PT-2025-49465

In the Linux kernel, the following vulnerability has been resolved: net: netsec: fix error handling in netsec register mdio If phy device register fails, phy device free need be called to put refcount, so memory of phy device and device name can be freed in callback function. If get phy device...

PT-2025-49612

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to hotplug callback handling within the marvell cn10k driver. Specifically, the tad pmu init function does not remove a callback added by cpuhp...

PT-2025-49470

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was identified and resolved in the rsi coex attach function within the RSI Realtek Semiconductor Corporation wireless driver of the Linux kernel. Specifically, the coex cb...

PT-2025-49463

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists within the ext4 filesystem code, specifically in the ext4 fc record modified inode function. The issue arises because krealloc may return NULL, potentially preventin...

Vulnerability of the `btc_fw_set_monreg()` function in the `drivers/net/wireless/realtek/rtw89/coex.c` module – This driver is a Realtek wireless adapter support driver for the Linux operating system. It allows a hacker to cause a service failure.

Vulnerability of the btcfwsetmonreg function in the drivers/net/wireless/realtek/rtw89/coex.c module – The Realtek wireless adapter support driver for the Linux operating system is vulnerable due to a pointer manipulation issue. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the ndo_open() function in the drivers/net/usb/asix_devices.c module of the USB device support driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ndoopen function in the drivers/net/usb/asixdevices.c module of the Linux USB device driver framework is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the mptcp_pernet_set_defaults() function in the net/mptcp/ctrl.c module of the MPTCP protocol implementation in Linux’s kernel allows a attacker to cause a service failure.

The vulnerability of the mptcppernetsetdefaults function in the net/mptcp/ctrl.c module of the MPTCP protocol implementation in Linux’s kernel is related to pointer manipulation. Exploiting this vulnerability could allow a attacker to cause a service failure...

Vulnerability of the otx2vfremove() function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2 VF.c module – This is a driver for supporting Ethernet network adapters in Linux kernel-based operating systems. It allows a hacker to cause service failure.

Vulnerability of the otx2vfremove function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2 VF.c module – The Marvell Ethernet network adapter driver for Linux operating systems has a vulnerability where resources are not released after their useful life has ended. Exploiting this...

The vulnerability in the sound/core/pcm_native.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the sound/core/pcmnative.c module of the Linux operating system is related to mutual blocking of execution threads. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of the mlx5_ib_dev_res_init() function in the drivers/infiniband/hw/mlx5/main.c module – This driver is part of the Linux operating system’s InfiniBand support mechanism, which allows a hacker to cause a service failure.

Vulnerability of the mlx5ibdevresinit function in the drivers/infiniband/hw/mlx5/main.c module – The Linux kernel’s InfiniBand driver relies on pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the test_format_fill_silence() function in the sound/core/sound_kunit.c module, which supports Linux kernel-based audio cards, allows a hacker to trigger a service failure.

The vulnerability of the testformatfillsilence function in the sound/core/soundkunit.c module, which is part of Linux’s kernel-based audio card support, relates to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the check_btf_line() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the checkbtfline function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for the Linux operating system’s kernel, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to trigger a service...

Vulnerability of the btusb_mtk_claim_iso_intf() function in the drivers/bluetooth/btusb.c module – This driver for Bluetooth devices in the Linux kernel allows a hacker to trigger a service failure.

Vulnerability of the btusbmtkclaimisointf function in the drivers/bluetooth/btusb.c module – The Bluetooth device support driver in Linux operating systems is vulnerable due to improper resource release. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability of the acpi_quirk_skip_serdev Enumeration() function in the drivers/acpi/x86/utils.c file – The ACPI support driver for the Linux kernel’s operating system allows a hacker to trigger a service failure.

Vulnerability of the acpiquirkskipserdev Enumeration function in the drivers/acpi/x86/utils.c module – The ACPI support driver for the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the init_f2fs_fs() function in the fs/f2fs/super.c module of the F2FS file system support in Linux kernel allows a attacker to cause a service failure.

The vulnerability of the initf2fsfs function in the fs/f2fs/super.c module of the F2FS file system support module in Linux kernel relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the dbMount() function in the fs/jfs/jfs_dmap.c module, which supports the JFS file system in Linux kernels, allows a attacker to cause a service failure.

The vulnerability of the dbMount function in the fs/jfs/jfsdmap.c module, which supports the JFS file system in Linux operating systems, is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2025-40224

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: cgbc-hwmon Add missing NULL check after devmkzalloc The driver allocates memory for sensor data using devmkzalloc, but did not check if the allocation...

Linux Distros Unpatched Vulnerability : CVE-2025-40228

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/damon/sysfs: catch commit test ctx alloc failure Patch series mm/damon/sysfs: fix commit test damonctx deallocation. DAMON sysfs interface dynamically...

Vulnerability of the xe_gt_init_early() function in the drivers/gpu/drm/xe/xe_gt.c module – The DRI driver for Linux kernel’s direct rendering infrastructure allows a hacker to trigger a service failure.

Vulnerability of the xegtinitearly function in the drivers/gpu/drm/xe/xegt.c module – The driver for Linux’s Direct Rendering Infrastructure DRI relies on pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2025-40226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firmware: armscmi: Account for failed debug initialization When the SCMI debug subsystem fails to initialize, the related debug root will be missing, and the...