CVE-2025-38436 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38436 affecting package kernel for versions less than 6.6.96.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38131 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38131 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

CVE-2025-38213 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38213 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

CVE-2025-38304 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38304 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

CVE-2025-38245 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38245 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

CVE-2025-38185 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38185 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

CVE-2025-38319 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38319 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

CVE-2025-38163 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38163 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

CVE-2025-38191 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38191 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

AZL-64920 CVE-2025-38336 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: ata: patavia: Force PIO for ATAPI devices on VT6415/VT6330 The controller has a hardware bug that can hard hang the system when doing ATAPI DMAs without any trace of what happened. Depending on the device attached, it can also...

AZL-64926 CVE-2025-38319 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pp: Fix potential NULL pointer dereference in atomctrlinitializemcregtable The function atomctrlinitializemcregtable and atomctrlinitializemcregtablev22 does not check the return value of smuatomgetdatatable. If...

AZL-64958 CVE-2025-38310 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: seg6: Fix validation of nexthop addresses The kernel currently validates that the length of the provided nexthop address does not exceed the specified length. This can lead to the kernel reading uninitialized memory if user space...

AZL-64865 CVE-2025-38263 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: bcache: fix NULL pointer in cachesetflush 1. LINE1794 - LINE1887 is some codes about function of bchcachesetalloc. 2. LINE2078 - LINE2142 is some codes about function of registercacheset. 3. registercacheset will call...

AZL-64868 CVE-2025-38251 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: atm: clip: prevent NULL deref in clippush Blamed commit missed that vccdestroysocket calls clippush with a NULL skb. If clipdevs is NULL, clippush then crashes when reading skb-truesize...

AZL-64761 CVE-2025-38190 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: atm: Revert atmaccounttx if copyfromiterfull fails. In vccsendmsg, we account skb-truesize to sk-skwmemalloc by atmaccounttx. It is expected to be reverted by atmpopraw later called by vcc-dev-ops-sendvcc, skb. However, vccsendms...

AZL-64637 CVE-2025-38166 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: fix ktls panic with sockmap 2172.936997 ------------ cut here ------------ 2172.936999 kernel BUG at lib/ioviter.c:629! ...... 2172.944996 PKRU: 55555554 2172.945155 Call Trace: 2172.945299 2172.945428 ? die+0x36/0x90...

AZL-64538 CVE-2025-38131 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: coresight: prevent deactivate active config while enabling the config While enable active config via cscfgcsdevenableactiveconfig, active config could be deactivated via configfs' sysfs interface. This could make UAF issue in bel...

AZL-64598 CVE-2025-38122 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: gve: add missing NULL check for gveallocpendingpacket in TX DQO gveallocpendingpacket can return NULL, but gvetxaddskbdqo did not check for this case before dereferencing the returned pointer. Add a missing NULL check to prevent ...

AZL-63938 CVE-2025-38066 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: dm cache: prevent BUGON by blocking retries on failed device resumes A cache device failing to resume due to mapping errors should not be retried, as the failure leaves a partially initialized policy object. Repeating the resume...

AZL-64061 CVE-2025-38051 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free in cifsfilldirent There is a race condition in the readdir concurrency process, which may access the rsp buffer after it has been released, triggering the following KASAN warning...