CVE-2025-68735

CVE-2025-68735 affects the Linux kernel’s DRM panthor code, specifically the GROUP_CREATE ioctl. The root cause is a use-after-free risk where a pointer to a created group could be accessed after it was stored in the Xarray, allowing a concurrent GROUP_DESTROY on a not-yet-marked handle. The fix ...

kernel: ppp_async: limit MRU to 64K

In the Linux kernel, the following vulnerability has been resolved: pppasync: limit MRU to 64K syzbot triggered a warning 1 in allocpages: WARNONONCEGFPorder MAXPAGEORDER, gfp Willem fixed a similar issue in commit c0a2a1b0d631 "ppp: limit MRU to 64K" Adopt the same sanity check for...