SUSE-SU-2025:02514-1 Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506002347 fixes several issues. The following security issue was fixed: - CVE-2025-22115: btrfs: fix block group refcount race in btrfscreatependingblockgroups bsc1241579...

SUSE-SU-2025:02459-1 Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005573 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow bsc1234854. - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability bsc1235005. - CVE-2024-5317...

RHEL 8 : kernel-rt (RHSA-2025:11299)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11299 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

AlmaLinux 8 : kernel-rt (ALSA-2025:9581)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:9581 advisory. kernel: cifs: fix double free race when mount fails in cifsgetroot CVE-2022-48919 kernel: security/keys: fix slab-out-of-bounds in keytaskpermission...

AlmaLinux 9 : kernel (ALSA-2025:9880)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:9880 advisory. kernel: Squashfs: fix handling and sanity checking of xattrids count CVE-2023-52933 Tenable has extracted the preceding description block directly from the AlmaLin...

Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: cifs: fix double free race when mount fails in cifsgetroot CVE-2022-48919 kernel: security/keys: fix slab-out-of-bounds in...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2025-073 (ALASKERNEL-5.15-2025-073)

The version of kernel installed on the remote host is prior to 5.15.184-125.190. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2025-073 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix WRITESAME No Data...

CVE-2022-49853

The CVE-2022-49853 entry documents a Linux kernel macvlan memory-leak in macvlan_common_newlink when macvlan mode is set to source. If register_netdevice() errors during macvlan_changelink_sources(), the resources created by macvlan_changelink_sources() are not cleaned up, leading to a memory lea...

CVE-2022-49801 tracing: Fix memory leak in tracing_read_pipe()

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix memory leak in tracingreadpipe kmemleak reports this issue: unreferenced object 0xffff888105a18900 size 128: comm "testprogs", pid 18933, jiffies 4336275356 age 22801.766s hex dump first 32 bytes: 25 73 00 90 81 88 f...

CVE-2025-23156 media: venus: hfi_parser: refactor hfi packet parsing logic

In the Linux kernel, the following vulnerability has been resolved: media: venus: hfiparser: refactor hfi packet parsing logic wordscount denotes the number of words in total payload, while data points to payload of various property within it. When wordscount reaches last word, data can access...

CVE-2025-21935

In the Linux kernel, the following vulnerability has been resolved: rapidio: add check for rioaddnet in rioscanallocnet The return value of rioaddnet should be checked. If it fails, putdevice should be called to free the memory and give up the reference initialized in rioaddnet...

RHEL 9 : kernel-rt (RHSA-2025:3127)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:3127 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Securi...

Azure Linux 3.0 Security Update: kernel (CVE-2024-57900)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-57900 advisory. - In the Linux kernel, the following vulnerability has been resolved: ila: serialize calls to nfregisternethoo...

Azure Linux 3.0 Security Update: kernel (CVE-2024-53145)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53145 advisory. - In the Linux kernel, the following vulnerability has been resolved: um: Fix potential integer overflow durin...

Linux Distros Unpatched Vulnerability : CVE-2024-49884

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: fix slab-use-after-free in ext4splitextentat We hit the following use-after-free: ================================================================== BUG:...

Linux Distros Unpatched Vulnerability : CVE-2025-21729

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtw89: fix race between cancelhwscan and hwscan completion The rtwdev-scanning flag isn't protected by mutex originally, so cancelhwscan can pass the...

Linux Distros Unpatched Vulnerability : CVE-2025-21660

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix unexpectedly changed path in ksmbdvfskernpathlocked When ksmbdvfskernpathlocked m...

Linux Distros Unpatched Vulnerability : CVE-2024-57934

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fgraph: Add READONCE when accessing fgrapharray In ftracereturntohandler, a loop iterates ov...

Linux Distros Unpatched Vulnerability : CVE-2024-53130

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nilfs2: fix null-ptr-deref in blockdirtybuffer tracepoint When using the block:blockdirtybuffer tracepoint, markbufferdirty may cause a NULL pointer dereference...

Linux Distros Unpatched Vulnerability : CVE-2024-57881

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: don't call pfntopage on possibly non-existent PFN in splitlargebuddy In...