PT-2024-21573

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.7.0+ 58 Description A vulnerability in the Linux kernel has been resolved, where a bpf program using bpf probe read kernel to read from the vsyscall page invokes copy from kernel nofault, which in turn calls ge...

PT-2024-8400

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the drm/vmwgfx component of the Linux kernel, where the cleanup can be dispatched while the atomic update is still active. This leads to crashes because the buffe...

kernel: net/mlx5: E-Switch, Fix an Oops in error handling code

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, Fix an Oops in error handling code The error handling dereferences "vport". There is nothing we can do if it is an error pointer except returning the error code...

kernel: ALSA: ymfpci: Create card with device-managed snd_devm_card_new()

A flaw was found in the Linux kernel's ALSA ymfpci sound driver. During a previous refactoring commit that removed sndcardymfpciremove, the sndcardnew call was not updated to snddevmcardnew. This omission means sndcardfree is never called during module unload, leading to a kernel oops when...

kernel: cifs: fix oops during encryption

An out-of-bounds memory access vulnerability exists in the linux kernel, such that A stack-allocated buffer backed by vmalloc was passed into crypto code scatterwalkmapandcopy → memcpy where a cross-page write occurred. This ended up hitting a read-only mapping, causing a page-level fault and...

kernel: cifs: Fix oops due to uncleared server->smbd_conn in reconnect

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uncleared server-smbdconn in reconnect In smbddestroy, clear the server-smbdconn pointer after freeing the smbdconnection struct that it points to so that reconnection doesn't get confused...

kernel: net/mlx5: E-Switch, Fix an Oops in error handling code

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, Fix an Oops in error handling code The error handling dereferences "vport". There is nothing we can do if it is an error pointer except returning the error code...

kernel: octeontx2-af: Add validation for lmac type

A flaw was found in the octeontx2-af network driver within the Linux kernel where insufficient validation of the lmactypeid field from firmware during a physical link change can result in a kernel panic. Firmware may report an invalid lmactypeid, and because the kernel previously derived an...

kernel: ALSA: ymfpci: Create card with device-managed snd_devm_card_new()

A flaw was found in the Linux kernel's ALSA ymfpci sound driver. During a previous refactoring commit that removed sndcardymfpciremove, the sndcardnew call was not updated to snddevmcardnew. This omission means sndcardfree is never called during module unload, leading to a kernel oops when...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux SIG Cloud 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipvlan: out-of-bounds write caused by unclear skb-cb CVE-2023-3090 kernel: UAF in nftables when nftsetlookupglobal triggered after handling named and anonymous sets in batch requests...

PT-2025-41091

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel’s VMBus client driver has an issue where it attempts to access resources of the ACPI namespace root object, which has an all-ones handle. This can lead to a NULL pointer...

PT-2025-40215

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel where the ublk ctrl start dev function may fail to properly handle interruptions during queue setup. Specifically, if wait for completion interruptible ...

PT-2025-37649

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel where the system may fail to recover a device if queue setup is interrupted. Specifically, within the ublk ctrl end recovery function, interruption of...

PT-2025-38210

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to NFSv4.2 scratch handling for READ PLUS operations. The read code may send multiple requests using the same nfs pgio header, while nfs4 proc re...

PT-2025-37658

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A regression was introduced during the conversion to proc create single data in the Linux kernel, causing a segmentation fault when reading a file in /proc/bus/nubus. Specifically, readi...

PT-2025-38201

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s DRM scheduler related to handling GPU resets. The issue arises from an incorrect check of the scheduler's ready condition before calling timeout...

kernel: arm64: fix oops in concurrently setting insn_emulation sysctls

In the Linux kernel, the following vulnerability has been resolved: arm64: fix oops in concurrently setting insnemulation sysctls emulationprochandler changes table-data for procdointvecminmax and can generate the following Oops if called concurrently with itself: | Unable to handle kernel NULL...

PT-2025-40713

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s drm/i915 component related to handling encoder retrieval within the atomic state. Specifically, the intel get crtc new encoder function could lead to ...