CVE-2025-37974

CVE-2025-37974: Linux kernel s390/pci vulnerability where zpci_create_device() may return an error pointer that is not checked before dereferencing it as a struct zpci_dev in __clp_add(); the fix adds a missing check so the device is not added to the scan_list, preventing the previous behavior. T...

CVE-2025-37974 s390/pci: Fix missing check for zpci_create_device() error return

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix missing check for zpcicreatedevice error return The zpcicreatedevice function returns an error pointer that needs to be checked before dereferencing it as a struct zpcidev pointer. Add the missing check in clpadd...

CVE-2025-37892

In the Linux kernel, the following vulnerability has been resolved: mtd: inftlcore: Add error check for inftlreadoob In INFTLfindwriteunit, the return value of inftlreadoob need to be checked. A proper implementation can be found in INFTLdeleteblock. The status will be set as SECTORIGNORE to brea...

CVE-2025-37892

In the Linux kernel, the following vulnerability has been resolved: mtd: inftlcore: Add error check for inftlreadoob In INFTLfindwriteunit, the return value of inftlreadoob need to be checked. A proper implementation can be found in INFTLdeleteblock. The status will be set as SECTORIGNORE to brea...

CVE-2025-37892 mtd: inftlcore: Add error check for inftl_read_oob()

In the Linux kernel, the following vulnerability has been resolved: mtd: inftlcore: Add error check for inftlreadoob In INFTLfindwriteunit, the return value of inftlreadoob need to be checked. A proper implementation can be found in INFTLdeleteblock. The status will be set as SECTORIGNORE to brea...

CVE-2025-37892 mtd: inftlcore: Add error check for inftl_read_oob()

In the Linux kernel, the following vulnerability has been resolved: mtd: inftlcore: Add error check for inftlreadoob In INFTLfindwriteunit, the return value of inftlreadoob need to be checked. A proper implementation can be found in INFTLdeleteblock. The status will be set as SECTORIGNORE to brea...

CVE-2025-37892

In CVE-2025-37892, the Linux kernel mtd/inftlcore had a missing error check for inftl_read_oob() in INFTL_findwriteunit(); the return value must be validated, with reference logic located in INFTL_deleteblock() to set the status to SECTOR_IGNORE and break the loop when inftl_read_oob() fails. Con...

CVE-2025-37892: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mtd: inftlcore: Add error check for inftlreadoob In INFTLfindwriteunit, the return value of inftlreadoob need to be checked. A proper implementation can be found in INFTLdeleteblock. The status will be set as SECTORIGNORE to brea...

kernel: ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()

REJECTED CVE In the Linux kernel, the following vulnerability has been resolved: ntb: intel: Fix the NULL vs ISERR bug for debugfscreatedir The debugfscreatedir function returns error pointers. It never returns NULL. So use ISERR to check it...

CVE-2025-22116

In the Linux kernel, the following vulnerability has been resolved: idpf: check error for registernetdev on init Current init logic ignores the error code from registernetdev, which will cause WARNON on attempt to unregister it, if there was one, and there is no info for the user that the creatio...

CVE-2025-22116

CVE-2025-22116 affects the Linux kernel idpf driver’s netdev handling. The patch adds an error check when creating vports, logs the vport number and error code, and ensures on removal that VPORT_REG_NETDEV is checked before unregister/free. It also introduces local variables (idx, vport_config, n...

CVE-2025-22116 idpf: check error for register_netdev() on init

In the Linux kernel, the following vulnerability has been resolved: idpf: check error for registernetdev on init Current init logic ignores the error code from registernetdev, which will cause WARNON on attempt to unregister it, if there was one, and there is no info for the user that the creatio...

PT-2025-38565

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw was discovered in the Linux kernel’s mlx4 network driver. An incorrect check after calling page pool create could lead to an invalid pointer dereference. Specifically, a NULL chec...

UBUNTU-CVE-2025-22016

In the Linux kernel, the following vulnerability has been resolved: dpll: fix xaalloccyclic error handling In case of returning 1 from xaalloccyclic wrapping ERRPTR1 will be returned, which will cause ISERR to be false. Which can lead to dereference not allocated pointer pin. Fix it by checking i...

CVE-2024-58082

In the Linux kernel, the following vulnerability has been resolved: media: nuvoton: Fix an error check in npcmvideoeceinit When function offinddevicebynode fails, it returns NULL instead of an error code. So the corresponding error check logic should be modified to check whether the return value ...

UBUNTU-CVE-2024-58067

In the Linux kernel, the following vulnerability has been resolved: clk: mmp: pxa1908-mpmu: Fix a NULL vs ISERR check The devmkzalloc function returns NULL on error, not error pointers. Update the check to match...

CVE-2024-58082

In the Linux kernel, the following vulnerability has been resolved: media: nuvoton: Fix an error check in npcmvideoeceinit When function offinddevicebynode fails, it returns NULL instead of an error code. So the corresponding error check logic should be modified to check whether the return value ...

CVE-2024-58082

CVE-2024-58082 affects the Linux kernel media nuvoton driver (npcm_video_ece_init). The root cause is improper error handling: when of_find_device_by_node() fails it returns NULL instead of an error code, so the code path should check for NULL and return -ENODEV. The fix implements proper NULL ch...

CVE-2024-58082 media: nuvoton: Fix an error check in npcm_video_ece_init()

In the Linux kernel, the following vulnerability has been resolved: media: nuvoton: Fix an error check in npcmvideoeceinit When function offinddevicebynode fails, it returns NULL instead of an error code. So the corresponding error check logic should be modified to check whether the return value ...

CVE-2024-58082 media: nuvoton: Fix an error check in npcm_video_ece_init()

In the Linux kernel, the following vulnerability has been resolved: media: nuvoton: Fix an error check in npcmvideoeceinit When function offinddevicebynode fails, it returns NULL instead of an error code. So the corresponding error check logic should be modified to check whether the return value ...