Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an improper locking mechanism in the rtl8723bs driver, which could lead to a soft interrupt handling excepti...

CVE-2025-39769: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix lockdep warning during rmmod The commit under the Fixes tag added a netdevassertlocked in bnxtfreentpfltrs. The lock should be held during normal run-time but the assert will be triggered see below during bnxtremoveon...

The vulnerability of the msm_devfreq_init() function in the drivers/gpu/drm/msm/msm_gpu_devfreq.c file of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the msmdevfreqinit function in the drivers/gpu/drm/msm/msmgpudevfreq.c file of the Linux kernel is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-38650: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: hfsplus: remove mutexlock check in hfsplusfreeextents Syzbot reported an issue in hfsplus filesystem: ------------ cut here ------------ WARNING: CPU: 0 PID: 4400 at fs/hfsplus/extents.c:346 hfsplusfreeextents+0x700/0xad0 Call...

CVE-2025-38643: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Add missing lock in cfg80211checkandendcac Callers of wdevchandef must hold the wiphy mutex. But the worker cfg80211propagatecacdonewk never takes the lock. Which triggers the warning below with the...

CVE-2025-20044

Improper locking for some IntelR TDX Module firmware before version 1.5.13 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20044

Improper locking for some IntelR TDX Module firmware before version 1.5.13 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20044

Improper locking for some IntelR TDX Module firmware before version 1.5.13 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20044

The CVE-2025-20044 issue affects Intel® TDX Module firmware prior to version 1.5.13. The vulnerability allows a local, privileged user to potentially escalate privileges due to improper locking in the TDX Module firmware. Documented impact includes I/H (integrity high) without confidentiality imp...

CVE-2025-20044: Improper Locking

Improper locking for some IntelR TDX Module firmware before version 1.5.13 may allow a privileged user to potentially enable escalation of privilege via local access...

Intel TDX Module firmware 安全漏洞

Intel TDX Module firmware is a firmware from Intel Corporation USA. A security vulnerability exists in Intel TDX Module firmware versions prior to 1.5.13, which stems from improper locking and may result in elevated privileges...

The vulnerability of the `cifs_signal_cifsd_for_reconnect()` function in the `fs/smb/client/cifsglob.h` and `fs/smb/client/connect.c` files, which are part of the SMB client support in Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the cifssignalcifsdforreconnect function in the fs/smb/client/cifsglob.h and fs/smb/client/connect.c files, which are part of the SMB client support in Linux kernel, is related to improper locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a...

CVE-2025-1221: Improper Locking

A Zigbee Radio Co-Processor RCP, which is using SiLabs EmberZNet Zigbee stack, was unable to send messages to the host system CPCd due to heavy Zigbee traffic, resulting in a Denial of Service DoS attack, Only hard reset will bring the device to normal operation...

CVE-2025-38491: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: mptcp: make fallback action and fallback decision atomic Syzkaller reported the following splat: WARNING: CPU: 1 PID: 7704 at net/mptcp/protocol.h:1223 mptcpdofallback net/mptcp/protocol.h:1223 inline WARNING: CPU: 1 PID: 7704 at...

The vulnerability of the ep_poll() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the eppoll function in the Linux operating system’s kernel is related to improper resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-38388: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: firmware: armffa: Replace mutex with rwlock to avoid sleep in atomic context The current use of a mutex to protect the notifier hashtable accesses can lead to issues in the atomic context. It results in the below kernel warnings:...

CVE-2025-38353: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix taking invalid lock on wedge If device wedges on e.g. GuC upload, the submission is not yet enabled and the state is not even initialized. Protect the wedge call so it does nothing in this case. It fixes the following...

CVE-2025-38436: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: drm/scheduler: signal scheduled fence when kill job When an entity from application B is killed, drmschedentitykill removes all jobs belonging to that entity through drmschedentitykilljobswork. If application A's job depends on a...

CVE-2025-38359: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix inatomic handling in dosecurestorageaccess Kernel user spaces accesses to not exported pages in atomic context incorrectly try to resolve the page fault. With debug options enabled call traces like this can be seen:...

CVE-2025-38311: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: iavf: get rid of the crit lock Get rid of the crit lock. That frees us from the error prone logic of trylocks. Thanks to netdevlock by Jakub it is now easy, and in most cases we were protected by it already - replace crit lock by...