CVE-2022-49125 drm/sprd: fix potential NULL dereference

In the Linux kernel, the following vulnerability has been resolved: drm/sprd: fix potential NULL dereference 'drm' could be null in sprddrmshutdown, and drmwarn maybe dereference it, remove this warning log. v1 - v2: - Split checking platformgetresource return value to a separate patch - Use...

CVE-2022-49092 net: ipv4: fix route with nexthop object delete warning

In the Linux kernel, the following vulnerability has been resolved: net: ipv4: fix route with nexthop object delete warning FRR folks have hit a kernel warning1 while deleting routes2 which is caused by trying to delete a route pointing to a nexthop id without specifying nhid but matching on an...

CVE-2022-49092

CVE-2022-49092 is a Linux kernel vulnerability in the IPv4 routing path related to nexthop objects. FRR reported a kernel warning when deleting routes that point to a nexthop id without nhid while the route matched an interface. The root cause is in fib_nh_match in include/net/nexthop.h, which ca...

CVE-2022-49092

In the Linux kernel, the following vulnerability has been resolved: net: ipv4: fix route with nexthop object delete warning FRR folks have hit a kernel warning1 while deleting routes2 which is caused by trying to delete a route pointing to a nexthop id without specifying nhid but matching on an...

CVE-2022-49092 net: ipv4: fix route with nexthop object delete warning

In the Linux kernel, the following vulnerability has been resolved: net: ipv4: fix route with nexthop object delete warning FRR folks have hit a kernel warning1 while deleting routes2 which is caused by trying to delete a route pointing to a nexthop id without specifying nhid but matching on an...

CVE-2022-49090

The CVE-2022-49090 entry concerns Linux kernel arch/arm64: Fix topology initialization for core scheduling. The issue arises when store_cpu_topology() does not call update_siblings_masks() before notify_cpu_starting(), causing core scheduling data structures to reflect an incorrect topology. If s...

CVE-2022-49077 mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)

In the Linux kernel, the following vulnerability has been resolved: mmmremap.c: avoid pointless invalidaterangestart/end on mremapoldsize=0 If an mremap syscall with oldsize=0 ends up in movepagetables, it will call invalidaterangestart/invalidaterangeend unnecessarily, i.e. with an empty range...

CVE-2022-49077

CVE-2022-49077 — Linux kernel : A vulnerability where an mremap(old_size=0) path could reach move_page_tables() and trigger unnecessary invalidate_range_start()/invalidate_range_end() on an empty range, causing a WARN in KVM mmu_notifier. The published fix is to short‑circuit with an early return...

CVE-2022-49077

In the Linux kernel, the following vulnerability has been resolved: mmmremap.c: avoid pointless invalidaterangestart/end on mremapoldsize=0 If an mremap syscall with oldsize=0 ends up in movepagetables, it will call invalidaterangestart/invalidaterangeend unnecessarily, i.e. with an empty range...

CVE-2022-49058

In CVE-2022-49058, the Linux kernel CIFS subsystem is affected by a potential buffer overflow in handling symlinks. The root cause is that Smatch marks link_len as untrusted (originating from sscanf()) and may allow a length to exceed the destination buffer, risking a overflow in poly1305-related...

CVE-2022-49058 cifs: potential buffer overflow in handling symlinks

In the Linux kernel, the following vulnerability has been resolved: cifs: potential buffer overflow in handling symlinks Smatch printed a warning: arch/x86/crypto/poly1305glue.c:198 poly1305updatearch error: memcpy 'dctx-buf' too small 16 vs u32max It's caused because Smatch marks 'linklen' as...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that stems from a devwake warning in mhipmdisabletransition...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not limiting the maximum segment size based on the capabilities of the DMA engine, which could result in a DMA...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly freeing the irq directory when removing modules, which may result in a warning...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a checking error in kmaplocalschedin,out that could result in a runtime warning...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from unspecified nhid but matching interfaces when deleting a route pointing to a nexthop id, resulting in a...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from ext4handleinodeextension not handling out of memory correctly, which could result in a kernel warning...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from igc not properly logging out of xdprxqinfo when changing the RX ring parameter, resulting in a kernel warnin...

Becoming Ransomware Ready: Why Continuous Validation Is Your Best Defense

Ransomware doesn't hit all at once—it slowly floods your defenses in stages. Like a ship subsumed with water, the attack starts quietly, below the surface, with subtle warning signs that are easy to miss. By the time encryption starts, it's too late to stop the flood. Each stage of a ransomware...

PT-2025-25819

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue was related to the video device for the MPEG encoder not setting device caps, which prevented the video device from being...