PT-2025-46599

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue was identified in the Linux kernel related to inaccurate exception reporting within the copy from user and copy to user functions for UltraSPARC III architectures. A bug in...

PT-2025-46601

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue was identified in the Linux kernel related to inaccurate exception reporting within the copy from user and copy to user functions for UltraSPARC architectures. The problem stemm...

SUSE CVE-2025-38704

In the Linux kernel, the following vulnerability has been resolved: rcu/nocb: Fix possible invalid rdp's-nocbcbkthread pointer access In the preparation stage of CPU online, if the corresponding the rdp's-nocbcbkthread does not exist, will be created, there is a situation where the rdp's rcuop...

CLSA-2025-1757015268 Fix CVE(s): CVE-2025-7545

SECURITY UPDATE: heap-based buffer overflow in copysection function - debian/patches/CVE-2025-7545.patch: Don't extend output section size beyond input section size to fix section contents from being copied - CVE-2025-7545...

DEBIAN-CVE-2025-38703

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Make dma-fences compliant with the safe access rules Xe can free some of the data pointed to by the dma-fences it exports. Most notably the timeline name can get freed if userspace closes the associated submit queue. At t...

CVE-2025-38704

In the Linux kernel, the following vulnerability has been resolved: rcu/nocb: Fix possible invalid rdp's-nocbcbkthread pointer access In the preparation stage of CPU online, if the corresponding the rdp's-nocbcbkthread does not exist, will be created, there is a situation where the rdp's rcuop...

UBUNTU-CVE-2025-38704

In the Linux kernel, the following vulnerability has been resolved: rcu/nocb: Fix possible invalid rdp's-nocbcbkthread pointer access In the preparation stage of CPU online, if the corresponding the rdp's-nocbcbkthread does not exist, will be created, there is a situation where the rdp's rcuop...

CVE-2025-38704

CVE-2025-38704: In the Linux kernel, a bug in rcu/nocb could access an invalid nocb_cb_kthread pointer during CPU online/offline cycles. The fix changes the safety check to use rdp->nocb_gp_kthread instead of rdp_gp->nocb_gp_kthread. Public advisories from SUSE (SUSE-SU-2026:20220-1, openSU...

CVE-2025-38703

CVE-2025-38703 affects the Linux kernel’s drm/xe path, specifically making dma-fences compliant with safe access rules. The issue arises when Xe frees data pointed to by dma-fences it exports (e.g., a timeline name) after a userspace submit queue is closed, which could lead to a use-after-free if...

bpf: copy_verifier_state() should copy 'loop_entry' field

...

ice: Fix a null pointer dereference in ice_copy_and_init_pkg()

...

thermal: core: Free tzp copy along with the thermal zone

...

NFSD: Limit the number of concurrent async COPY operations

...

ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()

...

srcu: Tighten cleanup_srcu_struct() GP checks

...

An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in yasm_expr__copy_except() in libyasm/expr.c.

...

nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.

...

ax25: rcu protect dev->ax25_ptr

...

HDF5 Type Conversion Logic H5T__bit_copy heap-based overflow

...

kernel: Bluetooth: hci_core: Fix use-after-free in vhci_flush()

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Fix use-after-free in vhciflush syzbot reported use-after-free in vhciflush without repro. 0 From the splat, a thread closed a vhci file descriptor while its device was being used by iotcl on another thread...