CVE-2025-23161 PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type

In the Linux kernel, the following vulnerability has been resolved: PCI: vmd: Make vmddev::cfglock a rawspinlockt type The access to the PCI config space via pciops::read and pciops::write is a low-level hardware access. The functions can be accessed with disabled interrupts even on PREEMPTRT. Th...

CVE-2025-23155

The CVE-2025-23155 issue affects the Linux kernel’s STMicroelectronics stmmac driver. In stmmac_request_irq_multi_msi(), a pointer to the stack variable cpu_mask is passed to irq_set_affinity_hint(), which is stored in irq_desc->affinity_hint. After the function returns, the pointer becomes da...

CVE-2025-23154

In the Linux kernel, the following vulnerability has been resolved: iouring/net: fix ioreqpostcqe abuse by send bundle 114.987980 T5313 WARNING: CPU: 6 PID: 5313 at iouring/iouring.c:872 ioreqpostcqe+0x12e/0x4f0 114.991597 T5313 RIP: 0010:ioreqpostcqe+0x12e/0x4f0 115.001880 T5313 Call Trace:...

CVE-2025-23151

Technical details for CVE-2025-23151 are not provided in the connected documents. The initial description mentions a Linux kernel fix for an MHI bus/host race, but there are no specifics on affected products, vectors, or remediation in the supplied sources. Monitor for updates.

CVE-2025-23144 backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()

In the Linux kernel, the following vulnerability has been resolved: backlight: ledbl: Hold ledaccess lock when calling ledsysfsdisable Lockdep detects the following issue on led-backlight removal: 142.315935 ------------ cut here ------------ 142.315954 WARNING: CPU: 2 PID: 292 at...

PT-2025-18586

Name of the Vulnerable Software and Affected Versions Linux kernel versions 4.18.0 through 4.18.0-348.el8.x86 64 Description A possible crash in the bnxt en driver has been resolved. The issue occurred during the error recovery sequence when the rtnl lock was not held for the entire duration, and...

PT-2025-18606

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel's tracing subsystem has been resolved. The issue arises when the number of listed CPUs exceeds the actual number of existing CPUs. The tracing subsyst...

PT-2025-18567

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A semaphore deadlock can occur in the Linux kernel if nilfs get block detects metadata corruption while locating data blocks and a superblock writeback occurs at the same time. This...

PT-2025-18601 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the KVM Kernel-based Virtual Machine component. The issue involves the initialization of locks in the gfn to pfn cache...

PT-2025-18594 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the bpf and sockmap components. The issue causes a warning when running the test sockmap selftests, specifically a sk-...

PT-2025-18647 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A NULL pointer problem in the free mr init function has been resolved. The issue occurs in a concurrent scenario, resulting in a NULL pointer dereference at virtual address...

PT-2025-18535

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the mISDN component. The issue involved the misuse of put device in mISDN register device, where a reference was...

PT-2025-18541

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc3+ Description A vulnerability in the Linux kernel has been resolved, specifically in the libata-transport module. The issue arises from the lack of error handling in the ata tlink add function, where the...

Advisory ROSA-SA-2025-2853

Software: openssl 1.1.1k OS: ROSA Virtualization 2.1 packageevrstring: openssl-1.1.1.1k-14.0.1.rv3 CVE-ID: CVE-2024-5535 BDU-ID: 2024-06988 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the SSLselectnextproto function of the TLS and SSL OpenSSL protocol toolkit is related to information disclosure...

Advisory ROSA-SA-2025-2852

Software: modhttp2 1.15.7 OS: ROSA Virtualization 2.1 packageevrstring: modhttp2-1.15.7-10.rv3.3 CVE-ID: CVE-2023-25690 BDU-ID: 2023-01738 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the modproxy module of the Apache HTTP Server web server is related to flaws in the handling of the...

Important: kernel

Issue Overview: A use-after-free flaw was found in vcsread in drivers/tty/vt/vcscreen.c in vcscreen in the Linux Kernel. In this flaw an attacker with local user access may lead to a system crash or a leak of internal kernel information. CVE-2023-3567 In the Linux kernel, the following...

valkey-8.0.3-1.1 on GA media (moderate)

valkey-8.0.3-1.1 on GA media Announcement ID: openSUSE-SU-2025:15035-1 Rating: moderate Cross-References: CVE-2025-21605 CVSS scores: CVE-2025-21605 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-21605 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

CVE-2025-32817

A Improper Link Resolution vulnerability CWE-59 in the SonicWall Connect Tunnel Windows 32 and 64 bit client, this results in unauthorized file overwrite, potentially leading to denial of service or file corruption...

Dell Trusted Device Backlink Vulnerability

Dell Trusted Device is an application from Dell USA. Dell Trusted Device suffers from a backlink vulnerability that stems from improper link resolution and can be exploited by an attacker to cause an elevation of privilege...

SonicWall NetExtender Windows client Improper Link Resolution Vulnerability

SonicWALL NetExtender Windows client is a Windows-based SSL VPN Virtual Private Network client application from SonicWALL USA. The SonicWALL NetExtender Windows client suffers from an improper link resolution vulnerability that stems from improper link resolution, which can be exploited by an...