CVE ID : CVE-2024-36331 CVE-2024-36350 CVE-2024-36357 CVE-2024-36913 CVE-2024-41013 CVE-2024-47704...

kernel security update

An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

OESA-2025-2080 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A vulnerability was found in Linux Kernel up to 6.15.3 Operating System. It has been rated as problematic.Using CWE to declare the problem leads to CWE-252. The product does not check the return value from a method or function,...

CVE-2025-38086 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38086 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

AlmaLinux 8 : kernel (ALSA-2025:11455)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:11455 advisory. kernel: tcp/dccp: Don't use timerpending in reqskqueueunlink. CVE-2024-50154 kernel: net: ch9200: fix uninitialised access during miinwayrestart...

AlmaLinux 9 : kernel (ALSA-2025:11861)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:11861 advisory. kernel: media: uvcvideo: Fix double free in error path CVE-2024-57980 kernel: wifi: iwlwifi: limit printed string from FW file CVE-2025-21905 kernel:...

RockyLinux 8 : kernel-rt (RLSA-2025:11456)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:11456 advisory. kernel: tcp/dccp: Don't use timerpending in reqskqueueunlink. CVE-2024-50154 kernel: net: ch9200: fix uninitialised access during miinwayrestart...

RockyLinux 8 : kernel (RLSA-2025:11455)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:11455 advisory. kernel: tcp/dccp: Don't use timerpending in reqskqueueunlink. CVE-2024-50154 kernel: net: ch9200: fix uninitialised access during miinwayrestart...

RLSA-2025:11455 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: tcp/dccp: Don't use timerpending in reqskqueueunlink. CVE-2024-50154 kernel: net: ch9200: fix uninitialised access during miinwayrestart CVE-2025-38086 For more details about the security...

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: media: uvcvideo: Fix double free in error path CVE-2024-57980 kernel: wifi: iwlwifi: limit printed string from FW file CVE-2025-21905 kernel: RDMA/mlx5: Fix pagesize variable overflow...

AlmaLinux 8 : kernel-rt (ALSA-2025:11456)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:11456 advisory. kernel: tcp/dccp: Don't use timerpending in reqskqueueunlink. CVE-2024-50154 kernel: net: ch9200: fix uninitialised access during miinwayrestart...

Oracle Linux 8 : kernel (ELSA-2025-11455)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-11455 advisory. - tcp/dccp: Don't use timerpending in reqskqueueunlink. Guillaume Nault RHEL-66324 CVE-2024-50154 - net: ch9200: fix uninitialised access during...

RHEL 8 : kernel-rt (RHSA-2025:11456)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11456 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

RHEL 8 : kernel (RHSA-2025:11455)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11455 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: tcp/dccp: Don't use...

ALSA-2025:11456 Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: tcp/dccp: Don't use timerpending in reqskqueueunlink. CVE-2024-50154 kernel: net: ch9200: fix uninitialised access during...

CVE-2025-38086

creationtimestamp| type| source ---|---|--- 2025-06-28 10:54:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsnyjtiycz2i 2026-02-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-06...

CVE-2025-38086

In the Linux kernel, the following vulnerability has been resolved: net: ch9200: fix uninitialised access during miinwayrestart In miinwayrestart the code attempts to call mii-mdioread which is ch9200mdioread. ch9200mdioread utilises a local buffer called "buff", which is initialised with...