Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the failure to destroy the target device when the KVM merge MMIO device logout fails, potentially leading to...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to free DMA buffers when sprd serial driverprobe fails, which could lead to a memory leak...

The vulnerability of the iwl_write_to_user_buf() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the iwlwritetouserbuf function in the Linux operating system is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the create_qp() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the createqp function in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ath11k_ahb_fw_resources_init() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the ath11kahbfwresourcesinit function in the Linux kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the amdgpu_dm_fini() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the amdgpudmfini function in the Linux operating system is related to the assignment of a zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mvpp2_ethtool_get_rxnfc() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the mvpp2ethtoolgetrxnfc function in the Linux operating system is related to the assignment of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the cpu_to_node() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the cputonode function in the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2025-53174

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the stm32-pwr regulator driver. Specifically, the of iomap function in stm32 pwr regulator probe does not release allocated memory when devm...

The vulnerability of the __extent_writepage() function in the btrfs component of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the extentwritepage function in the btrfs component of the Linux kernel operating system is related to a potential memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the HostnameError.Error() function in the crypto/x509 package written in the Go programming language allows a attacker to cause a service failure.

The vulnerability of the HostnameError.Error function in the crypto/x509 package in the Go programming language is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Linux Distros Unpatched Vulnerability : CVE-2022-50750

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure In case mipidsiattach fails, call drmpanelremove to avoid memory leak. CVE-2022-50750 Note...

CVE-2025-14422

GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

CVE-2025-67108

eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connections...

CVE-2025-68339 atm/fore200e: Fix possible data race in fore200e_open()

In the Linux kernel, the following vulnerability has been resolved: atm/fore200e: Fix possible data race in fore200eopen Protect access to fore200e-availablecellrate with ratemtx lock in the error handling path of fore200eopen to prevent a data race. The field fore200e-availablecellrate is a shar...

CVE-2025-68338 net: dsa: microchip: Don't free uninitialized ksz_irq

In the Linux kernel, the following vulnerability has been resolved: net: dsa: microchip: Don't free uninitialized kszirq If something goes wrong at setup, kszirqfree can be called on uninitialized kszirq for example when kszptpirqsetup fails. It leads to freeing uninitialized IRQ numbers and/or...

CVE-2025-68339

The CVE-2025-68339 issue concerns the Linux kernel’s atm/fore200e driver. In fore200e_open(), available_cell_rate is reserved under rate_mtx, but if fore200e_activate_vcin() fails, the code adds back bandwidth without holding the lock. Since available_cell_rate is shared across VCCs, this creates...

CVE-2025-68338

In the Linux kernel, CVE-2025-68338 concerns the dsa: microchip path where, if setup fails, ksz_irq_free() may be called on an uninitialized ksz_irq, risking freeing uninitialized IRQ numbers and/or domains. The fix implemented is to iterate only over fully initialized ports in the error path usi...

CVE-2025-68338 net: dsa: microchip: Don't free uninitialized ksz_irq

In the Linux kernel, the following vulnerability has been resolved: net: dsa: microchip: Don't free uninitialized kszirq If something goes wrong at setup, kszirqfree can be called on uninitialized kszirq for example when kszptpirqsetup fails. It leads to freeing uninitialized IRQ numbers and/or...

The vulnerability of the vDaemon microprogramming software for Cisco SD-WAN vEdge routers allows a attacker to execute arbitrary commands or cause service failures.

The vulnerability of the vDaemon microprogramming software for Cisco SD-WAN vEdge routers is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to execute arbitrary commands or cause service failures...