USN-7906-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - Cryptographic API; - Android drivers; - TTY drivers; - F2FS file system; - 9P file system netwo...

Vulnerability of the ndev_initdebugfs() function in the drivers/ntb/hw/intel/ntb_hwgen1.c module – This driver is part of the Intel Linux kernel’s support for opaque bridges, allowing a hacker to cause a service failure.

Vulnerability of the ndevinitdebugfs function in the drivers/ntb/hw/intel/ntbhwgen1.c module – The Linux kernel’s Intel support driver has a vulnerability related to incorrect checking of the return value of the function. Exploiting this vulnerability could allow an attacker to cause a system...

The vulnerability of Intel microprogramming software, related to insufficient spatial partitioning, allows attackers to enhance their privileges.

The vulnerability of Intel microprogramming software is related to insufficient spatial partitioning. Exploiting this vulnerability allows attackers to enhance their privileges...

Vulnerability of the iwl_mvm_mac_remove_interface() function in the drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c module – This driver is part of the Intel wireless adapter support in Linux operating systems. It can be exploited by attackers to cause service interruptions.

The vulnerability of the iwlmvmmacremoveinterface function in the drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c module of the Linux operating system’s wireless adapter driver leads to the failure to release resources after their useful life has ended. Exploiting this vulnerability can allow a...

Vulnerability of the intel_hdcp_gsc_check_status() function in the driver/gpu/drm/xe/display/xe_hdcp_gsc.c module – A driver for supporting Direct Rendering Infrastructure (DRI) in Linux kernels, which allows a hacker to cause service failure

Vulnerability of the intelhdcpgsccheckstatus function in the driver/gpu/drm/xe/display/xehdcpgsc.c module – The Linux kernel’s DRI support driver is vulnerable due to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause service failures...

Vulnerability of the intel_hdcp_read_valid_bksv() function in the driver/gpu/drm/i915/display/intel_hdcp.c module – This driver is part of the Linux kernel’s Direct Rendering Infrastructure (DRI) support mechanism. An attacker can exploit this vulnerability to cause a service failure.

Vulnerability of the intelhdcpreadvalidbksv function in the driver/gpu/drm/i915/display/intelhdcp.c module – The Linux DRI driver is vulnerable due to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Fedora 43 : linux-firmware (2025-698dc1bbfa)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-698dc1bbfa advisory. Update to 20251125: Revert amdgpu: update GC 11.0.1 firmware QCA: Add Bluetooth firmware for WCN685x uart interface qcom: Add ADSP firmware for...

Fedora 42 : linux-firmware (2025-a45a370014)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-a45a370014 advisory. Update to 20251125: Revert amdgpu: update GC 11.0.1 firmware QCA: Add Bluetooth firmware for WCN685x uart interface qcom: Add ADSP firmware for...

Intel oneAPI Math Kernel Library < 2025.2.0 DoS

A DoS vulnerability exists in Intel oneAPI Math Kernel Library versions prior to 2025.2. Improper input validation for some IntelR oneAPI Math Kernel Library before version 2025.2 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated...

The vulnerability of Intel Xeon processor microprogramming software, related to the execution of operations outside the buffer in memory, allows attackers to exploit their privileges.

The vulnerability of Intel Xeon processor microprogramming software relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows attackers to enhance their privileges...

Vulnerability of the idpf_init_hard_reset() function in the drivers/net/ethernet/intel/idpf/idpf_lib.c module – A driver for supporting Intel Ethernet network adapters in Linux operating systems, which allows a hacker to cause a service failure.

Vulnerability of the idpfinithardreset function in the drivers/net/ethernet/intel/idpf/idpflib.c module – The Linux kernel-based Intel Ethernet network adapter driver relies on pointer manipulation for its functionality. Exploiting this vulnerability could allow an attacker to cause a system...

Intel HPC Toolkit Privilege Escalation Vulnerability (INTEL-SA-01386)

Intel® oneAPI HPC Toolkit is installed on the remote Windows host. It is, therefore, affected by an escalation of privilege vulnerability: - Uncontrolled search path for the Intel® oneAPI HPC Toolkit and 2025.2: User Applications may allow an escalation of privilege. Unprivileged software...

kernel: i40e: add validation for ring_len param

A flaw was identified in the Intel “i40e” Ethernet driver in the Linux Kernel where the ringlen parameter supplied by a VF virtual function is passed unchecked to the hardware memory context. If a malicious Virtual function provides a too-large or misaligned ringlen, it may allow the device to...

kernel: i40e: fix idx validation in config queues msg

A flaw was found in the Linux kernel in the Intel i40e network driver such that in the function i40evcconfigqueuesmsg, when iterating over vf-chidx, the idx value is not properly validated against the range of active/initialized traffic classes TCs. An attacker with local privileges could supply ...

openSUSE 16 Security Update : libvirt (openSUSE-SU-2025-20100-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025-20100-1 advisory. - CVE-2025-13193: Fixed Information disclosure via world-readable VM snapshots bsc1253703 - CVE-2025-12748: Fixed Denial of service in XML parsi...

The vulnerability of microprogrammed software for Intel Xeon 6 processor with P-cores, related to writing beyond buffer boundaries, allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of microprogrammed software in Intel Xeon 6 processor with P-cores relates to writing beyond buffer boundaries. Exploiting this vulnerability allows attackers to compromise the confidentiality and integrity of the protected information...

kernel: iommu/vt-d: Disallow dirty tracking if incoherent page walk

A flaw was found in the Intel VT-d IOMMU support in the Linux kernel. When an IOMMU is configured to perform dirty-page tracking, but the page-walk memory region is incoherent between the IOMMU and CPU, the hardware may attempt to atomically update the bits in a paging-structure entry that is not...

kernel: i40e: add validation for ring_len param

A flaw was identified in the Intel “i40e” Ethernet driver in the Linux Kernel where the ringlen parameter supplied by a VF virtual function is passed unchecked to the hardware memory context. If a malicious Virtual function provides a too-large or misaligned ringlen, it may allow the device to...

kernel: i40e: fix idx validation in config queues msg

A flaw was found in the Linux kernel in the Intel i40e network driver such that in the function i40evcconfigqueuesmsg, when iterating over vf-chidx, the idx value is not properly validated against the range of active/initialized traffic classes TCs. An attacker with local privileges could supply ...

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: nfsd: handle getclientlocked failure in nfsd4setclientidconfirm CVE-2025-38724 kernel: smb: client: fix race with concurrent opens in rename2 CVE-2025-39825 kernel: mm/memory-failure: fix...