CVE-2025-37798

CVE-2025-37798 affects the Linux kernel networking code. The fix removes the qlen check in fq_codel_dequeue() and codel_qdisc_dequeue() after making sch->qlen_notify() callbacks idempotent. The description indicates the vulnerability related to backlog/queue length handling in qdisc code (code...

CVE-2025-37797 net_sched: hfsc: Fix a UAF vulnerability in class handling

In the Linux kernel, the following vulnerability has been resolved: netsched: hfsc: Fix a UAF vulnerability in class handling This patch fixes a Use-After-Free vulnerability in the HFSC qdisc class handling. The issue occurs due to a time-of-check/time-of-use condition in hfscchangeclass when...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a possible sleep caused by processing the PPTT table in an atomic context...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the omission of the last block of data from the icegetmoduleeeprom function, which could result in an...

Vulnerability of the hns3_nic_net_open() function in the drivers/net/ethernet/hisilicon/hns3/hns3_enet.c module – This is a driver for supporting Ethernet network adapters in the Linux operating system. An attacker can exploit this vulnerability to cause a service failure.

Vulnerability of the hns3nicnetopen function in the drivers/net/ethernet/hisilicon/hns3/hns3enet.c module – The Linux kernel’s Ethernet adapter support driver has a vulnerability due to insufficient resource control during its operation. Exploiting this vulnerability could allow an attacker to...

PT-2025-18887 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free vulnerability has been identified in the Linux kernel related to PCI resources with per-function hotplug on s390 systems. This issue arises when PCI functions are...

PT-2025-18883 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.2.0-rc3-next-20230110-syzkaller Description: A vulnerability in the Linux kernel has been identified, where the struct pn533 out arg is not properly initialized, leading to a potential null pointer dereference...

PT-2025-18897 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: The issue is related to an infinite loop error in the tcp bpf recvmsg parser function when the buffer length of the recvmsg system call is 0. This can cause a soft lockup problem...

PT-2025-18844 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue is related to a missing overflow check in xdp umem reg, which can cause the number of chunks to overflow u32. This...

PT-2025-18862 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue is related to the gpio-ir-recv module and occurs when runtime PM is enabled. If runtime PM is enabled, the kernel may...

PT-2025-18855 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A null pointer dereference problem may occur when mounting a crafted ext4 image. The issue arises because s journal inum may change after journal replay, bypassing checks in ext4 get...

PT-2025-18903 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue is related to the devm kmalloc array function in the fdp nci i2c read device properties function, which may fail and...

PT-2025-18873 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to IP tunnels updating dev-needed headroom in their xmit path. The issue involves a data-race in ip tunnel xmit, which ca...

PT-2025-18865 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.3.0-rc1-00004-g703695902cfa Description: A vulnerability in the Linux kernel has been identified, where the inconsistency between i size and i disksize can trigger a kernel warning when the boot loader inode i...

PT-2025-18905 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: A vulnerability in the Linux kernel has been resolved, where the ila xlat nl cmd get mapping function generates an empty message, triggering a sanity check. This issue is resolved ...

PT-2025-18901 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A issue in the Linux kernel has been identified, specifically in the ext4 file system, where possible corruption can occur when moving a directory. This happens because when renaming a...

PT-2025-18908 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.2.0-rc5 Description: A bug in the Linux kernel has been resolved, related to the erofs filesystem when using LZMA compression on HIGHMEM platforms. The issue causes a kernel NULL pointer dereference due to...

PT-2025-18807 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the Linux kernel on arm64 architecture, specifically the Qualcomm sc7280 device tree. If the PCIe controller is not marked as cache coherent, the kernel may...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the intel-ish-hid driver not properly canceling a work queue, which could lead to reuse after release...

PT-2025-18886

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version Description The issue is related to the RISC-V architecture in the Linux kernel, where a mutex lock is taken twice during SiFive errata patching, resulting in errors such as kernel NULL pointer...