CVE-2025-38508

The CVE-2025-38508 entry describes a Linux kernel vulnerability in x86/SEV: when Secure TSC is enabled, GUEST_TSC_FREQ is derived from the P0 frequency and diverges from the mean TSC frequency, causing clock skew in SEV-SNP VMs and resulting in hrtimer interrupts firing earlier than expected. The...

CVE-2025-38506

CVE-2025-38506 : In Linux, KVM can reschedule CPU while setting per-page memory attributes for SEV-SNP guests with very large memory (1TB+), causing host CPU soft lockups during kvm_vm_set_mem_attributes(). The issue arises while looping over guest memory attributes and invoking cond_resched() to...

CVE-2025-38506 KVM: Allow CPU to reschedule while setting per-page memory attributes

In the Linux kernel, the following vulnerability has been resolved: KVM: Allow CPU to reschedule while setting per-page memory attributes When running an SEV-SNP guest with a sufficiently large amount of memory 1TB+, the host can experience CPU soft lockups when running an operation in...

CVE-2025-38504

Summary: CVE-2025-38504 relates to the Linux kernel, specifically the io_uring/zcrx component. The connected documents describe a code-level fix in the destruction path for page pools, where a misplaced warning could trigger during destruction and affect niovs handling. The root cause is that nio...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a crash when drm/imagination hard resets the GPU, which may result in clocks not being enabled...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from the presence of a post-release use in cifsoplockbreak by the smb client, which could lead to a crash...

PT-2025-33579 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a use-after-free flaw within the airoha npu get function. The vulnerability occurs because the np-name field is accessed after the associated node has been...

Linux Distros Unpatched Vulnerability : CVE-2019-14815

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiexsetwmmparams function of Marvell Wifi Driver. CVE-2019-14815 Note that Ness...

Linux Distros Unpatched Vulnerability : CVE-2022-49032

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iio: health: afe4404: Fix oob read in afe4404read|writeraw KASAN report out-of-bounds read a...

Linux Distros Unpatched Vulnerability : CVE-2021-47311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: qcom/emac: fix UAF in emacremove adpt is netdev private data and it cannot be used afte...

Linux Distros Unpatched Vulnerability : CVE-2021-47451

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfilter: xtIDLETIMER: fix panic that occurs when timertype has garbage value Currently, wh...

Linux Distros Unpatched Vulnerability : CVE-2024-38548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference In cdnsmhdpatomicenable, t...

Linux Distros Unpatched Vulnerability : CVE-2019-11477

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jonathan Looney discovered that the TCPSKBCBskb-tcpgsosegs value was subject to an integer overflow in the Linux kernel when handling TCP Selective...

Linux Distros Unpatched Vulnerability : CVE-2022-20141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ipcheckmcrcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing...

Linux Distros Unpatched Vulnerability : CVE-2021-38203

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs in the Linux kernel before 5.13.4 allows attackers to cause a denial of service deadlock via processes that trigger allocation of new system chunks during...

Linux Distros Unpatched Vulnerability : CVE-2021-28952

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel through 5.11.8. The sound/soc/qcom/sdm845.c soundwire device driver has a buffer overflow when an unexpected port ID...

Linux Distros Unpatched Vulnerability : CVE-2023-1095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In nftablesupdtable, if nftablestableenable returns an error, nfttransdestroy is called to free the transaction object. nfttransdestroy calls listdel, but the...

Linux Distros Unpatched Vulnerability : CVE-2022-2590

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write COW breakage of private read-only shared memory mappings. Th...

Linux Distros Unpatched Vulnerability : CVE-2019-5108

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP t...

Linux Distros Unpatched Vulnerability : CVE-2018-19407

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vcpuscanioapic function in arch/x86/kvm/x86.c in the Linux kernel through 4.19.2 allows local users to cause a denial of service NULL pointer dereference an...