CVE-2025-68170

The CVE CVE-2025-68170 concerns the Linux kernel DRM/Radeon driver. The root cause is improper management of the rdev object allocated with devm_drm_dev_alloc(), which previously could be freed with kfree() after the driver probe failed. The fix changes the driver to not kfree() the devres-manage...

CVE-2025-68170 drm/radeon: Do not kfree() devres managed rdev

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Do not kfree devres managed rdev Since the allocation of the drivers main structure was changed to devmdrmdevalloc rdev is managed by devres and we shouldn't be calling kfree on it. This fixes things exploding if the...

CVE-2025-68167 gpiolib: fix invalid pointer access in debugfs

In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix invalid pointer access in debugfs If the memory allocation in gpiolibseqstart fails, the s-private field remains uninitialized and is later dereferenced without checking in gpiolibseqstop. Initialize s-private to NUL...

PT-2025-51594

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the DRM/radeon driver related to the incorrect handling of device resource management. Specifically, calls to drm put dev persist in the probe...

PT-2025-51728

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where an incorrect error return value during device probe can lead to system instability. Specifically, after DME Link Startup, a failure during drive...

The vulnerability of the `be_send_pkt_to_bmc()` function in the `drivers/net/ethernet/emulex/benet/be_main.c` file of the be2net network device driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the besendpkttobmc function in the drivers/net/ethernet/emulex/benet/bemain.c file of the be2net network device driver in the Linux kernel is related to the swapping of pointers. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the `nvme_fc_delete_association()` function in the `drivers/nvme/host/fc.c` file of the NVMe over Fibre Channel driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the nvmefcdeleteassociation function in the drivers/nvme/host/fc.c file of the NVMe over Fibre Channel driver for the Linux operating system is related to multiple releases of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to cause a...

PT-2025-51583

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the DRM/Radeon driver where the rdev structure, managed by devres, was incorrectly being freed using kfree. This occurred because the allocation metho...

PT-2025-51693

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the f eem module within the gadget subsystem, specifically in the eem unwrap function. The existing code lacked proper error handling for usb e...

The vulnerability of the XkbSetCompatMap function in the Wayland protocol for X.Org XWayland, as well as in the X.Org Server, allows a attacker to trigger a service failure.

The vulnerability of the XkbSetCompatMap function in the Wayland protocol implementation for X.Org XWayland, as well as in the X.Org Server implementation of the X Window System, is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service...

The vulnerability of the `present_create_notifies` function in the implementation of the Wayland protocol for X.Org XWayland, as well as in the implementation of the X Window System Server, allows a malicious actor to execute arbitrary code or cause a service failure.

The vulnerability of the presentcreatenotifies function in the implementation of the Wayland protocol for X.Org XWayland, as well as in the implementation of the X Window System Server, is related to the use of memory after it is freed. Exploiting this vulnerability can allow a attacker to execut...

The vulnerability of the sg_finish_rem_req() function in the drivers/scsi/sg.c module of the Linux SCSI device support driver allows a hacker to cause a service failure.

The vulnerability of the sgfinishremreq function in the drivers/scsi/sg.c module of the Linux SCSI device support driver relates to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause service failures...

PT-2025-51642

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.104.2-4.azl3 Description The Linux kernel contains a flaw within the tcm loop module. A segmentation fault can occur in the tcm loop tpg address show function if the allocation of tl hba-sh fails during tcm...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from bmregisterwrite not restoring file write permissions, which could cause subsequent write operations to fail...

Linux Distros Unpatched Vulnerability : CVE-2025-68190

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/atom: Check kcalloc for WS buffer in amdgpuatomexecutetablelocked kcalloc may fail. When WS is non-zero and allocation fails, ectx.ws remains NULL...

The vulnerability of the mptcp_schedule_work() function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the mptcpschedulework function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in the Linux operating system is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow a malicious actor t...

The vulnerability in the driver `drivers/input/keyboard/cros_ec_keyb.c` of the built-in keyboard controller for ChromeOS’s EC kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/input/keyboard/croseckeyb.c file of the keyboard driver for the ChromeOS embedded controller EC in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

EUVD-2025-203407

An issue was discovered in Dynatrace OneAgent before 1.325.47. When attempting to access a remote network share from a machine where OneAgent is installed and receiving a "STATUSLOGONFAILURE" error, the agent will retrieve every user token on the machine and repeatedly attempt to access the netwo...

Exploit for CVE-2025-65318

PoC for CVE-2025-65318 and CVE-2025-65319 - CVE-2025-65318...

CVE-2025-65176

An issue was discovered in Dynatrace OneAgent before 1.325.47. When attempting to access a remote network share from a machine where OneAgent is installed and receiving a "STATUSLOGONFAILURE" error, the agent will retrieve every user token on the machine and repeatedly attempt to access the netwo...