Linux Distros Unpatched Vulnerability : CVE-2025-40320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: fix potential cfid UAF in smb2queryinfocompound When smb2queryinfocompound retries, a previously allocated cfid may have been freed in the first...

Linux intel_pmu_acr_late_setup Heap Buffer Overflow DoS

The vulnerability of the intelpmuacrlatesetup function in the arch/x86/events/intel/core.c module of the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

UFS Host Controller Heap Buffer Overflow DoS

The vulnerability of the ufshcdpltfrmremove function in the drivers/ufs/host/ufshcd-pltfrm.c module affects UFS-host controllers. In Linux operating systems, this vulnerability is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow...

Linux block/blk-zoned.c Heap Buffer Overflow DoS

The vulnerability of the diskzonewplughandleerror function in the block/blk-zoned.c module, which supports the block-level kernel in Linux operating systems, is related to incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause service failures...

ufshcd Heap Buffer Overflow DoS

The vulnerability of the ufshcdremove function in the drivers/ufs/core/ufshcd.c file affects UFS-host controller support. In Linux operating systems, this vulnerability is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Btrfs File System Heap Buffer Overflow DoS

The vulnerability of the scrubfindfillfirststripe function in the fs/btrfs/scrub.c module of the Btrfs file system support in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

AMD GPU DRI Heap Overflow DoS

Vulnerability of the hwssbuildfastsequence function in the drivers/gpu/drm/amd/display/dc/core/dchwsequencer.c file – The drivers for AMD graphics cards that support Direct Rendering Infrastructure DRI in Linux operating systems are vulnerable due to a pointer manipulation issue. Exploiting this...

Linux Distros Unpatched Vulnerability : CVE-2025-40222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tty: serial: sh-sci: fix RSCI FIFO overrun handling The receive error handling code is shared between RSCI and all other SCIF port types, but the RSCI overrunre...

Linux Distros Unpatched Vulnerability : CVE-2025-40224

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: cgbc-hwmon Add missing NULL check after devmkzalloc The driver allocates memory for sensor data using devmkzalloc, but did not check if the allocation...

Linux Distros Unpatched Vulnerability : CVE-2025-40284

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: MGMT: cancel mesh send timer when hdev removed meshsenddone timer is not canceled when hdev is removed, which causes crash if the timer triggers afte...

Linux Distros Unpatched Vulnerability : CVE-2023-53764

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath12k: Handle lock during peerid find ath12kpeerfindbyid requires that the caller hold the ab-baselock. Currently the WBM error path does not hold the lo...

Linux Distros Unpatched Vulnerability : CVE-2022-50583

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md/raid0, raid10: Don't set discard sectors for request queue It should use diskstacklimits to get a proper maxdiscardsectors rather than setting a value by sta...

Linux Distros Unpatched Vulnerability : CVE-2025-66471

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.0 and prior to 2.6.0, the Streaming API improperly handles highly compressed...

Linux Distros Unpatched Vulnerability : CVE-2025-40241

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - erofs: fix crafted invalid cases for encoded extents Robert recently reported two corrupted images that can cause system crashes, which are related to the new...

Linux Distros Unpatched Vulnerability : CVE-2025-40229

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/damon/core: fix potential memory leak by cleaning opsfilter in damondestroyscheme Currently, damondestroyscheme only cleans up the filter list but leaves...

Linux Distros Unpatched Vulnerability : CVE-2025-40227

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/damon/sysfs: dealloc commit test ctx always The damonctx for testing online DAMON parameters commit inputs is deallocated only when the test fails. This mean...

Linux Distros Unpatched Vulnerability : CVE-2025-40269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer The PCM stream data in USB-audio driver is transferred over USB URB packet buffers, and each pack...

Linux Distros Unpatched Vulnerability : CVE-2025-40309

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: SCO: Fix UAF on scoconnfree BUG: KASAN: slab-use-after-free in scoconnfree net/bluetooth/sco.c:87 inline BUG: KASAN: slab-use-after-free in krefput...

Linux Distros Unpatched Vulnerability : CVE-2025-40302

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: videobuf2: forbid removebufs when legacy fileio is active vb2ioctlremovebufs call manipulates queue internal buffer list, potentially overwriting some...

Linux Distros Unpatched Vulnerability : CVE-2025-40303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: ensure no dirty metadata is written back for an fs with errors BUG During development of a minor feature make sure all btrfsbio::endio is called in task...