CVE-2025-68746

CVE-2025-68746 affects the Linux kernel SPI driver for the Tegra210 Quad (spi: tegra210-quad). The issue occurs when the CPU handling the QSPI IRQ thread becomes overly busy, causing the IRQ thread to potentially miss the timeout window. As a result, pending transfers can be marked as failed and ...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper timeout handling, which could cause the currxfer field to point to stale memory...

PT-2025-53180

In the Linux kernel, the following vulnerability has been resolved: media: mtk-jpeg: Fix use after free bug due to uncanceled work In mtk jpeg probe, &jpeg-job timeout work is bound with mtk jpeg job timeout work. Then mtk jpeg dec device run and mtk jpeg enc device run may be called to start the...

Linux Distros Unpatched Vulnerability : CVE-2025-68746

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: tegra210-quad: Fix timeout handling When the CPU that the QSPI interrupt handler runs on typically CPU 0 is excessively busy, it can lead to rare cases of...

PT-2025-53173

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The soundwire subsystem contains an issue related to enumeration completion. The subsystem utilizes completion structures to manage device enumeration, but the signaling mechanism is...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from command timeout followed by post-release reuse, and could lead to arbitrary code execution...

PT-2025-53012

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s SPI subsystem, specifically within the tegra210-quad driver. Under conditions of high CPU load on the processor handling QSPI interrupts typically CPU...

PT-2025-53020

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-09039-ga6afa4199d3d-dirty 18 Description The Linux kernel contained a use-after-free flaw within the ar5523 Wi-Fi driver. Specifically, the issue occurred in the ar5523 cmd function when a timeout occurred...

CLSA-2025-1766488019 kernel: Fix of 63 CVEs

scsi: target: iscsi: Fix timeout on deleted connection CVE-2025-38075 - tls: wait for pending async decryptions if tlsstrpmsghold fails CVE-2025-40176 - cloneprivatemnt: make sure that caller has CAPSYSADMIN in the right userns CVE-2025-38499 - rcu: Fix rcureadunlock deadloop due to IRQ work...

CVE-2025-27063

Memory corruption during video playback when video session open fails with time out error...

CVE-2025-27063

Memory corruption during video playback when video session open fails with time out error...

CVE-2025-27063

CVE-2025-27063: Memory corruption during video playback when a video session open fails with a timeout error is identified on Qualcomm video-driver components. Affected software involves the Qualcomm video-driver/video session handling; root cause referenced as memory corruption during failure to...

CVE-2025-27063 Use After Free in Video

Memory corruption during video playback when video session open fails with time out error...

EUVD-2025-204033

Memory corruption during video playback when video session open fails with time out error...

SUSE CVE-2025-68184

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Disable AFBC support on Mediatek DRM driver Commit c410fa9b07c3 "drm/mediatek: Add AFBC support to Mediatek DRM driver" added AFBC support to Mediatek DRM and enabled the 32x8/split/sparse modifier. However, this is...

io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

CVE-2025-68318

In the Linux kernel, the following vulnerability has been resolved: clk: thead: th1520-ap: set all AXI clocks to CLKISCRITICAL The AXI crossbar of TH1520 has no proper timeout handling, which means gating AXI clocks can easily lead to bus timeout and thus system hang. Set all AXI clock gates to...

CVE-2025-68318 clk: thead: th1520-ap: set all AXI clocks to CLK_IS_CRITICAL

In the Linux kernel, the following vulnerability has been resolved: clk: thead: th1520-ap: set all AXI clocks to CLKISCRITICAL The AXI crossbar of TH1520 has no proper timeout handling, which means gating AXI clocks can easily lead to bus timeout and thus system hang. Set all AXI clock gates to...

CVE-2025-68258

In the Linux kernel, the following vulnerability has been resolved: comedi: multiq3: sanitize config options in multiq3attach Syzbot identified an issue 1 in multiq3attach that induces a task timeout due to open or COMEDIDEVCONFIG ioctl operations, specifically, in the case of multiq3 driver. Thi...

CVE-2025-68258 comedi: multiq3: sanitize config options in multiq3_attach()

In the Linux kernel, the following vulnerability has been resolved: comedi: multiq3: sanitize config options in multiq3attach Syzbot identified an issue 1 in multiq3attach that induces a task timeout due to open or COMEDIDEVCONFIG ioctl operations, specifically, in the case of multiq3 driver. Thi...