CVE-2025-37854 drm/amdkfd: Fix mode1 reset crash issue

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix mode1 reset crash issue If HW scheduler hangs and mode1 reset is used to recover GPU, KFD signal user space to abort the processes. After process abort exit, user queues still use the GPU to access system memory...

CVE-2025-21453 Use After Free in GPS HLOS Driver

Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur...

CVE-2024-45568 Buffer Over-read in Camera Driver

Memory corruption due to improper bounds check while command handling in camera-kernel driver...

CVE-2024-45567 Use After Free in Camera Driver

Memory corruption while encoding JPEG format...

CVE-2025-46592

Null pointer dereference vulnerability in the USB HDI driver module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-46592

CVE-2025-46592 describes a null pointer dereference in Huawei HarmonyOS USB HDI driver module, with impact limited to availability. Public records (NVD, Red Hat, CNVD, CVE lists) flag the vulnerability as local‑level with LOW privileges required and no user interaction. The CVSS base scores in th...

CVE-2023-53037

Consolidated data shows CVE-2023-53037 affects the Linux kernel SCSI mpi3mr driver. When SAS Transport Layer is enabled and a device exposed to the OS fails INQUIRY, memory allocated for an internal HBA port data structure is freed but references to that freed memory are not cleared. If the firmw...

CVE-2025-0072

The CVE-2025-0072 entries describe a Use After Free in ARM Valhall GPU Kernel Driver and ARM 5th Gen GPU Architecture Kernel Driver. The vulnerability arises from GPU memory paging and queue binding/unbind semantics in the kbase CSF path: a bound queue’s queue->phys pages can be overwritten by...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an undersized iucv driver interrupt data, which could lead to memory corruption...

Vulnerability of the init_dell_smbios_wmi() function in the drivers/platform/x86/dell-smbios-wmi.c module – This driver provides support for X86 device controllers in the Linux operating system, allowing an attacker to cause a service failure.

Vulnerability of the initdellsmbioswmi function in the drivers/platform/x86/dell-smbios-wmi.c module – The Linux X86 kernel device support drivers are vulnerable due to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause...

CVE-2025-37767 drm/amd/pm: Prevent division by zero

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Prevent division by zero The user can set any speed value. If speed is greater than UINTMAX/8, division by zero is possible. Found by Linux Verification Center linuxtesting.org with SVACE...

CVE-2025-23146

In the Linux kernel, the following vulnerability has been resolved: mfd: ene-kb3930: Fix a potential NULL pointer dereference The offgpios could be NULL. Add missing check in the kb3930probe. This is similar to the issue fixed in commit b1ba8bcb2d1f "backlight: hx8357: Fix potential NULL pointer...

Ubuntu 24.04 LTS : Linux kernel (Azure, N-Series) vulnerabilities (USN-7468-1)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7468-1 advisory. Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker...

Vulnerabilities of functions gpio_rcar_configInterruptInputMode(), gpio_rcar_configGeneralInputOutputMode(), gpio_rcar_get_multiple(), gpio_rcar_set(), gpio_rcar_set_multiple(), and gpio_rcar_probe() in the Linux kernel’s drivers/gpio/gpio_rcar.c file, which allow a attacker to cause a service failure

The vulnerabilities of the functions gpiorcarconfigInterruptInputMode, gpiorcarconfigGeneralInputOutputMode, gpiorcargetmultiple, gpiorcarset, gpiorcarsetmultiple, and gpiorcarprobe drivers/gpio/gpiorcar.c in the Linux kernel are related to insufficient locking. Exploitation of these...

CVE-2025-29547

In Rollback Rx Professional 12.8.0.0, the driver file shieldm.sys allows local users to cause a denial of service because of a null pointer dereference from IOCtl 0x96202000...

CVE-2025-29547

CVE-2025-29547 affects Rollback Rx Professional 12.8.0.0 via the shieldm.sys driver. A null pointer dereference triggered by IOCTL 0x96202000 allows local users to cause a denial of service. Documents consistently describe local, offline attack potential but do not provide exploit code or in‑the‑...

CVE-2025-22068

In the Linux kernel, the following vulnerability has been resolved: ublk: make sure ubq-canceling is set when queue is frozen Now ublk driver depends on ubq-canceling for deciding if the request can be dispatched via uringcmd & iouringcmdcompleteintask. Once ubq-canceling is set, the uringcmd can...

CVE-2025-22128 wifi: ath12k: Clear affinity hint before calling ath12k_pci_free_irq() in error path

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Clear affinity hint before calling ath12kpcifreeirq in error path If a shared IRQ is used by the driver due to platform limitation, then the IRQ affinity hint is set right after the allocation of IRQ vectors in...

CVE-2025-22097 drm/vkms: Fix use after free and double free on init error

In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix use after free and double free on init error If the driver initialization fails, the vkmsexit function might access an uninitialized or freed defaultconfig pointer and it might double free it. Fix both possible erro...

CVE-2025-22065

CVE-2025-22065 : Linux kernel idpf SR-IOV path could double-remove a VF during reboot, causing a NULL pointer dereference when the adapter is NULL on the first idpf_remove() call. Fixes replace idpf_remove() in idpf_shutdown() with idpf_vc_core_deinit() and idpf_deinit_dflt_mbx(), moving cleanup ...