Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from improper handling of the return value of createinformatblob, which could result in a null pointer dereference...

The vulnerability of the `open_cached_dir()` function in the `fs/smb/client/cached_dir.c` module allows a hacker to cause a service failure within the Linux operating system’s SMB kernel.

The vulnerability of the opencacheddir function in the fs/smb/client/cacheddir.c module, which is part of the SMB client kernel support in Linux operating systems, relates to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow an attacker t...

The vulnerability of the nft_use_inc_restore() function in the include/net/netfilter/nf_tables.h module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the nftuseincrestore function in the include/net.netfilter/nftables.h module of the Linux kernel is related to improper resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the time_travel_update_time() function in the arch/um/kernel/time.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the timetravelupdatetime function in the arch/um/kernel/time.c module of the Linux operating system’s kernel is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to trigger a service failure...

SUSE CVE-2025-40121

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: bytcrrt5651: Fix invalid quirk input mapping When an invalid value is passed via quirk option, currently bytcrrt5640 driver just ignores and leaves as is, which may lead to unepxected results like OOB access. This...

The vulnerability of the bpf_base_func_proto() function in the kernel/bpf/helpers.c module, which supports the BPF interpreter for the Linux operating system’s kernel, allows a hacker to trigger a service failure.

The vulnerability of the bpfbasefuncproto function in the kernel/bpf/helpers.c module, which supports the BPF interpreter for Linux kernel, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to trigger a service failure...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: Staging: media: atomisp: Fixed a stack buffer overflow in gmingetvarint When gmingetconfigvar calls efi.getvariable, and the EFI variable is larger than the expected buffer size, two behaviors combine to cause a stack buffer...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: sched: Fixed schednumafindnthcpu if the mask is offline. schednumafindnthcpu uses bsearch to find the “closest” CPU in scheddomainsnumamasks, given a CPU mask. However, the CPUs in the mask might not intersect if all CPUs in t...

UBUNTU-CVE-2025-40075

In the Linux kernel, the following vulnerability has been resolved: tcpmetrics: use dstdevnetrcu Replace three dstdev with a lockdep enabled helper...

EUVD-2025-36450

In the Linux kernel, the following vulnerability has been resolved: bpf: Explicitly check accesses to bpfsockaddr Syzkaller found a kernel warning on the following sockaddr program: 0: r0 = 0 1: r2 = u32 r1 +60 2: exit which triggers: verifier bug: error during ctx access conversion 0 This is...

CVE-2023-53719 serial: arc_uart: fix of_iomap leak in `arc_serial_probe`

In the Linux kernel, the following vulnerability has been resolved: serial: arcuart: fix ofiomap leak in arcserialprobe Smatch reports: drivers/tty/serial/arcuart.c:631 arcserialprobe warn: 'port-membase' from ofiomap not released on lines: 631. In arcserialprobe, if uartaddoneport fails,...

The vulnerability of the __split_huge_page_tail() function in the mm/huge_memory.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the splithugepagetail function in the mm/hugememory.c module of the Linux operating system is related to the premature release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2023-53667

CVE-2023-53667 affects the Linux kernel net/cdc_ncm path. The vulnerability arises when dwNtbOutMaxSize is lower than the calculated minimum but greater than zero, causing skb allocation in cdc_ncm_fill_tx_frame() to run out of space and potentially panic due to skb bounds checks. The patch/clamp...

CVE-2022-50517

CVE-2022-50517 : A Linux kernel issue in mm/huge_memory could clobber swp_entry_t during THP split, related to THP tail pages using page->private for swp_entry_t when folio_test_swapcache() is involved. The problem was observed during stress-ng mmap workloads after commit b653db77350c (“mm: Cl...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-410328)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-410328 advisory. In the Linux kernel, the following vulnerability has been resolved: erspan: make sure erspanbasehdr is present in skb-head syzbot reported a problem in ip6erspanrcv ...

EUVD-2025-25551

Malicious code in bioql PyPI...

EUVD-2025-27894

Malicious code in bioql PyPI...

EUVD-2023-59879

Malicious code in bioql PyPI...

SUSE CVE-2025-39914

In the Linux kernel, the following vulnerability has been resolved: tracing: Silence warning when chunk allocation fails in tracepidwrite Syzkaller trigger a fault injection warning: WARNING: CPU: 1 PID: 12326 at tracepointaddfunc+0xbfc/0xeb0 Modules linked in: CPU: 1 UID: 0 PID: 12326 Comm:...

The vulnerability of the st_lsm6dsx_read_fifo() function in the st_lsm6dsx_buffer.c component of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the stlsm6dsxreadfifo function in the stlsm6dsxbuffer.c component of the Linux kernel is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...