CVE-2025-40228

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: catch commit test ctx alloc failure Patch series "mm/damon/sysfs: fix commit test damonctx deallocation". DAMON sysfs interface dynamically allocates and uses a damonctx object for testing if given inputs for onli...

kernel security update

An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

bpf: Fix memleak due to fentry attach failure

...

SUSE CVE-2025-40224

In the Linux kernel, the following vulnerability has been resolved: hwmon: cgbc-hwmon Add missing NULL check after devmkzalloc The driver allocates memory for sensor data using devmkzalloc, but did not check if the allocation succeeded. In case of memory allocation failure, dereferencing the NULL...

SUSE CVE-2025-40228

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: catch commit test ctx alloc failure Patch series "mm/damon/sysfs: fix commit test damonctx deallocation". DAMON sysfs interface dynamically allocates and uses a damonctx object for testing if given inputs for onli...

SUSE CVE-2025-40245

In the Linux kernel, the following vulnerability has been resolved: nios2: ensure that memblock.currentlimit is set when setting pfn limits On nios2, with CONFIGFLATMEM set, the kernel relies on memblockgetcurrentlimit to determine the limits of memmap, in particular for maxlowpfn. Unfortunately,...

SUSE CVE-2025-40250

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Clean up only new IRQ glue on requestirq failure The mlx5irqalloc function can inadvertently free the entire rmap and end up in a crash1 when the other threads tries to access this, when requestirq fails due to exhauste...

PT-2025-49188

A flaw exists in the verification of application installation sources within ColorOS. Under specific conditions, this issue may cause the risk detection mechanism to fail, which could allow malicious applications to be installed without proper warning...

The vulnerability in the kernel/trace/ftrace.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the kernel/trace/ftrace.c component of the Linux operating system is related to the use of resources with a similar identifier. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the amd_pstate_update() function (drivers/cpufreq/amd-pstate.c) in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the amdpstateupdate function drivers/cpufreq/amd-pstate.c in the Linux kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability in the `media/usb/usbtv/usbtv-video.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the media/usb/usbtv/usbtv-video.c component of the Linux operating system is related to insufficient blocking mechanisms. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the MariaDB database management system, related to improper behavior, allows attackers to trigger service failures.

The vulnerability of the MariaDB database management system is related to improper behavior. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerabilities of the functions ovl_encode_real_fh() (fs/overlayfs/copy_up.c) and show_mark_fhandle() (fs/notify/fdinfo.c) in the Linux operating system’s kernel allow a malicious actor to trigger a service failure.

The vulnerability of the functions ovlencoderealfh fs/overlayfs/copyup.c and showmarkfhandle fs/notify/fdinfo.c in the Linux kernel is related to the insufficient use of the assert function. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability in the driver drbd/drbd_receiver.c of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the driver drbd/drbdreceiver.c of the Linux operating system relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of PostgreSQL PgBouncer’s connection pool software, related to an unreliable search path, allows a hacker to trigger a service failure.

The vulnerability of the PostgreSQL PgBouncer connection pool software is related to an unreliable search process. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the setup_clusters() function in the mm/swapfile.c component of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the setupclusters function in the mm/swapfile.c component of the Linux kernel involves copying buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the blk_stack_limits() function in the block/blk-settings.c component of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the blkstacklimits function in the block/blk-settings.c component of the Linux kernel’s firmware is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the fs/ntfs3/dir.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the fs/ntfs3/dir.c component in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel driver allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel driver ivsc is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the hid-asus.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the hid-asus.c component in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to cause a service failure...