AlmaLinux 10 : kernel (ALSA-2026:2721)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:2721 advisory. kernel: ntbhwswitchtec: Fix shift-out-of-bounds in switchtecntbmwsettrans CVE-2023-53034 kernel: Linux kernel erofs: Use-After-Free due to device type...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2025-38172

creationtimestamp| type| source ---|---|--- 2025-07-03 11:19:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt2maf6gdh2p 2025-07-03 19:28:32+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114790951297856879...

CVE-2025-38172

In the Linux kernel, the following vulnerability has been resolved: erofs: avoid using multiple devices with different type For multiple devices, both primary and extra devices should be the same type. erofsinitdevice has already guaranteed that if the primary is a file-backed device, extra devic...

CVE-2025-38172

In the Linux kernel, the following vulnerability has been resolved: erofs: avoid using multiple devices with different type For multiple devices, both primary and extra devices should be the same type. erofsinitdevice has already guaranteed that if the primary is a file-backed device, extra devic...

CVE-2025-38172 erofs: avoid using multiple devices with different type

In the Linux kernel, the following vulnerability has been resolved: erofs: avoid using multiple devices with different type For multiple devices, both primary and extra devices should be the same type. erofsinitdevice has already guaranteed that if the primary is a file-backed device, extra devic...

CVE-2025-38172

CVE-2025-38172 refers to a Linux kernel vulnerability in the erofs filesystem driver where a device-type mismatch between primary and extra devices can trigger a use-after-free (UAF). The root cause, as described in the advisory, is that when the primary device is a block device and the extra dev...