nommu: pass NULL argument to vma_iter_prealloc()

...

iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP

...

MAL-2025-196 Malicious code in is-array-iter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 610756b24c2e5c73a74bf0ea57334df54d8147da9f324a9eac74586b381e08bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in is-array-iter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 610756b24c2e5c73a74bf0ea57334df54d8147da9f324a9eac74586b381e08bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in is-array-iter

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the netfsunbufferedwriteiterlocked function incorrectly handling kernel asynchronous DIO writes as user-spac...

PT-2025-4324

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns the Linux kernel's handling of kernel-initiated asynchronous Direct I/O DIO operations. Specifically, the netfs extract user iter function throws a warning and fails...

PT-2025-8857

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been resolved, related to the blk-cgroup subsystem. The blkcg fill root iostats function iterates over devices by class dev iter init and class dev iter...

PT-2025-9001

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential wild pointer dereferences issue exists in the Linux kernel regarding the APIs class dev iter init, class dev iter next, and class dev iter exit. The issue arises when the cla...

PT-2025-37958

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the ftrace subsystem. A race condition can occur when calling ftrace dump one concurrently with reading trace pipe, potentially triggering a warni...

UBUNTU-CVE-2024-56720

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Several fixes to bpfmsgpopdata Several fixes to bpfmsgpopdata, 1. In skmsgshiftleft, we should putpage 2. if len == 0, return early is better 3. pop the entire skmsg last == msg-sg.size should be supported 4. Fix fo...

CVE-2024-53155

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix uninitialized value in ocfs2filereaditer Syzbot has reported the following KMSAN splat: BUG: KMSAN: uninit-value in ocfs2filereaditer+0x9a4/0xf80 ocfs2filereaditer+0x9a4/0xf80 ioread+0x8d4/0x20f0 ioread+0x3e/0xf0...

CVE-2024-53155

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix uninitialized value in ocfs2filereaditer Syzbot has reported the following KMSAN splat: BUG: KMSAN: uninit-value in ocfs2filereaditer+0x9a4/0xf80 ocfs2filereaditer+0x9a4/0xf80 ioread+0x8d4/0x20f0 ioread+0x3e/0xf0...

PT-2024-40510 · Glib · Glib

Name of the Vulnerable Software and Affected Versions: glib versions 0.15.0 and later Description: The VariantStrIter::impl get function was unsound, resulting in undefined behavior due to an immutable reference being passed to a C function that mutates the pointer in-place. This caused crashes d...

PT-2024-37022

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been resolved in the Linux kernel, specifically in the ceph direct read/write functionality. The bvecs array, allocated in iter get bvecs alloc, is leaked and pag...

SUSE CVE-2024-53109

In the Linux kernel, the following vulnerability has been resolved: nommu: pass NULL argument to vmaiterprealloc When deleting a vma entry from a maple tree, it has to pass NULL to vmaiterprealloc in order to calculate internal state of the tree, but it passed a wrong argument. As a result, nommu...

PT-2024-10198

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the use of an uninitialized pointer in the ocfs2 file read iter function of the Linux kernel. This could allow a remote attacker to cause a denial of service. The...

SUSE CVE-2024-50222

In the Linux kernel, the following vulnerability has been resolved: ioviter: fix copypagefromiteratomic if KMAPLOCALFORCEMAP generic/077 on x8632 CONFIGDEBUGKMAPLOCALFORCEMAP=y with highmem, on huge=always tmpfs, issues a warning and then hangs interruptibly: WARNING: CPU: 5 PID: 3517 at...

SUSE CVE-2024-50253

In the Linux kernel, the following vulnerability has been resolved: bpf: Check the validity of nrwords in bpfiterbitsnew Check the validity of nrwords in bpfiterbitsnew. Without this check, when multiplication overflow occurs for nrbits e.g., when nrwords = 0x0400-0001, nrbits becomes 64, stack...

SUSE CVE-2024-50254

In the Linux kernel, the following vulnerability has been resolved: bpf: Free dynamically allocated bits in bpfiterbitsdestroy bpfiterbitsdestroy uses "kit-nrbits kmemleakalloc+0x4b/0x80 kmallocnodenoprof+0x480/0x5c0 alloc.isra.0+0x89/0xb0 allocbulk+0x2af/0x720 prefillmemcache+0x7f/0xb0...