BIT-MONGODB-2025-13507 Time-series operations may cause internal BSON size limit to be exceed

Inconsistent object size validation in time series processing logic may result in later processing of oversized BSON documents leading to an assert failing and process termination. This issue impacts MongoDB Server v7.0 versions prior to 7.0.26, v8.0 versions prior to 8.0.16 and MongoDB server v8...

net/mlx5: Clean up only new IRQ glue on request_irq() failure

...

PT-2025-49368

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s io uring/rw functionality. A previous commit intended to improve cleanup processes inadvertently introduced a memory leak. Specifically, if internal...

CVE-2025-66552 Nextcloud Server admin_audit does not log all actions on files in groupfolders

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1, incorrect path handling with groupfolders caused the adminaudit app to not properly log all actions on files and folders inside groupfolders. This vulnerability is fixed ...

CVE-2025-40235

In the Linux kernel, the following vulnerability has been resolved: btrfs: directly free partially initialized fsinfo in btrfscheckleakedroots If fsinfo-supercopy or fsinfo-superforcommit allocated failed in btrfsgettreesubvol, then no need to call btrfsfreefsinfo. Otherwise btrfscheckleakedroots...

CVE-2025-40224

In the Linux kernel, the following vulnerability has been resolved: hwmon: cgbc-hwmon Add missing NULL check after devmkzalloc The driver allocates memory for sensor data using devmkzalloc, but did not check if the allocation succeeded. In case of memory allocation failure, dereferencing the NULL...

CVE-2025-40250

Error handling in mlx5irqalloc destroys the entire CPU affinity rmap instead of just the failed mapping when requestirq returns an error. Concurrent threads accessing the rmap trigger a general protection fault as they dereference freed memory. The crash signature shows freeirqcpurmap accessing...

CVE-2025-40228

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: catch commit test ctx alloc failure Patch series "mm/damon/sysfs: fix commit test damonctx deallocation". DAMON sysfs interface dynamically allocates and uses a damonctx object for testing if given inputs for onli...

kernel security update

An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

bpf: Fix memleak due to fentry attach failure

...

SUSE CVE-2025-40224

In the Linux kernel, the following vulnerability has been resolved: hwmon: cgbc-hwmon Add missing NULL check after devmkzalloc The driver allocates memory for sensor data using devmkzalloc, but did not check if the allocation succeeded. In case of memory allocation failure, dereferencing the NULL...

SUSE CVE-2025-40228

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: catch commit test ctx alloc failure Patch series "mm/damon/sysfs: fix commit test damonctx deallocation". DAMON sysfs interface dynamically allocates and uses a damonctx object for testing if given inputs for onli...

SUSE CVE-2025-40245

In the Linux kernel, the following vulnerability has been resolved: nios2: ensure that memblock.currentlimit is set when setting pfn limits On nios2, with CONFIGFLATMEM set, the kernel relies on memblockgetcurrentlimit to determine the limits of memmap, in particular for maxlowpfn. Unfortunately,...

SUSE CVE-2025-40250

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Clean up only new IRQ glue on requestirq failure The mlx5irqalloc function can inadvertently free the entire rmap and end up in a crash1 when the other threads tries to access this, when requestirq fails due to exhauste...

The vulnerability in the driver drbd/drbd_receiver.c of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the driver drbd/drbdreceiver.c of the Linux operating system relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability in the kernel/trace/ftrace.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the kernel/trace/ftrace.c component of the Linux operating system is related to the use of resources with a similar identifier. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of PostgreSQL PgBouncer’s connection pool software, related to an unreliable search path, allows a hacker to trigger a service failure.

The vulnerability of the PostgreSQL PgBouncer connection pool software is related to an unreliable search process. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability in the `media/usb/usbtv/usbtv-video.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the media/usb/usbtv/usbtv-video.c component of the Linux operating system is related to insufficient blocking mechanisms. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerabilities of the functions ovl_encode_real_fh() (fs/overlayfs/copy_up.c) and show_mark_fhandle() (fs/notify/fdinfo.c) in the Linux operating system’s kernel allow a malicious actor to trigger a service failure.

The vulnerability of the functions ovlencoderealfh fs/overlayfs/copyup.c and showmarkfhandle fs/notify/fdinfo.c in the Linux kernel is related to the insufficient use of the assert function. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the amd_pstate_update() function (drivers/cpufreq/amd-pstate.c) in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the amdpstateupdate function drivers/cpufreq/amd-pstate.c in the Linux kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...