CVE-2023-54268 debugobjects: Don't wake up kswapd from fill_pool()

In the Linux kernel, the following vulnerability has been resolved: debugobjects: Don't wake up kswapd from fillpool syzbot is reporting a lockdep warning in fillpool because the allocation from debugobjects is using GFPATOMIC, which is GFPHIGH | GFPKSWAPDRECLAIM and therefore tries to wake up...

CVE-2023-54231 net: libwx: fix memory leak in wx_setup_rx_resources

In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix memory leak in wxsetuprxresources When wxallocpagepool failed in wxsetuprxresources, it doesn't release DMA buffer. Add dmafreecoherent in the error path to release the DMA buffer...

CVE-2023-54216 net/mlx5e: TC, Fix using eswitch mapping in nic mode

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Fix using eswitch mapping in nic mode Cited patch is using the eswitch object mapping pool while in nic mode where it isn't initialized. This results in the trace below 0. Fix that by using either nic or eswitch...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992456)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992456 advisory. In the Linux kernel, the following vulnerability has been resolved: pagepool: avoid infinite loop to schedule delayed worker We noticed the kworker in...

PT-2025-54097

In the Linux kernel, the following vulnerability has been resolved: debugobjects: Don't wake up kswapd from fill pool syzbot is reporting a lockdep warning in fill pool because the allocation from debugobjects is using GFP ATOMIC, which is GFP HIGH | GFP KSWAPD RECLAIM and therefore tries to wake...

PT-2025-54476

CVE-2024-58242 - I cannot create a title for a non-existent vulnerability. CVE ID : CVE-2024-58242 Published : Dec. 30, 2025, 1:16 p.m. | 47 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was in a CNA pool that was not assigned ...

PT-2025-54045

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Fix using eswitch mapping in nic mode Cited patch is using the eswitch object mapping pool while in nic mode where it isn't initialized. This results in the trace below 0. Fix that by using either nic or eswitch...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992428)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992428 advisory. In the Linux kernel, the following vulnerability has been resolved: dm thin: fix use-after-free crash in dmsmregisterthresholdcallback Fault inject on pool metadata...

PT-2025-54478

CVE-2024-58244 - Apache None CVE ID : CVE-2024-58244 Published : Dec. 30, 2025, 1:16 p.m. | 47 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was in a CNA pool that was not assigned to any issues during 2024. Notes: none...

PT-2025-54477

CVE-2024-58243 - None CVE ID : CVE-2024-58243 Published : Dec. 30, 2025, 1:16 p.m. | 47 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was in a CNA pool that was not assigned to any issues during 2024. Notes: none. Severity: 0.0...

PT-2025-54480

CVE-2024-58246 - No CVE title to write! CVE ID : CVE-2024-58246 Published : Dec. 30, 2025, 1:16 p.m. | 47 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was in a CNA pool that was not assigned to any issues during 2024. Notes:...

SUSE CVE-2025-68735

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Prevent potential UAF in group creation This commit prevents the possibility of a use after free issue in the GROUPCREATE ioctl function, which arose as pointer to the group is accessed in that ioctl function after...

EUVD-2025-205221

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix improper freeing of purex item In qla2xxxprocesspurlsiocb, an item is allocated via qla27xxcopymultiplepkt, which internally calls qla24xxallocpurexitem. The qla24xxallocpurexitem function may return a...

EUVD-2025-205227

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Prevent potential UAF in group creation This commit prevents the possibility of a use after free issue in the GROUPCREATE ioctl function, which arose as pointer to the group is accessed in that ioctl function after...

AZL-73069 CVE-2025-68741 affecting package kernel for versions less than 6.6.121.1-1

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix improper freeing of purex item In qla2xxxprocesspurlsiocb, an item is allocated via qla27xxcopymultiplepkt, which internally calls qla24xxallocpurexitem. The qla24xxallocpurexitem function may return a...

CVE-2025-68741

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix improper freeing of purex item In qla2xxxprocesspurlsiocb, an item is allocated via qla27xxcopymultiplepkt, which internally calls qla24xxallocpurexitem. The qla24xxallocpurexitem function may return a...

UBUNTU-CVE-2022-50752

In the Linux kernel, the following vulnerability has been resolved: md/raid5: Remove unnecessary bioput in raid5readonechunk When running chunk-sized reads on disks with badblocks duplicate bio free/puts are observed: ============================================================================= B...

CVE-2022-50756 nvme-pci: fix mempool alloc size

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix mempool alloc size Convert the max size to bytes to match the units of the divisor that calculates the worst-case number of PRP entries. The result is used to determine how many PRP Lists are required. The code was...

CVE-2025-68741

CVE-2025-68741 affects the Linux kernel scsi/qla2xxx driver. The issue arises in qla2xxx_process_purls_iocb() where an item allocated via qla27xx_copy_multiple_pkt() may be freed with kfree() even if it came from a per-adapter pre-allocated pool, causing potential memory corruption. The fix uses ...

CVE-2025-68735 drm/panthor: Prevent potential UAF in group creation

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Prevent potential UAF in group creation This commit prevents the possibility of a use after free issue in the GROUPCREATE ioctl function, which arose as pointer to the group is accessed in that ioctl function after...