Linux Distros Unpatched Vulnerability : CVE-2023-53777

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - erofs: kill hooked chains to avoid loops on deduplicated compressed images After heavily stressing EROFS with several images which include a hand-crafted image ...

Linux Distros Unpatched Vulnerability : CVE-2022-50651

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ethtool: eeprom: fix null-deref on genlinfo in dump The similar fix as commit 46cdedf2a0fa ethtool: pse-pd: fix null-deref on genlinfo in dump is also needed fo...

CVE-2025-59030

An attacker can trigger the removal of cached records by sending a NOTIFY query over TCP. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to...

CVE-2023-53863

A kernel information leak vulnerability was found in the netlink FDB Forwarding Database dump functionality in the Linux kernel. The code incorrectly hard-codes ETHALEN 6 bytes for device addresses, but some network devices have shorter addresses e.g., 4 bytes. When dumping FDB entries for such...

CVE-2022-50658

A memory leak vulnerability was found in the Qualcomm cpufreq driver in the Linux kernel. When the speedbin length is incorrect, the error handling path fails to free the allocated speedbin buffer, leading to a memory leak. Over time, this can cause resource exhaustion and system instability...

CVE-2022-50672

A vulnerability was found in the Xilinx ZynqMP IPI mailbox driver in the Linux kernel. When deviceregister fails, two issues occur: the name allocated by devsetname is leaked, and a subsequent call to deviceunregister in zynqmpipifreemboxes causes a kernel crash when attempting to remove a device...

CVE-2022-50673

A use-after-free vulnerability was found in the ext4 filesystem's orphan inode cleanup routine in the Linux kernel. When ext4inodeattachjinode fails with -ENOMEM during orphan cleanup at mount time, the error is not properly propagated. The inode is freed via iput, but the orphan list still...

CVE-2025-14323

Privilege escalation in the DOM: Notifications component. This vulnerability affects Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...

CVE-2023-53862

In the Linux kernel, the following vulnerability has been resolved: hfs: fix missing hfsbnodeget in hfsbnodecreate Syzbot found a kernel BUG in hfsbnodeput: kernel BUG at fs/hfs/bnode.c:466! invalid opcode: 0000 1 PREEMPT SMP KASAN CPU: 0 PID: 3634 Comm: kworker/u4:5 Not tainted...

CVE-2023-53833

A NULL pointer dereference vulnerability was found in the Intel i915 graphics driver in the Linux kernel. The intelatomicgetnewcrtcstate function can return NULL if the CRTC state was not previously obtained via intelatomicgetcrtcstate, but the return value was not checked before use. This leads ...

CVE-2023-53836

A use-after-free vulnerability was found in the BPF sockmap implementation in the Linux kernel. A race condition exists between the skpsockbacklog processing and userspace consumption of socket buffers. When userspace calls recvmsg and consumes an skb, it can free the buffer via consumeskb while...

CVE-2023-53841

A warning handling issue was found in the devlink subsystem in the Linux kernel. The devlinkporttypewarn function generates kernel warnings when a devlink port type is not set, but the warning does not identify which device or driver caused the issue. While primarily a debugging inconvenience, th...

CVE-2025-40336

No description is available for this CVE...

CVE-2025-40330

No description is available for this CVE. Mitigation To mitigate this issue, prevent the bnxten module from being loaded if Broadcom NetXtreme-C/E network adapters are not required. See https://access.redhat.com/solutions/41278 for instructions on how to blacklist a kernel module...

CVE-2023-53855

In the Linux kernel, the following vulnerability has been resolved: net: dsa: ocelot: call dsatag8021qunregister under rtnllock on driver remove When the tagging protocol in current use is "ocelot-8021q" and we unbind the driver, we see this splat: $ echo '0000:00:00.2'...

CVE-2025-40342

No description is available for this CVE...

CVE-2025-40332

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix mmap write lock not release If mmap write lock is taken while draining retry fault, mmap write lock is not released because svmrangerestorepages calls mmapreadunlock then returns. This causes deadlock and system...

Linux Distros Unpatched Vulnerability : CVE-2025-40329

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/sched: Fix deadlock in drmschedentitykilljobscb The Mesa issue referenced below pointed out a possible deadlock: 1231.611031 Possible interrupt unsafe...

Linux Distros Unpatched Vulnerability : CVE-2023-53861

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: correct grp validation in ext4mbgoodgroup Group corruption check will access memory of grp and will trigger kernel crash if grp is NULL. So do NULL check...

Linux Distros Unpatched Vulnerability : CVE-2022-50658

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpufreq: qcom: fix memory leak in error path If for some reason the speedbin length is incorrect, then there is a memory leak in the error path because we never...