EUVD-2025-206119

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

EUVD-2025-206124

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

EUVD-2025-206126

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

EUVD-2025-206128

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

EUVD-2025-206131

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992876)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992876 advisory. In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6060: prevent crash on an unused port If the port isn't a CPU port nor a user port...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unused device management snddevmcardnew function, which could result in a memory access error when a modu...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not freeing an unused skb, which could lead to a memory leak...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992401)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992401 advisory. In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6060: prevent crash on an unused port If the port isn't a CPU port nor a user port...

CVE-2025-68743

In the Linux kernel, the following vulnerability has been resolved: mshv: Fix create memory region overlap check The current check is incorrect; it only checks if the beginning or end of a region is within an existing region. This doesn't account for userspace specifying a region that begins befo...

CVE-2022-50741

In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Disable useless interrupt to avoid kernel panic There is a hardware bug that the interrupt STMBUFHALF may be triggered after or when disable interrupt. It may led to unexpected kernel panic. And interrupt...

CVE-2022-50741

CVE-2022-50741 affects the Linux kernel’s imx-jpeg driver. The root cause is a hardware bug where the STMBUF_HALF interrupt (and STMBUF_RTND) can trigger after/while disabling interrupts, risking an unexpected kernel panic. Mitigation implemented: disable STMBUF_HALF/STMBUF_RTND and the unused in...

CVE-2022-50741 media: imx-jpeg: Disable useless interrupt to avoid kernel panic

In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Disable useless interrupt to avoid kernel panic There is a hardware bug that the interrupt STMBUFHALF may be triggered after or when disable interrupt. It may led to unexpected kernel panic. And interrupt...

CVE-2025-68743 mshv: Fix create memory region overlap check

In the Linux kernel, the following vulnerability has been resolved: mshv: Fix create memory region overlap check The current check is incorrect; it only checks if the beginning or end of a region is within an existing region. This doesn't account for userspace specifying a region that begins befo...

CVE-2025-68350 exfat: fix divide-by-zero in exfat_allocate_bitmap

In the Linux kernel, the following vulnerability has been resolved: exfat: fix divide-by-zero in exfatallocatebitmap The variable maxracount can be 0 in exfatallocatebitmap, which causes a divide-by-zero error in the subsequent modulo operation i % maxracount, leading to a system crash. When...

CLSA-2025-1766488019 kernel: Fix of 63 CVEs

scsi: target: iscsi: Fix timeout on deleted connection CVE-2025-38075 - tls: wait for pending async decryptions if tlsstrpmsghold fails CVE-2025-40176 - cloneprivatemnt: make sure that caller has CAPSYSADMIN in the right userns CVE-2025-38499 - rcu: Fix rcureadunlock deadloop due to IRQ work...

EUVD-2025-203751

In the Linux kernel, the following vulnerability has been resolved: clk: thead: th1520-ap: set all AXI clocks to CLKISCRITICAL The AXI crossbar of TH1520 has no proper timeout handling, which means gating AXI clocks can easily lead to bus timeout and thus system hang. Set all AXI clock gates to...

UBUNTU-CVE-2025-68318

In the Linux kernel, the following vulnerability has been resolved: clk: thead: th1520-ap: set all AXI clocks to CLKISCRITICAL The AXI crossbar of TH1520 has no proper timeout handling, which means gating AXI clocks can easily lead to bus timeout and thus system hang. Set all AXI clock gates to...

CVE-2025-68318 clk: thead: th1520-ap: set all AXI clocks to CLK_IS_CRITICAL

In the Linux kernel, the following vulnerability has been resolved: clk: thead: th1520-ap: set all AXI clocks to CLKISCRITICAL The AXI crossbar of TH1520 has no proper timeout handling, which means gating AXI clocks can easily lead to bus timeout and thus system hang. Set all AXI clock gates to...

CVE-2025-68318

In CVE-2025-68318, the Linux kernel TH1520 ARM device shows a vulnerability where the AXI crossbar gating causes bus timeouts and possible system hang due to improper AXI clock gating. The fix sets all TH1520-AXI clocks to CLK_IS_CRITICAL (gates remain locked on reset) and migrates remaining CLK_...