CVE-2025-21976 fbdev: hyperv_fb: Allow graceful removal of framebuffer

In the Linux kernel, the following vulnerability has been resolved: fbdev: hypervfb: Allow graceful removal of framebuffer When a Hyper-V framebuffer device is unbind, hypervfb driver tries to release the framebuffer forcefully. If this framebuffer is in use it produce the following WARN and henc...

CVE-2025-21976

CVE-2025-21976 affects the Linux kernel fbdev/hyperv_fb driver. Unbinding a Hyper‑V framebuffer can trigger framebuffer_release while the framebuffer is in use, causing a WARN and potential failure to release resources. The fix moves framebuffer and memory release to fb_ops.fb_destroy for gracefu...

CVE-2025-21935 rapidio: add check for rio_add_net() in rio_scan_alloc_net()

In the Linux kernel, the following vulnerability has been resolved: rapidio: add check for rioaddnet in rioscanallocnet The return value of rioaddnet should be checked. If it fails, putdevice should be called to free the memory and give up the reference initialized in rioaddnet...

CVE-2025-21935 rapidio: add check for rio_add_net() in rio_scan_alloc_net()

In the Linux kernel, the following vulnerability has been resolved: rapidio: add check for rioaddnet in rioscanallocnet The return value of rioaddnet should be checked. If it fails, putdevice should be called to free the memory and give up the reference initialized in rioaddnet...

CVE-2025-21935

In CVE-2025-21935, the Linux kernel rapidio subsystem fixes a missing check in rio_scan_alloc_net(): the return value of rio_add_net() must be checked, and if it fails, put_device() should be called to free memory and drop the reference from rio_add_net(). This prevents potential memory leaks and...

CVE-2025-21931 hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio

In the Linux kernel, the following vulnerability has been resolved: hwpoison, memoryhotplug: lock folio before unmap hwpoisoned folio Commit b15c87263a69 "hwpoison, memoryhotplug: allow hwpoisoned pages to be offlined add page poison checks in domigraterange in order to make offline hwpoisoned pa...

CVE-2025-21931 hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio

In the Linux kernel, the following vulnerability has been resolved: hwpoison, memoryhotplug: lock folio before unmap hwpoisoned folio Commit b15c87263a69 "hwpoison, memoryhotplug: allow hwpoisoned pages to be offlined add page poison checks in domigraterange in order to make offline hwpoisoned pa...

CVE-2025-21932 mm: abort vma_modify() on merge out of memory failure

In the Linux kernel, the following vulnerability has been resolved: mm: abort vmamodify on merge out of memory failure The remainder of vmamodify relies upon the vmg state remaining pristine after a merge attempt. Usually this is the case, however in the one edge case scenario of a merge attempt...

CVE-2025-21931

CVE-2025-21931 affects the Linux kernel memory hotplug path (hwpoison) and was fixed by ensuring folio lock is held before unmapping hwpoisoned folio. The fix adds the folio lock around unmap calls in do_migrate_range/try_to_unmap to prevent the kernel BUG triggered when folio is not locked. The ...

CVE-2025-21928

CVE-2025-21928 : In the Linux kernel HID intel-ish-hid driver, a use-after-free issue in ishtp_hid_remove() can occur, leading to a random crash minutes after the driver is removed. The root cause is improper memory handling where the code frees driver_data inside the loop that destroys HID devic...

CVE-2025-21928 HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in ishtphidremove The system can experience a random crash a few minutes after the driver is removed. This issue occurs due to improper handling of memory freeing in the ishtphidremove...

CVE-2025-21907

CVE-2025-21907 documents a Linux kernel memory-management issue: during folio migration, unmap_poisoned_folio() must set TTU_HWPOISON for anon folio (and align policy with hwpoison_user_mappings for pagecache). The patch series mm: memory_failure: unmap poisoned folio during migrate properly fixe...

USN-7379-2 linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - x86...

Vulnerabilities fixed in Apple iOS and iPadOS

Apple has fixed several vulnerabilities in iOS and iPadOS. The vulnerabilities include memory management issues, unauthorized access to sensitive user data, and the ability for applications to escape their sandbox environments. These vulnerabilities could lead to unauthorized access, data...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a race condition in the mm module when userfaultfdmove handles swap caching...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure of vmamodify to abort a merge operation when there is insufficient memory, which could result in...

CVE-2025-30427

A use-after-free issue was addressed with improved memory management. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, Safari 18.4. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2025-30427

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected Safari crash...

DEBIAN-CVE-2025-30427

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected Safari crash...

UBUNTU-CVE-2025-30427

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected Safari crash...