USN-7755-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Media drivers; - SPI subsystem; - USB core drivers; - NILFS2 file system; - IPv6 networking; - Network traffic...

CVE-2023-53361 LoongArch: mm: Add p?d_leaf() definitions

In the Linux kernel, the following vulnerability has been resolved: LoongArch: mm: Add p?dleaf definitions When I do LTP test, LTP test case ksm06 caused panic at breakksmpmdentry - pmdleaf Huge page table but False - ptepresent panic The reason is pmdleaf is not defined, So like commit...

CVE-2023-53338

CVE-2023-53338 affects the Linux kernel’s lwt/BPF xmit path. The vulnerability arises from BPF encap/xmit return values being misinterpreted by the xmit hook, causing use-after-free and kernel crashes as freed SKBs reach the neighbor subsystem. The supplied advisories indicate a fix that discards...

CVE-2023-53338

In the Linux kernel, the following vulnerability has been resolved: lwt: Fix return values of BPF xmit ops BPF encap ops can return different types of positive values, such like NETRXDROP, NETXMITCN, NETDEVTXBUSY, and so on, from function skbdoredirect and bpflwtxmitreroute. At the xmit hook, suc...

CVE-2022-50374

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcildisc,serdev: check percpuinitrwsem failure syzbot is reporting NULL pointer dereference at hciuartttyclose 1, for rcusyncenter is called without rcusyncinit due to hciuartttyopen ignoring percpuinitrwsem failure...

CVE-2022-50360

The CVE-2022-50360 entry concerns a Linux kernel flaw in drm/msm/dp where device-managed resources allocated after component binding could outlive the aggregate DRM device, risking resource leaks or failed binding if binding is retried. The root cause is improper lifetime management: EP (DP AUX) ...

PT-2025-38192

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.4.5 Description The Linux kernel contains a flaw in the networking subsystem related to the handling of IPv4 routes with network host ID nhid when using Marvell Prestera devices. Specifically, the issue arises...

PT-2025-38218

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists within the kernel's tracing subsystem, specifically concerning the handling of CPU buffers during write and swap operations. This issue occurs due to a race betwe...

PARSEC security subsystem Heap Buffer Overflow DoS

The vulnerability of the getmacuid function in the PARSEC security subsystem is related to improper memory release after its use. Exploiting this vulnerability can allow an attacker to cause a service failure...

PARSEC seq_empty Buffer Overflow DoS

The vulnerability of the seqempty function in the PARSEC security subsystem is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

PARSEC security subsystem Heap Buffer Overflow DoS

The vulnerability of the pdpmlrlobstackprintf function in the PARSEC security subsystem is related to reading data beyond the acceptable buffer size. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service failures...

psmac PARSEC DoS

The vulnerability of the PARSEC security subsystem’s psmac utility is related to improper memory release after its use. Exploiting this vulnerability can allow an attacker to cause a service failure...

pdpl-user PARSEC DoS

The vulnerability of the pdpl-user utility in the PARSEC security subsystem is related to improper memory release after its use. Exploiting this vulnerability can allow an attacker to cause a service failure...

psaud PARSEC DoS

The vulnerability of the psaud utility within the PARSEC security subsystem is related to improper memory release after its use. Exploiting this vulnerability can allow an attacker to cause a service failure...

PARSEC security subsystem DoS

The vulnerability of the defaultoptions and parsecmdline functions of the PARSEC security subsystem is related to improper memory release after their use. Exploiting this vulnerability can allow an attacker to cause a service failure...

pdp-ls PARSEC DoS

The vulnerability of the pdp-ls utility in the PARSEC security subsystem is related to improper memory release after its use. Exploiting this vulnerability can allow an attacker to cause a service failure...

pdp-id utility PARSEC DoS

The vulnerability of the pdp-id utility in the PARSEC security subsystem is related to improper memory release after its use. Exploiting this vulnerability can allow an attacker to cause a service failure...

PARSEC security subsystem Load Path Disclosure

The vulnerability of the loadpath function in the PARSEC security subsystem is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures...

PARSEC security subsystem Heap Buffer Overflow DoS

The vulnerability of the getoptions function in the PARSEC security subsystem is related to improper memory release after its use. Exploiting this vulnerability can allow an attacker to cause a service failure...

PARSEC security subsystem Memory Leak DoS

The vulnerability of the parselevcat function in the PARSEC security subsystem is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...