Linux Distros Unpatched Vulnerability : CVE-2025-40006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/hugetlb: fix folio is still mapped when deleted Migration may be raced with fallocating hole. removeinodesinglefolio will unmap the folio if the folio is sti...

Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.24.0 Release.

Red Hat OpenShift Dev Spaces 3.24.0 has been released. Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams and organizations. Dev Spaces runs in OpenShift and is well-suited for container-based development. The 3.24 release is based on...

ThreatsDay Bulletin: $176M Crypto Fine, Hacking Formula 1, Chromium Vulns, AI Hijack & More

Criminals don’t need to be clever all the time; they just follow the easiest path in: trick users, exploit stale components, or abuse trusted systems like OAuth and package registries. If your stack or habits make any of those easy, you’re already a target. This week’s ThreatsDay highlights show...

EUVD-2022-54678

In the Linux kernel, the following vulnerability has been resolved: zsmalloc: fix races between asynchronous zspage free and page migration The asynchronous zspage free worker tries to lock a zspage's entire page list without defending against page migration. Since pages which haven't yet been...

SUSE-SU-2025:3716-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49980: USB: gadget: fix use-after-free read in usbudcuevent bsc1245110. - CVE-2022-50233: Bluetooth: eir: Fix using strlen with hdev-devname,shortname...

SUSE CVE-2025-40006

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix folio is still mapped when deleted Migration may be raced with fallocating hole. removeinodesinglefolio will unmap the folio if the folio is still mapped. However, it's called without folio lock. If the folio is...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987656)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987656 advisory. In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix to add refcount once page is set private MM defined the rule 1 very clearly that once...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987597)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987597 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/proc: taskmmu.c: don't read mapcount for migration entry The syzbot reported the below BUG:...

EUVD-2025-35074

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix folio is still mapped when deleted Migration may be raced with fallocating hole. removeinodesinglefolio will unmap the folio if the folio is still mapped. However, it's called without folio lock. If the folio is...

CVE-2025-40006

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix folio is still mapped when deleted Migration may be raced with fallocating hole. removeinodesinglefolio will unmap the folio if the folio is still mapped. However, it's called without folio lock. If the folio is...

UBUNTU-CVE-2025-40006

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix folio is still mapped when deleted Migration may be raced with fallocating hole. removeinodesinglefolio will unmap the folio if the folio is still mapped. However, it's called without folio lock. If the folio is...

org.apache.syncope.core:syncope-core-logic (2.0.1), org.apache.syncope.core:syncope-core-migration (2.0.1) +8 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (2.0.1)

org.apache.syncope.core:syncope-core-spring MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-spring and may be impacted: - org.apache.syncope.core:syncope-core-logic 2.0.1 -...

org.apache.syncope.core:syncope-core-logic (2.0.2), org.apache.syncope.core:syncope-core-migration (2.0.2) +8 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (2.0.2)

org.apache.syncope.core:syncope-core-spring MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-spring and may be impacted: - org.apache.syncope.core:syncope-core-logic 2.0.2 -...

org.apache.syncope.core:syncope-core-logic (2.0.7), org.apache.syncope.core:syncope-core-migration (2.0.7) +20 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (2.0.7)

org.apache.syncope.core:syncope-core-spring MAVEN version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-spring and may be impacted: - org.apache.syncope.core:syncope-core-logic 2.0.7 -...

org.apache.syncope.core:syncope-core-logic (2.0.11), org.apache.syncope.core:syncope-core-migration (2.0.11) +24 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (2.0.11)

org.apache.syncope.core:syncope-core-spring MAVEN version 2.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-spring and may be impacted: - org.apache.syncope.core:syncope-core-logic 2.0.11 -...

org.apache.syncope.core:syncope-core-logic (2.0.0), org.apache.syncope.core:syncope-core-migration (2.0.0) +8 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (2.0.0)

org.apache.syncope.core:syncope-core-spring MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-spring and may be impacted: - org.apache.syncope.core:syncope-core-logic 2.0.0 -...

org.apache.syncope.core:syncope-core-logic (2.0.4), org.apache.syncope.core:syncope-core-migration (2.0.4) +17 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (2.0.4)

org.apache.syncope.core:syncope-core-spring MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-spring and may be impacted: - org.apache.syncope.core:syncope-core-logic 2.0.4 -...

org.apache.syncope.core:syncope-core-logic (2.0.12), org.apache.syncope.core:syncope-core-migration (2.0.12) +24 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (2.0.12)

org.apache.syncope.core:syncope-core-spring MAVEN version 2.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-spring and may be impacted: - org.apache.syncope.core:syncope-core-logic 2.0.12 -...

CVE-2025-40006

CVE-2025-40006 pertains to the Linux kernel mm/hugetlb subsystem. The issue arises when a folio becomes unmapped during a race between migration and hole allocation, where remove_inode_single_folio can unmap a folio only if the folio lock is held; if the folio migrates and the mapped PTE converts...

CVE-2025-40006 mm/hugetlb: fix folio is still mapped when deleted

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix folio is still mapped when deleted Migration may be raced with fallocating hole. removeinodesinglefolio will unmap the folio if the folio is still mapped. However, it's called without folio lock. If the folio is...