CVE-2025-38029 kasan: avoid sleepable page allocation from atomic context

In the Linux kernel, the following vulnerability has been resolved: kasan: avoid sleepable page allocation from atomic context applytopterange enters the lazy MMU mode and then invokes kasanpopulatevmallocpte callback on each page table walk iteration. However, the callback can go into sleep when...

CVE-2025-38027

The CVE-2025-38027 entry describes a Linux kernel vulnerability in the regulator max20086 code path. The root cause is that max20086_parse_regulators_dt() uses an on-stack array of struct of_regulator_match for matches and then relies on devm_of_regulator_put_matches(), which allocates a devm_of_...

CVE-2025-38023 nfs: handle failure of nfs_get_lock_context in unlock path

In the Linux kernel, the following vulnerability has been resolved: nfs: handle failure of nfsgetlockcontext in unlock path When memory is insufficient, the allocation of nfslockcontext in nfsgetlockcontext fails and returns -ENOMEM. If we mistakenly treat an nfs4unlockdata structure whose lctx...

CVE-2025-38023 nfs: handle failure of nfs_get_lock_context in unlock path

In the Linux kernel, the following vulnerability has been resolved: nfs: handle failure of nfsgetlockcontext in unlock path When memory is insufficient, the allocation of nfslockcontext in nfsgetlockcontext fails and returns -ENOMEM. If we mistakenly treat an nfs4unlockdata structure whose lctx...

CVE-2025-38023

CVE-2025-38023 affects the Linux kernel: if nfs_get_lock_context() fails due to ENOMEM, a stored -ENOMEM in an nfs4_unlockdata could be treated as valid and lead to a NULL pointer dereference in nfs4_locku_prepare via rpc_run_task. The fix ensures nfs4_unlockdata is freed when allocation fails an...

CVE-2025-38018

Technical details for CVE-2025-38018 are not publicly provided in the supplied documents; monitor for updates.

CVE-2025-38015 dmaengine: idxd: fix memory leak in error handling path of idxd_alloc

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix memory leak in error handling path of idxdalloc Memory allocated for idxd is not freed if an error occurs during idxdalloc. To fix it, free the allocated memory in the reverse order of allocation before exiti...

CVE-2025-38013

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Set nchannels after allocating struct cfg80211scanrequest Make sure that nchannels is set after allocating the struct cfg80211registereddevice::intscanreq member. Seen with syzkaller: UBSAN:...

CVE-2025-38008

In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: fix race condition in unaccepted memory handling The page allocator tracks the number of zones that have unaccepted memory using staticbranchenc/dec and uses that static branch in hot paths to determine if it needs ...

CVE-2025-38007

CVE-2025-38007 affects HID uclogic in the Linux kernel. Root cause: uclogic_input_configured() dereferences a NULL after devm_kasprintf() returns NULL due to allocation failure. Mitigation: a NULL check is added after devm_kasprintf() to prevent the dereference. Described fixes are documented in ...

CVE-2025-38007 HID: uclogic: Add NULL check in uclogic_input_configured()

In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: Add NULL check in uclogicinputconfigured devmkasprintf returns NULL when memory allocation fails. Currently, uclogicinputconfigured does not check for this case, which results in a NULL pointer dereference. Add NULL...

CVE-2025-38007 HID: uclogic: Add NULL check in uclogic_input_configured()

In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: Add NULL check in uclogicinputconfigured devmkasprintf returns NULL when memory allocation fails. Currently, uclogicinputconfigured does not check for this case, which results in a NULL pointer dereference. Add NULL...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from arm64 cacheinfo incorrectly assigning signed error values to unsigned fwlevels, which could lead to memory...

ClamAV 安全漏洞

ClamAV Clam AntiVirus is a free and open source antivirus program from the ClamAV team. The software is used to detect Trojans, viruses, malware and other malicious threats. A security vulnerability exists in ClamAV that stems from improper allocation of memory buffers during PDF file processing,...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to recover a buffer when a memory allocation fails, which could lead to a system crash...

PT-2025-25925

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A space cache corruption and potential double allocation issue has been identified in the Linux kernel. The issue arises from a race between caching free space for a block group and...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a corrupted spatial cache and a potential double allocation problem...

PT-2025-25804

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.15.0-rc5 Description A vulnerability in the Linux kernel has been resolved, related to sleepable page allocation from atomic context. The apply to pte range function enters the lazy MMU mode and invokes the kas...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a stack allocation matching array, which could lead to invalid memory accesses...

PT-2025-25798

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.15.0-rc2-dirty 60 Description A vulnerability in the Linux kernel has been identified, where the allocation of nfs lock context in nfs get lock context fails and returns -ENOMEM when memory is insufficient. If...