10797 matches found
CVE-2025-38719
The CVE-2025-38719 entry concerns the Linux kernelnet hibmcge: when the network port is down, a released queue can yield ring->len = 0, triggering a division by zero in hbg_get_queue_used_num() called from debugfs. The provided patch adds a guard: if ring->len is 0, hbg_get_queue_used_num()...
CVE-2025-38719 net: hibmcge: fix the division by zero issue
In the Linux kernel, the following vulnerability has been resolved: net: hibmcge: fix the division by zero issue When the network port is down, the queue is released, and ring-len is 0. In debugfs, hbggetqueueusednum will be called, which may lead to a division by zero issue. This patch adds a...
CVE-2025-38719 net: hibmcge: fix the division by zero issue
In the Linux kernel, the following vulnerability has been resolved: net: hibmcge: fix the division by zero issue When the network port is down, the queue is released, and ring-len is 0. In debugfs, hbggetqueueusednum will be called, which may lead to a division by zero issue. This patch adds a...
CVE-2025-38695
CVE-2025-38695 affects the Linux kernel SCSI lpfc, where lpfc_sli4_vport cleanup can run before sli4_hba.hdwqs are allocated if lpfc_sli4_read_rev() fails. This may cause a NULL pointer dereference when acquiring abts_io_buf_list_lock for the first hardware queue. The fix adds a NULL pointer chec...
CVE-2025-38695 scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Check for hdwq null ptr when cleaning up lpfcvport structure If a call to lpfcsli4readrev from lpfcsli4hbasetup fails, the resultant cleanup routine lpfcsli4vportdeletefcpxriaborted may occur before sli4hba.hdwqs are...
CVE-2025-38695 scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Check for hdwq null ptr when cleaning up lpfcvport structure If a call to lpfcsli4readrev from lpfcsli4hbasetup fails, the resultant cleanup routine lpfcsli4vportdeletefcpxriaborted may occur before sli4hba.hdwqs are...
wifi: rtl818x: Kill URBs before clearing tx status queue
...
workqueue: Put the pwq after detaching the rescuer from the pool
...
tls: always refresh the queue when reading sock
...
drm/sched: Increment job count before swapping tail spsc queue
...
net/sched: sch_qfq: Fix race condition on qfq_aggregate
...
blk-mq: fix IO hang from sbitmap wakeup race
...
In the Linux kernel through 6.7.1, there is a use-after-free in cec_queue_msg_fh, related to drivers/media/cec/core/cec-adap.c and drivers/media/cec/core/cec-api.c.
...
RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers
...
RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error
...
scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer()
...
blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
...
vmxnet3: unregister xdp rxq info in the reset path
...