kernel: drm/amdgpu/vcn: remove irq disabling in vcn 5 suspend

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: remove irq disabling in vcn 5 suspend We do not directly enable/disable VCN IRQ in vcn 5.0.0. And we do not handle the IRQ state as well. So the calls to disable IRQ and set state are removed. This effectively get...

kernel: drm/amdgpu: fix the waring dereferencing hive

A flaw was found in the drm/amdgpu component of the Linux kernel. This vulnerability occurs due to a missing null pointer check when dereferencing amdgpuhiveinfo hive. A local attacker could exploit this flaw to cause a system crash, leading to a denial of service DoS...

kernel: wifi: mac80211: don't use rate mask for offchannel TX either

A flaw was found in the Linux kernel's mac80211 Wi-Fi subsystem. Incorrect handling of rate mask settings during off-channel transmissions could lead to unsupported rate warnings. This issue may result in a denial of service DoS for affected systems...

kernel: drm/amdgpu: fix ucode out-of-bounds read warning

A flaw was found in the Linux kernel's amdgpu graphics driver. This issue involves an out-of-bounds read when handling microcode ucode that was identified as a warning. While not a direct security vulnerability on its own, this flaw could potentially be leveraged by a local attacker with low...

kernel: drm/amdgpu: fix mc_data out-of-bounds read warning

A flaw was found in the Linux kernel's drm/amdgpu component. A local attacker could exploit an out-of-bounds read vulnerability when processing mcdata. This could lead to the disclosure of sensitive information and potentially cause a denial of service...

kernel: nfsd: map the EBADMSG to nfserr_io to avoid warning

In the Linux kernel, the following vulnerability has been resolved: nfsd: map the EBADMSG to nfserrio to avoid warning Ext4 will throw -EBADMSG through ext4readdir when a checksum error occurs, resulting in the following WARNING. Fix it by mapping EBADMSG to nfserrio. nfsdbufferedreaddir iterated...

kernel: mptcp: init: protect sched with rcu_read_lock

In the Linux kernel, the following vulnerability has been resolved: mptcp: init: protect sched with rcureadlock Enabling CONFIGPROVERCULIST with its dependence CONFIGRCUEXPERT creates this splat when an MPTCP socket is created: ============================= WARNING: suspicious RCU usage 6.12.0-rc...

kernel: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()

A flaw was found in the Linux kernel's IPv4 tunneling subsystem. Certain code paths during tunnel initialization traverse network device lists without holding the required Read-Copy-Update RCU read lock. A local user could exploit this flaw while configuring network interfaces, potentially leadin...

kernel: platform/x86/amd/pmc: Detect when STB is not available

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Detect when STB is not available Loading the amdpmc module as: amdpmc enablestb=1 ...can result in the following messages in the kernel ring buffer: amdpmc AMDI0009:00: SMU cmd failed. err: 0xff ioremap on R...

kernel: erofs/zmap.c: Fix incorrect offset calculation

In the Linux kernel, the following vulnerability has been resolved: erofs/zmap.c: Fix incorrect offset calculation Effective offset to add to length was being incorrectly calculated, which resulted in iomap-length being set to 0, triggering a WARNON in iomapiterdone. Fix that, and describe it in...

kernel: cachefiles: fix dentry leak in cachefiles_open_file()

A flaw was found in the Linux kernel's cachefiles component. A local attacker could exploit a dentry directory entry leak caused by a concurrency issue between a lookup cookie and a cull operation. This flaw prevents the proper release of a reference count, which can lead to resource exhaustion a...

kernel: sock_map: avoid race between sock_map_close and sk_psock_put

A flaw was found in the Linux kernel's sockmap component. A local attacker could exploit a race condition between the sockmapclose and skpsockput functions. This race condition can lead to a null pointer dereference, which triggers a kernel warning and may result in a denial of service...

PT-2025-29005

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.15.0-rc5-syzkaller-00038-g707df3375124 Description: A warning was triggered in the get bpf raw tp regs function due to a potential issue with nested calls in tracepoints like trace mmap lock acquire returned...

A week in security (May 4 – May 10)

Last week on Malwarebytes Labs: The AI chatbot cop squad is here Lock and Code S06E09 Android fixes 47 vulnerabilities, including one zero-day. Update as soon as you can! "Your privacy is a promise we don’t break": Dating app Raw exposes sensitive user data FBI issues warning as scammers target...

SUSE CVE-2022-49877

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix the sk-skforwardalloc warning of skstreamkillqueues When running testsockmap selftests, the following warning appears: WARNING: CPU: 2 PID: 197 at net/core/stream.c:205 skstreamkillqueues+0xd3/0xf0 Call Trace:...

SUSE CVE-2022-49917

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix WARNING in ipvsappnetcleanup During the initialization of ipvsappnetinit, if file ipvsapp fails to be created, the initialization is successful by default. Therefore, the ipvsapp file doesn't be found during the remove ...

SUSE CVE-2025-37867

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Silence oversized kvmalloc warning syzkaller triggered an oversized kvmalloc warning. Silence it by adding GFPNOWARN. syzkaller log: WARNING: CPU: 7 PID: 518 at mm/util.c:665 kvmallocnodenoprof+0x175/0x180 CPU: 7 UID: ...

SUSE CVE-2025-37878

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix WARNON!ctx in freeevent for partial init Move the getctxchildctx call and the childevent-ctx assignment to occur immediately after the child event is allocated. Ensure that childevent-ctx is non-NULL before any...

DEBIAN-CVE-2025-37867

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Silence oversized kvmalloc warning syzkaller triggered an oversized kvmalloc warning. Silence it by adding GFPNOWARN. syzkaller log: WARNING: CPU: 7 PID: 518 at mm/util.c:665 kvmallocnodenoprof+0x175/0x180 CPU: 7 UID: ...

CVE-2025-37866

In the Linux kernel, the following vulnerability has been resolved: mlxbf-bootctl: use sysfsemitat in securebootfusestateshow A warning is seen when running the latest kernel on a BlueField SOC: 251.512704 ------------ cut here ------------ 251.512711 invalid sysfsemit: buf:0000000003aa32ae...