PT-2025-18600 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the KVM Kernel-based Virtual Machine on x86 systems, specifically with the SMRAM System Management RAM image. On a 64-bit host, if the guest does not have the X...

PT-2025-18623

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the ibmvnic module. The problem arises from the logic introduced in a particular commit, which causes a 32-by...

PT-2025-18912 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns an uninitialized memory access in the Linux kernel. However, Red Hat Product Security has concluded that this CVE is not needed, indicating a rejection of the vulnerabilit...

CVE-2025-22050 usbnet:fix NPE during rx_complete

In the Linux kernel, the following vulnerability has been resolved: usbnet:fix NPE during rxcomplete Missing usbnetgoingaway Check in Critical Path. The usbsubmiturb function lacks a usbnetgoingaway validation, whereas usbnetqueueskb includes this check. This inconsistency creates a race conditio...

PT-2025-14310

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue can occur in the hid ishtp cl remove function during the rmmod operation for the intel ishtp hid driver. This issue arises because the hid ishtp cl deinit function...

CVE-2023-53032

CVE-2023-53032 concerns the Linux kernel netfilter/ipset bitmap_ip_create() overflow handling. When first_ip = 0, last_ip = 0xFFFFFFFF, and netmask = 31, the expression 2 <

CVE-2023-52977

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix flow memory leak in ovsflowcmdnew Syzkaller reports a memory leak of newflow in ovsflowcmdnew as it is not freed when an allocation of a key fails. BUG: memory leak unreferenced object 0xffff888116668000 siz...

PT-2025-20499

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns a problem in the Linux kernel where runtime resume/suspend operations could occur while MS IOCTLs are in progress, leading to potential deadlocks. This happens because...

PT-2025-25800

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue has been resolved in the Linux kernel related to the iio: adc: ad7606 module. The problem occurred because the sw mode config function pointer was not checked for NULL before bei...

Siemens SIMATIC S7-1500 TM MFP Buffer Access with Incorrect Length Value (CVE-2024-42154)

In the Linux kernel, the following vulnerability has been resolved: tcpmetrics: validate source addr length I don't see anything checking that TCPMETRICSATTRSADDRIPV4 is at least 4 bytes long, and the policy doesn't have an entry for this attribute at all neither does it for IPv6 but v6 is manual...

PT-2025-14595

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version with the applied patch Description The issue arises when the invalidate cache method is called on filesystems that do not implement it, such as NFS and Ceph. If writing to the cache NETFS WRITE TO CAC...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-53157)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53157 advisory. - In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Check the DVFS OPP...

Linux Distros Unpatched Vulnerability : CVE-2024-40943

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: fix races between hole punching and AIO+DIO After commit ocfs2: return real error code in ocfs2diowrgetblock, fstests/generic/300 become from always fail...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-57900)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-57900 advisory. - In the Linux kernel, the following vulnerability has been resolved: ila: serialize calls to nfregisternethoo...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-56601)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56601 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: inet: do not leave a dangling sk...

Linux Distros Unpatched Vulnerability : CVE-2024-56653

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: avoid UAF in btmtkprocesscoredump hcidevcdappend may lead to the release o...

Linux Distros Unpatched Vulnerability : CVE-2024-49855

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nbd: fix race between timeout and normal completion If request timetout is handled by nbdrequeuecmd, normal completion has to be stopped for avoiding to complet...

Linux Distros Unpatched Vulnerability : CVE-2024-53065

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/slab: fix warning caused by duplicate kmemcache creation in kmembucketscreate Commit...

Linux Distros Unpatched Vulnerability : CVE-2024-57807

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: megaraidsas: Fix for a potential deadlock This fixes a 'possible circular locking dependency detected' warning CPU0 CPU1 ---- ---- lock&instance-resetmut...

Linux Distros Unpatched Vulnerability : CVE-2024-56749

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: dlm: fix dlmrecovermembers refcount on error If dlmrecovermembers fails we don't drop the...