4 matches found
CVE-2025-21846: NULL Pointer Dereference
In the Linux kernel, the following vulnerability has been resolved: acct: perform last write from workqueue In 1 it was reported that the acct2 system call can be used to trigger NULL deref in cases where it is set to write to a file that triggers an internal lookup. This can e.g., happen when...
PT-2025-11008
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the acct2 system call. The issue allows for a NULL dereference in cases where the acct2 system call is used to write t...
CVE-2025-21640: NULL Pointer Dereference
In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: cookiehmacalg: avoid using current-nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the...
PT-2025-4323
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue is related to the use of the 'net' structure via 'current' in the Linux kernel, which is not recommended due to inconsistencies with how generic sysctl entries are handled and potenti...