DEBIAN-CVE-2025-38298

In the Linux kernel, the following vulnerability has been resolved: EDAC/skxcommon: Fix general protection fault After loading i10nmedac which automatically loads skxedaccommon, if unload only i10nmedac, then reload it and perform error injection testing, a general protection fault may occur: mce...

CVE-2025-38298

In the Linux kernel, the following vulnerability has been resolved: EDAC/skxcommon: Fix general protection fault After loading i10nmedac which automatically loads skxedaccommon, if unload only i10nmedac, then reload it and perform error injection testing, a general protection fault may occur: mce...

CVE-2025-38298 EDAC/skx_common: Fix general protection fault

In the Linux kernel, the following vulnerability has been resolved: EDAC/skxcommon: Fix general protection fault After loading i10nmedac which automatically loads skxedaccommon, if unload only i10nmedac, then reload it and perform error injection testing, a general protection fault may occur: mce...

CVE-2025-38298

CVE-2025-38298 corresponds to a Linux kernel EDAC issue (EDAC/skx_common) where reloading i10nm_edac after unloading and reloading can trigger a general protection fault. The root cause was that the adxl_component_count variable, which tracks ADXL components, was not reset during the reload seque...

CVE-2025-38298 EDAC/skx_common: Fix general protection fault

In the Linux kernel, the following vulnerability has been resolved: EDAC/skxcommon: Fix general protection fault After loading i10nmedac which automatically loads skxedaccommon, if unload only i10nmedac, then reload it and perform error injection testing, a general protection fault may occur: mce...

CVE-2025-38260 btrfs: handle csum tree error with rescue=ibadroots correctly

In the Linux kernel, the following vulnerability has been resolved: btrfs: handle csum tree error with rescue=ibadroots correctly BUG There is syzbot based reproducer that can crash the kernel, with the following call trace: With some debug output added DEBUG: rescue=ibadroots parsed BTRFS: devic...

OPENSUSE-SU-2025:15328-1 go1.23-1.23.11-1.1 on GA media

These are all security issues fixed in the go1.23-1.23.11-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15333-1 libmruby3_4_0-3.4.0-1.1 on GA media

These are all security issues fixed in the libmruby340-3.4.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15327-1 coreutils-9.7-3.1 on GA media

These are all security issues fixed in the coreutils-9.7-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15329-1 go1.24-1.24.5-1.1 on GA media

These are all security issues fixed in the go1.24-1.24.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15325-1 MozillaFirefox-140.0.2-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-140.0.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15323-1 libpoppler-cpp2-25.06.0-1.1 on GA media

These are all security issues fixed in the libpoppler-cpp2-25.06.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15320-1 avif-tools-1.3.0-2.1 on GA media

These are all security issues fixed in the avif-tools-1.3.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15319-1 djvulibre-3.5.29-1.1 on GA media

These are all security issues fixed in the djvulibre-3.5.29-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15322-1 libPocoActiveRecord112-1.14.2-1.1 on GA media

These are all security issues fixed in the libPocoActiveRecord112-1.14.2-1.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the General HTML Support function (GHS) and the HTML embed panel in the Block Toolbar of the CKEditor editor allows attackers to execute XSS attacks.

The vulnerability of the General HTML Support function and the HTML embed panel in the Block Toolbar WYSIWYG-editor CKEditor is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability may allow a malicious actor to carry out XSS attacks remotely...

OPENSUSE-SU-2025:15317-1 incus-6.14-1.1 on GA media

These are all security issues fixed in the incus-6.14-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-38184

In the Linux kernel, the following vulnerability has been resolved: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer The reproduction steps: 1. create a tun interface 2. enable l2 bearer 3. TIPCNLUDPGETREMOTEIP with media name set to tun tipc: Started in network mode tipc:...

OPENSUSE-SU-2025:15316-1 python311-Pillow-11.3.0-1.1 on GA media

These are all security issues fixed in the python311-Pillow-11.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

UBUNTU-CVE-2025-38203

In the Linux kernel, the following vulnerability has been resolved: jfs: Fix null-ptr-deref in jfsioctrim Syzkaller Report Oops: general protection fault, probably for non-canonical address 0xdffffc0000000087: 0000 1 KASAN: null-ptr-deref in range 0x0000000000000438-0x000000000000043f CPU: 2 UID:...