kernel: Kernel: Denial of Service in pci_endpoint_test due to zero-length DMA mapping

A flaw was found in the Linux kernel's pciendpointtest module. A local attacker with low privileges could exploit this vulnerability by providing a zero-length Direct Memory Access DMA mapping to the dmamapsingle function. This improper input validation can lead to a kernel panic, resulting in a...

kernel: fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name

A flaw was found in the Linux kernel. A local user can trigger a kernel crash by performing specific memory operations involving hugetlb a memory management feature during the hot-removal of a memory device. This issue arises when the dumpmapping function attempts to access an invalid memory...

kernel: wifi: iwlwifi: mvm: don't leak a link on AP removal

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't leak a link on AP removal Release the link mapping resource in AP removal. This impacted devices that do not support the MLD API 9260 and down. On those devices, we couldn't start the AP again after the ...

kernel: mm: resolve faulty mmap_region() error path behaviour

In the Linux kernel, the following vulnerability has been resolved: mm: resolve faulty mmapregion error path behaviour The mmapregion function is somewhat terrifying, with spaghetti-like control flow and numerous means by which issues can arise and incomplete state, memory leaks and other...

kernel: ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context

A flaw was found in the Linux kernel's ACPI Platform Runtime Mechanism PRM functionality. The Platform Runtime Mechanism Translator PRMT incorrectly attempts to use conventional memory instead of runtime memory for EFI Extensible Firmware Interface runtime services, specifically for the PRM handl...

kernel: uprobes: fix kernel info leak via "[uprobes]" vma

In the Linux kernel, the following vulnerability has been resolved: uprobes: fix kernel info leak via "uprobes" vma xoladdvma maps the uninitialized page allocated by createxolarea into userspace. On some architectures x86 this memory is readable even without VMREAD, VMEXEC results in the same...

kernel: nfsd: map the EBADMSG to nfserr_io to avoid warning

In the Linux kernel, the following vulnerability has been resolved: nfsd: map the EBADMSG to nfserrio to avoid warning Ext4 will throw -EBADMSG through ext4readdir when a checksum error occurs, resulting in the following WARNING. Fix it by mapping EBADMSG to nfserrio. nfsdbufferedreaddir iterated...

kernel: mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0

Incorrect mappings in vmappagesrangenoflush in the Linux kernel, may lead to memory corruption...

DEBIAN-CVE-2025-37873

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix missing ring index trim on error path Commit under Fixes converted txprod to be free running but missed masking it on the Tx error path. This crashes on error conditions, for example when DMA mapping fails...

CVE-2025-37873

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix missing ring index trim on error path Commit under Fixes converted txprod to be free running but missed masking it on the Tx error path. This crashes on error conditions, for example when DMA mapping fails...

CVE-2025-37873 eth: bnxt: fix missing ring index trim on error path

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix missing ring index trim on error path Commit under Fixes converted txprod to be free running but missed masking it on the Tx error path. This crashes on error conditions, for example when DMA mapping fails...

CVE-2025-37873

The CVE-2025-37873 entry concerns the Linux kernel Ethernet driver for Broadcom/BNXT (eth: bnxt). The issue arises in the Tx path after a conversion to a free-running tx_prod, where masking on the Tx error path was missed, causing a crash on error conditions such as DMA mapping failures. The root...

CVE-2025-37873 eth: bnxt: fix missing ring index trim on error path

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix missing ring index trim on error path Commit under Fixes converted txprod to be free running but missed masking it on the Tx error path. This crashes on error conditions, for example when DMA mapping fails...

golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses

A flaw was found in the Go language standard library net/netip. The method Is IsPrivate, IsPublic, etc doesn't behave properly when working with IPv6 mapped to IPv4 addresses. The unexpected behavior can lead to integrity and confidentiality issues, specifically when these methods are used to...

CVE-2024-49842

Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions...

Qualcomm Chipsets 资源管理错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A resource management error vulnerability exists in Qualcomm Chipsets that stems from a global mapping list contention condition that could lead to memory corruption during concurrent SSR execution...

Qualcomm Chipsets 访问控制错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An access control error vulnerability exists in Qualcomm Chipsets that stems from improper API restrictions when mapping memory into the address space of a protected virtual machine, which could lead to memory corruption...

CVE-2023-53141

In the Linux kernel, the following vulnerability has been resolved: ila: do not generate empty messages in ilaxlatnlcmdgetmapping ilaxlatnlcmdgetmapping generates an empty skb, triggerring a recent sanity check 1. Instead, return an error code, so that user space can get it. 1 skbassertlen WARNIN...

CVE-2023-53084

In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Remove another errant put in error path drmgemshmemmmap doesn't own reference in error code path, resulting in the dma-buf shmem GEM object getting prematurely freed leading to a later use-after-free...

UBUNTU-CVE-2023-53141

In the Linux kernel, the following vulnerability has been resolved: ila: do not generate empty messages in ilaxlatnlcmdgetmapping ilaxlatnlcmdgetmapping generates an empty skb, triggerring a recent sanity check 1. Instead, return an error code, so that user space can get it. 1 skbassertlen WARNIN...