CVE-2025-39996

CVE-2025-39996 affects the Linux kernel media driver for B2C2 FlexCop PCI. The underlying issue is a use-after-free caused by cancel_delayed_work() in flexcop_pci_remove(), which may free flexcop_device while irq_check_work is still running. The mitigation is to replace cancel_delayed_work() with...

CVE-2025-39996 media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove

In the Linux kernel, the following vulnerability has been resolved: media: b2c2: Fix use-after-free causing by irqcheckwork in flexcoppciremove The original code uses canceldelayedwork in flexcoppciremove, which does not guarantee that the delayed work item irqcheckwork has fully completed if it...

CVE-2025-39995

CVE-2025-39995: Linux kernel vulnerability in media: i2c: tc358743 where use-after-free occurs due to an orphan timer and in-flight delayed_work during probe failure. The cyclic timer schedules work_i2c_poll and delayed_work_enable_hotplug and may reference tc358743_state after it is freed. A fix...

CVE-2025-39995 media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe

In the Linux kernel, the following vulnerability has been resolved: media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe The state-timer is a cyclic timer that schedules worki2cpoll and delayedworkenablehotplug, while rearming itself. Using timerdelete fails to guarantee...

CVE-2025-39994 media: tuner: xc5000: Fix use-after-free in xc5000_release

In the Linux kernel, the following vulnerability has been resolved: media: tuner: xc5000: Fix use-after-free in xc5000release The original code uses canceldelayedwork in xc5000release, which does not guarantee that the delayed work item timersleep has fully completed if it was already running. Th...

CVE-2025-39994

CVE-2025-39994 concerns the Linux kernel media/tuners/xc5000 driver. The root cause is a use-after-free in xc5000_release() caused by cancel_delayed_work() not guaranteeing the delayed work item timer_sleep has finished before freeing priv data. The fix replaces cancel_delayed_work() with cancel_...

CVE-2025-39994 media: tuner: xc5000: Fix use-after-free in xc5000_release

In the Linux kernel, the following vulnerability has been resolved: media: tuner: xc5000: Fix use-after-free in xc5000release The original code uses canceldelayedwork in xc5000release, which does not guarantee that the delayed work item timersleep has fully completed if it was already running. Th...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from improper use of canceldelayedwork in xc5000release, which could lead to reuse after release...

Linux Distros Unpatched Vulnerability : CVE-2025-39945

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cnic: Fix use-after-free bugs in cnicdeletetask The original code uses canceldelayedwork in cniccmstopbnx2xhw, which does not guarantee that the delayed work it...

Linux Distros Unpatched Vulnerability : CVE-2025-39944

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - octeontx2-pf: Fix use-after-free bugs in otx2synctstamp The original code relies on canceldelayedwork in otx2ptpdestroy, which does not ensure that the delayed...

Linux Distros Unpatched Vulnerability : CVE-2022-50441

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Lag, fix failure to cancel delayed bond work Commit 0d4e8ed139d8 net/mlx5: Lag,...

Linux Distros Unpatched Vulnerability : CVE-2023-53459

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: HID: mcp-2221: prevent UAF in delayed work If the device is plugged/unplugged without giving...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987403)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987403 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix race between delayedwork and cephmoncstop The way the delayed work is handled in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987380)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987380 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/radeon: add a force flush to delay work when radeon Although radeon card fence and wait for g...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986498)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986498 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix race between delayedwork and cephmoncstop The way the delayed work is handled in...

PT-2025-41082

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a use-after-free issue in the octep probe function. If the function fails to retrieve a device's MAC address, it exits while leaving a delayed work item, intr...

PT-2025-42708

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a use-after-free issue within the networking subsystem, specifically in the mscc ocelot component. The problem arises from a cyclic delayed work item where canc...

EUVD-2025-32392

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix use-after-free bugs in otx2synctstamp The original code relies on canceldelayedwork in otx2ptpdestroy, which does not ensure that the delayed work item synctstampwork has fully completed if it was already runnin...

EUVD-2025-32383

In the Linux kernel, the following vulnerability has been resolved: cnic: Fix use-after-free bugs in cnicdeletetask The original code uses canceldelayedwork in cniccmstopbnx2xhw, which does not guarantee that the delayed work item 'deletetask' has fully completed if it was already running...

AZL-68163 CVE-2025-39945 affecting package kernel for versions less than 6.6.112.1-1

In the Linux kernel, the following vulnerability has been resolved: cnic: Fix use-after-free bugs in cnicdeletetask The original code uses canceldelayedwork in cniccmstopbnx2xhw, which does not guarantee that the delayed work item 'deletetask' has fully completed if it was already running...