Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from iavf not properly using internal state release traffic IRQs, which could lead to interrupt leakage...

CVE-2025-40321

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode Currently, whenever there is a need to transmit an Action frame, the brcmfmac driver always uses the P2P vif to send the "actframe" IOVAR to firmware. Th...

Vulnerability of the bond_setup_by_slave() function in the drivers/net/bonding/bond_main.c module – a Linux kernel network adapter driver support mechanism that allows a hacker to cause a service failure

Vulnerability of the bondsetupbyslave function in the drivers/net/bonding/bondmain.c module – The Linux kernel’s network adapter support driver is vulnerable due to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause servic...

Vulnerability of the ipvlan_addr_lookup() function in the drivers/net/ipvlan/ipvlan_core.c module – A driver for supporting network adapters in the Linux kernel, which allows a hacker to cause a service failure

Vulnerability of the ipvlanaddrlookup function in the drivers/net/ipvlan/ipvlancore.c module – The Linux kernel’s network adapter support driver has a buffer overflow vulnerability. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the Linux operating system’s network driver kernel allows attackers to compromise the confidentiality and accessibility of protected information.

The vulnerability of the Linux operating system’s kernel network driver is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to compromise the confidentiality and accessibility of the protected information...

CVE-2025-40250

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Clean up only new IRQ glue on requestirq failure The mlx5irqalloc function can inadvertently free the entire rmap and end up in a crash1 when the other threads tries to access this, when requestirq fails due to exhauste...

kernel: i40e: fix idx validation in config queues msg

A flaw was found in the Linux kernel in the Intel i40e network driver such that in the function i40evcconfigqueuesmsg, when iterating over vf-chidx, the idx value is not properly validated against the range of active/initialized traffic classes TCs. An attacker with local privileges could supply ...

SUSE-SU-2025:21080-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after bsc1238472. - CVE-2025-38653: proc: use the same treatment to check proclseek as ones for procreaditer...

kernel: i40e: fix idx validation in config queues msg

A flaw was found in the Linux kernel in the Intel i40e network driver such that in the function i40evcconfigqueuesmsg, when iterating over vf-chidx, the idx value is not properly validated against the range of active/initialized traffic classes TCs. An attacker with local privileges could supply ...

kernel: i40e: fix idx validation in config queues msg

A flaw was found in the Linux kernel in the Intel i40e network driver such that in the function i40evcconfigqueuesmsg, when iterating over vf-chidx, the idx value is not properly validated against the range of active/initialized traffic classes TCs. An attacker with local privileges could supply ...

kernel: i40e: fix idx validation in config queues msg

A flaw was found in the Linux kernel in the Intel i40e network driver such that in the function i40evcconfigqueuesmsg, when iterating over vf-chidx, the idx value is not properly validated against the range of active/initialized traffic classes TCs. An attacker with local privileges could supply ...

kernel security update

4.18.0-553.85.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

CLSA-2025-1763722365 kernel: Fix of 62 CVEs

wifi: mwifiex: Fix OOB and integer underflow when rx packets CVE-2023-53226 CVE-2023-53226 - wifi: mac80211: check S1G action frame size CVE-2023-53257 CVE-2023-53257 - wifi: cfg80211: fix use-after-free in cmpbss CVE-2025-39864 CVE-2025-39864 - partitions: mac: fix handling of bogus partition...

kernel: i40e: fix idx validation in config queues msg

A flaw was found in the Linux kernel in the Intel i40e network driver such that in the function i40evcconfigqueuesmsg, when iterating over vf-chidx, the idx value is not properly validated against the range of active/initialized traffic classes TCs. An attacker with local privileges could supply ...

net: lantiq_xrx200: restore buffer if memory allocation failed

...

The vulnerability of the fwnode_mdiobus_registerPhy() function in the drivers/net/mdio/fwnode_mdio.c module of the Linux network device driver for MDIO chipsets allows a attacker to cause a service failure.

The vulnerability of the fwnodemdiobusregisterPhy function in the drivers/net/mdio/fwnodemdio.c module of the Linux network device driver for MDIO chipsets is related to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability could allow an attacker ...

net/mlx5: LAG, fix logic over MLX5_LAG_FLAG_NDEVS_READY

...

CVE-2025-40189

The CVE-2025-40189 issue affects the Linux kernel’s LAN78xx USB Ethernet driver (drivers/net/usb/lan78xx.c). A read_raw_eeprom timeout (-ETIMEDOUT) could be obscured in the fallthrough path after attempting to restore LED pin configurations, causing the data buffer to be treated as valid despite ...

AZL-78392 CVE-2025-40164 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix using smpprocessorid in preemptible code warnings Syzbot reported the following warning: BUG: using smpprocessorid in preemptible 00000000 code: dhcpcd/2879 caller is usbnetskbreturn+0x74/0x490...

CVE-2025-40140

In the Linux kernel, the following vulnerability has been resolved: net: usb: Remove disruptive netifwakequeue in rtl8150setmulticast syzbot reported WARNING in rtl8150startxmit/usbsubmiturb. This is the sequence of events that leads to the warning: rtl8150startxmit netifstopqueue;...