CVE-2025-37787

CVE-2025-37787 affects the Linux kernel in the mv88e6xxx DSA driver. The issue arises when unbinding the driver: a NULL devlink global region pointer is passed to devlink_region_destroy(), causing a NULL-tolerant crash. The root cause is that some devlink regions (MV88E6XXX_REGION_STU and MV88E6X...

CVE-2025-37787

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered Russell King reports that a system with mv88e6xxx dereferences a NULL pointer when unbinding this driver:...

CVE-2025-37787 net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered Russell King reports that a system with mv88e6xxx dereferences a NULL pointer when unbinding this driver:...

CVE-2025-37787 net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered Russell King reports that a system with mv88e6xxx dereferences a NULL pointer when unbinding this driver:...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a deregistered devlink region in mv88e6xxx...

PT-2025-20539

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue occurs when the firmware does not support the PDS CORE CMD FW CONTROL command, potentially causing the driver to print...

PT-2025-18467

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the net: dsa: mv88e6xxx module. The issue occurs when a system with mv88e6xxx dereferences a NULL pointer when...

PT-2025-38566

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a use-after-free issue within the ptp ocp watchdog function. The ptp ocp detach function only shuts down the watchdog timer if it is pending. If the timer handl...

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix legacy client tracking initialization CVE-2024-58092 In the Linux kernel, the following vulnerability has been resolved: keys: Fix UAF in keyput CVE-2025-21893 In the Linux kernel, the following...

SUSE CVE-2025-22017

In the Linux kernel, the following vulnerability has been resolved: devlink: fix xaalloccyclic error handling In case of returning 1 from xaalloccyclic wrapping ERRPTR1 will be returned, which will cause ISERR to be false. Which can lead to dereference not allocated pointer rel. Fix it by checkin...

DEBIAN-CVE-2025-22017

In the Linux kernel, the following vulnerability has been resolved: devlink: fix xaalloccyclic error handling In case of returning 1 from xaalloccyclic wrapping ERRPTR1 will be returned, which will cause ISERR to be false. Which can lead to dereference not allocated pointer rel. Fix it by checkin...

UBUNTU-CVE-2025-22017

In the Linux kernel, the following vulnerability has been resolved: devlink: fix xaalloccyclic error handling In case of returning 1 from xaalloccyclic wrapping ERRPTR1 will be returned, which will cause ISERR to be false. Which can lead to dereference not allocated pointer rel. Fix it by checkin...

CVE-2025-22017 devlink: fix xa_alloc_cyclic() error handling

In the Linux kernel, the following vulnerability has been resolved: devlink: fix xaalloccyclic error handling In case of returning 1 from xaalloccyclic wrapping ERRPTR1 will be returned, which will cause ISERR to be false. Which can lead to dereference not allocated pointer rel. Fix it by checkin...

The vulnerability of the `ipc_devlink_create_region()` function in the Linux kernel component allows a hacker to trigger a service failure.

The vulnerability of the ipcdevlinkcreateregion function in the Linux kernel component is related to improper input validation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2024-36900

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: hns3: fix kernel crash when devlink reload during initialization The devlink reload process will access the hardware resources, but the register operation ...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: hns3: Fixed a kernel crash that occurred when devlink reloaded during initialization. The devlink reloading process will access hardware resources, but the register operations are performed before the hardware is initialized...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fixed the issue of missing lock acquisition before performing sync reset reload operations. During sync reset reload operations, when a remote host updates devlink during the reload process, the lock acquisition before...

The vulnerability of the devlink component in the Linux operating system’s kernel allows a hacker to gain access to confidential information.

The vulnerability of the devlink component in the Linux operating system’s kernel is related to the exposure of certain information. Exploiting this vulnerability can allow an attacker to gain access to confidential information...

Unbreakable Enterprise kernel security update

5.4.17-2136.336.5.3.1.el8uek - mm: avoid leaving partial pfn mappings around in error case Linus Torvalds Orabug: 37311329 CVE-2024-47674 - mm: add remappfnrangenotrack Christoph Hellwig Orabug: 37311329 CVE-2024-47674 - mm/memory.c: make remappfnrange reject unaligned addr Alex Zhang Orabug:...

kernel: ionic: catch failure from devlink_alloc

In the Linux kernel, the following vulnerability has been resolved: ionic: catch failure from devlinkalloc Add a check for NULL on the alloc return. If devlinkalloc fails and we try to use devlinkpriv on the NULL return, the kernel gets very unhappy and panics. With this fix, the driver load will...