UBUNTU-CVE-2025-68352

In the Linux kernel, the following vulnerability has been resolved: spi: ch341: fix out-of-bounds memory access in ch341transferone Discovered by Atuin - Automated Vulnerability Discovery Engine. The 'len' variable is calculated as 'min32, trans-len + 1', which includes the 1-byte command header...

CVE-2025-68347

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events The DSP event handling code in hwdepread could write more bytes to the user buffer than requested, when a user provides a buffer smaller than the event header...

CVE-2023-54039 can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access

In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939tptxdatnew: fix out-of-bounds memory access In the j1939tptxdatnew function, an out-of-bounds memory access could occur during the memcpy operation if the size of skb-cb is larger than the size of struct...

CVE-2023-54034

The CVE-2023-54034 issue affects the Linux kernel iommufd path where vfio_iommu_type1_info is copied to user space. The root cause is a missing zero initialization: most of the struct is copied with copy_from_user(), but minsz is smaller than the struct by 8 bytes, leaving the padding uninitializ...

CVE-2023-53987 ping: Fix potentail NULL deref for /proc/net/icmp.

In the Linux kernel, the following vulnerability has been resolved: ping: Fix potentail NULL deref for /proc/net/icmp. After commit dbca1596bbb0 "ping: convert to RCU lookups, get rid of rwlock", we use RCU for ping sockets, but we should use spinlock for /proc/net/icmp to avoid a potential NULL...

CVE-2022-50700 wifi: ath10k: Delay the unmapping of the buffer

In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: Delay the unmapping of the buffer On WCN3990, we are seeing a rare scenario where copy engine hardware is sending a copy complete interrupt to the host driver while still processing the buffer that the driver has...

CVE-2022-50700 wifi: ath10k: Delay the unmapping of the buffer

In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: Delay the unmapping of the buffer On WCN3990, we are seeing a rare scenario where copy engine hardware is sending a copy complete interrupt to the host driver while still processing the buffer that the driver has...

CVE-2025-68378

CVE-2025-68378 is a Linux kernel vulnerability affecting BPF stack map handling. The issue was a stackmap overflow check in __bpf_get_stackid(), where copying stack traces could write out of bounds when the perf trace contained more stack entries than the stack map bucket could hold. Syzkaller re...

CVE-2025-68374

CVE-2025-68374 : In the Linux kernel, the md subsystem had an RCU protection issue around md_wakeup_thread. The pointer to the md thread was passed directly to md_wakeup_thread() before rcu_read_lock() was taken, meaning the RCU read-side protection could be bypassed and potentially lead to a use...

CVE-2025-68374 md: fix rcu protection in md_wakeup_thread

In the Linux kernel, the following vulnerability has been resolved: md: fix rcu protection in mdwakeupthread We attempted to use RCU to protect the pointer 'thread', but directly passed the value when calling mdwakeupthread. This means that the RCU pointer has been acquired before rcureadlock,...

CVE-2025-68374 md: fix rcu protection in md_wakeup_thread

In the Linux kernel, the following vulnerability has been resolved: md: fix rcu protection in mdwakeupthread We attempted to use RCU to protect the pointer 'thread', but directly passed the value when calling mdwakeupthread. This means that the RCU pointer has been acquired before rcureadlock,...

CVE-2025-68347

CVE-2025-68347 (Linux kernel, ALSA: firewire-motu) The vulnerability is in the DSP event handling in hwdep_read() where the code could copy more bytes to the user buffer than requested when the buffer is smaller than the 8-byte event header. The issue is resolved by using min_t() to clamp the cop...

CVE-2025-68347 ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events The DSP event handling code in hwdepread could write more bytes to the user buffer than requested, when a user provides a buffer smaller than the event header...

EUVD-2025-204962

Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User interaction is required to exploit this...

PT-2025-52991

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A missing zero initialization exists in the iommufd component of the Linux kernel. Specifically, the vfio iommu type1 info structure is not fully initialized to zero before data is copie...

PT-2025-53048

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue was resolved in the Linux kernel related to the UBI file system. The issue occurs when the insert old idx function fails during a specific process involving znode...

PT-2025-52944

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to a potential NULL dereference within the /proc/net/icmp interface when using ping sockets. The issue arose after a commit dbca1596bbb0...

PT-2025-53226

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to suspicious RCU Read-Copy Update usage when handling VLAN-aware MAC addresses within the networking subsystem. Specifically, the issue occurs...

PT-2025-53137

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc1-yoctodev-standard+ Description The Linux kernel contains an issue where the rcu force quiescent state function uses this cpu read in preemptible code instead of raw cpu read. This can lead to a lockdep...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from updating rates in an atomic context, which may result in an RCU warning...