UBUNTU-CVE-2025-38252

In the Linux kernel, the following vulnerability has been resolved: cxl/ras: Fix CPER handler device confusion By inspection, cxlcperhandleproterr is making a series of fragile assumptions that can lead to crashes: 1/ It assumes that endpoints identified in the record are a CXL-type-3 device,...

webkitgtk: Memory corruption issue leading to arbitrary code execution

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution...

PT-2025-33580

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw where LEDs are registered for generic PHYs even when a driver is not present. This can lead to a deadlock during the registration or unregistration of...

DEBIAN-CVE-2025-38234

In the Linux kernel, the following vulnerability has been resolved: sched/rt: Fix race in pushrttask Overview ======== When a CPU chooses to call pushrttask and picks a task to push to another CPU's runqueue then it will call findlocklowestrq method which would take a double lock on both CPUs'...

The vulnerability of the Linux operating system’s kernel, related to insufficient locking of resources, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to insufficient locking of resources. Exploiting this vulnerability can allow a perpetrator to cause service failures...

The vulnerability of the ext4_ind_migrate() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ext4indmigrate function in the Linux operating system is related to insufficient locking mechanisms. Exploiting this vulnerability could allow an attacker to trigger a service failure...

CVE-2025-38132

In the Linux kernel, the following vulnerability has been resolved: coresight: holding cscfgcsdevlock while removing cscfg from csdev There'll be possible race scenario for coresight config: CPU0 CPU1 perf enable load module cscfgloadconfigsets activate config. // sysfs sysactivecnt == 1...

CVE-2025-38101

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix buffer locking in ringbuffersubbuforderset Enlarge the critical section in ringbuffersubbuforderset to ensure that error handling takes place with per-buffer mutex held, thus preventing list corruption and other...

CVE-2025-38132 coresight: holding cscfg_csdev_lock while removing cscfg from csdev

In the Linux kernel, the following vulnerability has been resolved: coresight: holding cscfgcsdevlock while removing cscfg from csdev There'll be possible race scenario for coresight config: CPU0 CPU1 perf enable load module cscfgloadconfigsets activate config. // sysfs sysactivecnt == 1...

CVE-2025-38132 coresight: holding cscfg_csdev_lock while removing cscfg from csdev

In the Linux kernel, the following vulnerability has been resolved: coresight: holding cscfgcsdevlock while removing cscfg from csdev There'll be possible race scenario for coresight config: CPU0 CPU1 perf enable load module cscfgloadconfigsets activate config. // sysfs sysactivecnt == 1...

CVE-2025-38132

CVE-2025-38132 : Linux kernel coresight race condition when removing cscfg from csdev. The issue occurs if a module load and config deactivate path races with iterating/removing config_csdev_list entries while holding csdev->cscfg_csdev_lock, allowing an entry delete to race with an active con...

CVE-2025-38101

CVE-2025-38101 is publicly addressed in the openSUSE/SUSE advisory for the Linux kernel. The issue concerns the ring-buffer subsystem, specifically the function ring_buffer_subbuf_order_set(), where the critical section was enlarged to ensure error handling runs with the per-buffer mutex held, pr...

CVE-2025-38101 ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set()

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix buffer locking in ringbuffersubbuforderset Enlarge the critical section in ringbuffersubbuforderset to ensure that error handling takes place with per-buffer mutex held, thus preventing list corruption and other...

CVE-2025-38101

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix buffer locking in ringbuffersubbuforderset Enlarge the critical section in ringbuffersubbuforderset to ensure that error handling takes place with per-buffer mutex held, thus preventing list corruption and other...

CVE-2025-38101 ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set()

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix buffer locking in ringbuffersubbuforderset Enlarge the critical section in ringbuffersubbuforderset to ensure that error handling takes place with per-buffer mutex held, thus preventing list corruption and other...

The vulnerability of the UFS driver in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the UFS driver in the Linux operating system is related to errors during thread locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from improper buffer locking by ring-buffer in ringbuffersubbuforderset...

The vulnerability of the task_tick_mm_cid() function in the kernel/sched/core.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the tasktickmmcid function in the kernel/sched/core.c component of the Linux operating system is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the fs/proc component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the fs/proc component in the Linux operating system’s kernel is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the s390/dasd component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the s390/dasd component in the Linux operating system is related to insufficient locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...