CVE-2025-68774

A race condition was found in the Linux kernel's HFS+ filesystem. When sync and link are called concurrently, two threads may attempt to create the same bnode simultaneously. If one thread reuses a bnode newly created by another thread without properly incrementing the reference count, a subseque...

CVE-2025-68779

A use-after-free vulnerability was found in the Mellanox mlx5 Ethernet driver in the Linux kernel. The PSP Platform Security Processor component is unregistered twice during device removal - once in mlx5eremove and again in mlx5eniccleanup. This double unregistration causes a refcount underflow,...

SUSE CVE-2025-68779

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Avoid unregistering PSP twice PSP is unregistered twice in: mlx5eremove - mlx5epspunregister mlx5eniccleanup - mlx5epspunregister This leads to a refcount underflow in some conditions: ------------ cut here -----------...

CVE-2025-71107

In the Linux kernel, the following vulnerability has been resolved: f2fs: ensure node page reads complete before f2fsputsuper finishes Xfstests generic/335, generic/336 sometimes crash with the following message: F2FS-fs dm-0: detect filesystem reference count leak during umount, type: 9, count: ...

SUSE CVE-2025-71084

In the Linux kernel, the following vulnerability has been resolved: RDMA/cm: Fix leaking the multicast GID table reference If the CM ID is destroyed while the CM event for multicast creating is still queued the cancelworksync will prevent the work from running which also prevents destroying the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001690)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001690 advisory. In the Linux kernel before 5.17.1, a refcount leak bug was found in net/llc/afllc.c. Tenable has extracted the preceding description block directly from the Unity...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001398)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001398 advisory. pepsockaccept in net/phonet/pep.c in the Linux kernel through 5.15.8 has a refcount leak. Tenable has extracted the preceding description block directly from the Uni...

CVE-2025-68779

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Avoid unregistering PSP twice PSP is unregistered twice in: mlx5eremove - mlx5epspunregister mlx5eniccleanup - mlx5epspunregister This leads to a refcount underflow in some conditions: ------------ cut here -----------...

AZL-74456 CVE-2025-68775 affecting package kernel for versions less than 6.6.121.1-1

In the Linux kernel, the following vulnerability has been resolved: net/handshake: duplicate handshake cancellations leak socket When a handshake request is cancelled it is removed from the handshakenet-hnrequests list, but it is still present in the handshakerhashtbl until it is destroyed. If a...

AZL-74445 CVE-2025-68774 affecting package kernel for versions less than 6.6.121.1-1

In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix missing hfsbnodeget in hfsbnodecreate When sync and link are called concurrently, both threads may enter hfsbnodefind without finding the node in the hash table and proceed to create it. Thread A: hfspluswriteinode -...

CVE-2025-68774

In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix missing hfsbnodeget in hfsbnodecreate When sync and link are called concurrently, both threads may enter hfsbnodefind without finding the node in the hash table and proceed to create it. Thread A: hfspluswriteinode -...

CVE-2025-68779

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Avoid unregistering PSP twice PSP is unregistered twice in: mlx5eremove - mlx5epspunregister mlx5eniccleanup - mlx5epspunregister This leads to a refcount underflow in some conditions: ------------ cut here -----------...

UBUNTU-CVE-2025-68775

In the Linux kernel, the following vulnerability has been resolved: net/handshake: duplicate handshake cancellations leak socket When a handshake request is cancelled it is removed from the handshakenet-hnrequests list, but it is still present in the handshakerhashtbl until it is destroyed. If a...

UBUNTU-CVE-2025-68774

In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix missing hfsbnodeget in hfsbnodecreate When sync and link are called concurrently, both threads may enter hfsbnodefind without finding the node in the hash table and proceed to create it. Thread A: hfspluswriteinode -...

UBUNTU-CVE-2025-68779

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Avoid unregistering PSP twice PSP is unregistered twice in: mlx5eremove - mlx5epspunregister mlx5eniccleanup - mlx5epspunregister This leads to a refcount underflow in some conditions: ------------ cut here -----------...

CVE-2025-68779

The CVE-2025-68779 issue concerns the Linux kernel mlx5e/mlx5_core components (Mellanox ConnectX drivers) where PSP (Platform Security Processor) cleanup is performed twice during device removal. The double unregistration occurs via _mlx5e_remove -> mlx5e_psp_unregister and mlx5e_nic_cleanup -...

CVE-2025-68779 net/mlx5e: Avoid unregistering PSP twice

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Avoid unregistering PSP twice PSP is unregistered twice in: mlx5eremove - mlx5epspunregister mlx5eniccleanup - mlx5epspunregister This leads to a refcount underflow in some conditions: ------------ cut here -----------...

CVE-2025-68779 net/mlx5e: Avoid unregistering PSP twice

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Avoid unregistering PSP twice PSP is unregistered twice in: mlx5eremove - mlx5epspunregister mlx5eniccleanup - mlx5epspunregister This leads to a refcount underflow in some conditions: ------------ cut here -----------...

CVE-2025-68775 net/handshake: duplicate handshake cancellations leak socket

In the Linux kernel, the following vulnerability has been resolved: net/handshake: duplicate handshake cancellations leak socket When a handshake request is cancelled it is removed from the handshakenet-hnrequests list, but it is still present in the handshakerhashtbl until it is destroyed. If a...

CVE-2025-68775

CVE-2025-68775 affects the Linux kernel’s net/handshake code. A duplicate handshake cancellation can leave the handshake entry in the rhashtbl and, if a second cancellation occurs without HANDSHAKE_F_REQ_COMPLETED being set, lead to a refcount underflow on the socket. The issue arises when a canc...