CVE-2025-40338

CVE-2025-40338 is a Linux kernel vulnerability in ASoC: Intel avs where sharing the component name pointer could cause use-after-free during teardown. The fix duplicates the component name to prevent lifetime issues and updates the initialization/teardown order (noting that the config may pass a ...

CVE-2025-40338

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Do not share the name pointer between components By sharing 'name' directly, tearing down components may lead to use-after-free errors. Duplicate the name to avoid that. At the same time, update the order of...

CVE-2023-53833

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix NULL ptr deref by checking newcrtcstate intelatomicgetnewcrtcstate can return NULL, unless crtc state wasn't obtained previously with intelatomicgetcrtcstate, so we must check it for NULLness here, just as in many...

CVE-2023-53793

In the Linux kernel, the following vulnerability has been resolved: perf tool x86: Fix perfenv memory leak Found by leak sanitizer: ==1632594==ERROR: LeakSanitizer: detected memory leaks Direct leak of 21 bytes in 1 objects allocated from: 0 0x7f2953a7077b in interceptorstrdup...

SUSE CVE-2023-53756

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Fix crash due to uninitialized currentvmcs KVM enables 'Enlightened VMCS' and 'Enlightened MSR Bitmap' when running as a nested hypervisor on top of Hyper-V. When MSR bitmap is updated, evmcstouchmsrbitmap function uses...

CVE-2025-40344: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Disable periods-elapsed work when closing PCM avsdaifeshutdown handles the shutdown procedure for HOST HDAudio stream while period-elapsed work services its IRQs. As the former frees the DAI's private context,...

Linux Distros Unpatched Vulnerability : CVE-2025-40338

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: Intel: avs: Do not share the name pointer between components By sharing 'name' directly, tearing down components may lead to use-after-free errors...

Linux Distros Unpatched Vulnerability : CVE-2025-40344

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: Intel: avs: Disable periods-elapsed work when closing PCM avsdaifeshutdown handles the shutdown procedure for HOST HDAudio stream while period-elapsed wor...

Amazon Linux 2023 : amd-ucode-firmware, iwl100-firmware, iwl105-firmware (ALAS2023-2025-1307)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1307 advisory. Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could potentially lead to a partial loss of integrity. CVE-2025-54514 Improper...

Intel® Xeon® 6 Processors with P-cores with Intel® TDX Connect Advisory

Summary: Potential security vulnerabilities for the Intel® Xeon® 6 Processors with P-cores with Intel® Trust Domain Extensions Connect Intel® TDX Connect may allow information disclosure or escalation of privilege. Intel is releasing guidance to address these potential vulnerabilities...

EUVD-2025-201648

In the Linux kernel, the following vulnerability has been resolved: platform/x86: int3472: Fix double free of GPIO device during unregister regulatorunregister already frees the associated GPIO device. On ThinkPad X9 Lunar Lake, this causes a double free issue that leads to random failures when...

DEBIAN-CVE-2025-40296

In the Linux kernel, the following vulnerability has been resolved: platform/x86: int3472: Fix double free of GPIO device during unregister regulatorunregister already frees the associated GPIO device. On ThinkPad X9 Lunar Lake, this causes a double free issue that leads to random failures when...

UBUNTU-CVE-2025-40296

In the Linux kernel, the following vulnerability has been resolved: platform/x86: int3472: Fix double free of GPIO device during unregister regulatorunregister already frees the associated GPIO device. On ThinkPad X9 Lunar Lake, this causes a double free issue that leads to random failures when...

CVE-2025-40296 platform/x86: int3472: Fix double free of GPIO device during unregister

In the Linux kernel, the following vulnerability has been resolved: platform/x86: int3472: Fix double free of GPIO device during unregister regulatorunregister already frees the associated GPIO device. On ThinkPad X9 Lunar Lake, this causes a double free issue that leads to random failures when...

PT-2025-49479

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained an incorrect exception table annotation in the clear user rep good function. This could lead to a kernel oops report being generated instead of a -EFAULT retur...

PT-2026-6161

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where a reference to a 'th' device is leaked during output device open operations, both on errors and when closing the device. A prior commit addressed...

PT-2025-49486

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the KVM component, specifically related to nested hypervisor operation on Hyper-V. The issue stems from an uninitialized current vmcs variable...

PT-2025-49429

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to a double free of a GPIO device during unregistration. Specifically, the regulator unregister function already frees the associated GPIO devic...

Linux Kernel DoS

The vulnerability of the createsdwdailink function in the sound/soc/intel/boards/sofsdw.c file, a part of the SoC support subsystem and used for portable audio decoders in Linux operating systems, is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause...

Linux intel_pmu_acr_late_setup Heap Buffer Overflow DoS

The vulnerability of the intelpmuacrlatesetup function in the arch/x86/events/intel/core.c module of the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to cause a service failure...