PT-2025-30856

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to block device handling when Transparent Huge Pages THP are disabled. Specifically, the kernel may attempt to process block devices with a...

SUSE CVE-2025-38141

In the Linux kernel, the following vulnerability has been resolved: dm: fix dmblkreportzones If dmgetlivetable returned NULL, dmputlivetable was never called. Also, it is possible that md-zonerevalidatemap will change while calling this function. Only read it once, so that we are always using the...

CVE-2025-45809

SQL Injection vulnerability in BerriAI LiteLLM before 1.81.0 allows attackers to execute arbitrary commands via the key parameter to the "/key/block" and "/key/unblock" API endpoints...

CVE-2025-38164

In the Linux kernel, the following vulnerability has been resolved: f2fs: zone: fix to avoid inconsistence in between SIT and SSA w/ below testcase, it will cause inconsistence in between SIT and SSA. createnullblk 512 2 1024 1024 mkfs.f2fs -m /dev/nullb0 mount /dev/nullb0 /mnt/f2fs/ touch...

CVE-2025-38163

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on sbi-totalvalidblockcount syzbot reported a f2fs bug as below: ------------ cut here ------------ kernel BUG at fs/f2fs/f2fs.h:2521! RIP: 0010:decvalidblockcount+0x3b2/0x3c0 fs/f2fs/f2fs.h:2521 Call...

DEBIAN-CVE-2025-38164

In the Linux kernel, the following vulnerability has been resolved: f2fs: zone: fix to avoid inconsistence in between SIT and SSA w/ below testcase, it will cause inconsistence in between SIT and SSA. createnullblk 512 2 1024 1024 mkfs.f2fs -m /dev/nullb0 mount /dev/nullb0 /mnt/f2fs/ touch...

UBUNTU-CVE-2025-38172

In the Linux kernel, the following vulnerability has been resolved: erofs: avoid using multiple devices with different type For multiple devices, both primary and extra devices should be the same type. erofsinitdevice has already guaranteed that if the primary is a file-backed device, extra devic...

CVE-2025-38164

CVE-2025-38164 affects the Linux kernel’s F2FS implementation. A patch fixes an inconsistency bug where a GC/pinning sequence could leave SIT and SSA in conflicting states, triggered by operations like fallocate and pinfile set. The fix adds a condition in f2fs_gc_range() to skip block migration ...

CVE-2025-38163

CVE-2025-38163: A fault in the Linux kernel’s F2FS truncation path caused a kernel BUG due to an inconsistent sbi->total_valid_block_count versus mapped blocks, potentially leading to a crash/denial of service. The issue is in f2fs: with sbi->total_valid_block_count not matching inode-index...

CVE-2025-38163 f2fs: fix to do sanity check on sbi->total_valid_block_count

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on sbi-totalvalidblockcount syzbot reported a f2fs bug as below: ------------ cut here ------------ kernel BUG at fs/f2fs/f2fs.h:2521! RIP: 0010:decvalidblockcount+0x3b2/0x3c0 fs/f2fs/f2fs.h:2521 Call...

CVE-2025-38163 f2fs: fix to do sanity check on sbi->total_valid_block_count

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on sbi-totalvalidblockcount syzbot reported a f2fs bug as below: ------------ cut here ------------ kernel BUG at fs/f2fs/f2fs.h:2521! RIP: 0010:decvalidblockcount+0x3b2/0x3c0 fs/f2fs/f2fs.h:2521 Call...

BerriAI LiteLLM 安全漏洞

BerriAI LiteLLM is a BerriAI open source Python library for invoking large language models. A security vulnerability exists in BerriAI LiteLLM v1.65.4, which stems from a SQL injection vulnerability in the /key/block endpoint...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from unverified block counting, which could lead to data corruption...

CVE-2025-45809

BerriAI LiteLLM versions prior to v1.81.0 (including v1.65.4) are vulnerable to a SQL Injection (CWE-89) flaw in the key parameter of the /key/block and /key/unblock API endpoints. The root cause is the use of f-string concatenation instead of parameterized queries , allowing attackers to utilize...

CVE-2025-45809: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in BerriAI LiteLLM before 1.81.0 allows attackers to execute arbitrary commands via the key parameter to the "/key/block" and "/key/unblock" API endpoints...

kernel: blk-mq: don't touch ->tagset in blk_mq_get_sq_hctx

A use-after-free vulnerability was found in the blkmqgetsqhctx function in the Linux kernel's block multiqueue blk-mq subsystem. This issue occurs when the function accesses the tagset pointer to determine the current default hardware context through mapping. If this access occurs after the tagse...

kernel: blk-mq: don't touch ->tagset in blk_mq_get_sq_hctx

A use-after-free vulnerability was found in the blkmqgetsqhctx function in the Linux kernel's block multiqueue blk-mq subsystem. This issue occurs when the function accesses the tagset pointer to determine the current default hardware context through mapping. If this access occurs after the tagse...

USN-7608-2 linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - SMB network file system; - Memory management; - Netfilter; - Network traffic control; CVE-2025-37890...

USN-7606-1: Linux kernel (OEM) vulnerabilities

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. CVE-2025-2312 Several security issues were discovered in the Linux kernel. An...

The vulnerability of the mlir::Block::getArgument component, a set of tools for developing LLVM Toolchain, allows a attacker to trigger a service failure.

The vulnerability of the mlir::Block::getArgument component in the LLVM Toolchain development tools set is related to reading data beyond the allowed buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...