CVE-2022-49960

CVE-2022-49960 concerns a Linux kernel vulnerability in the i915 DRM driver where a null pointer dereference in tgl_get_bw_info() (bi_next) can cause a kernel panic. The issue manifests during Asus Chromebooks booting on v5.17-rc1, producing an Oops and a fatal exception. The bug was fixed by the...

CVE-2022-49955 powerpc/rtas: Fix RTAS MSR[HV] handling for Cell

In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: Fix RTAS MSRHV handling for Cell The semi-recent changes to MSR handling when entering RTAS firmware cause crashes on IBM Cell machines. An example trace: kernel tried to execute user page 2fff01a8 - exploit attempt...

CVE-2025-38071

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Check return value from memblockphysallocrange At least with CONFIGPHYSICALSTART=0x100000, if there is 4 MiB of contiguous free memory available at this point, the kernel will crash and burn because memblockphysallocrange...

CVE-2025-38073

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-38050

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix kernel NULL pointer dereference when replacing free hugetlb folios A kernel crash was observed when replacing free hugetlb folios: BUG: kernel NULL pointer dereference, address: 0000000000000028 PGD 0 P4D 0 Oops:...

UBUNTU-CVE-2025-38071

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Check return value from memblockphysallocrange At least with CONFIGPHYSICALSTART=0x100000, if there is 4 MiB of contiguous free memory available at this point, the kernel will crash and burn because memblockphysallocrange...

UBUNTU-CVE-2025-38054

In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Limit signal/freq counts in summary output functions The debugfs summary output could access uninitialized elements in the freqin and signalout arrays, causing NULL pointer dereferences and triggering a kernel Oops...

CVE-2025-38075

CVE-2025-38075 affects the Linux kernel iscsi target/scsi subsystem. A NOPIN response timer could be restarted on expiration for a deleted connection, causing a NULL pointer dereference and a crash in iscsit_fill_cxn_timeout_err_stats during timeout handling. The root cause is the nopin timer bei...

CVE-2025-38075 scsi: target: iscsi: Fix timeout on deleted connection

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix timeout on deleted connection NOPIN response timer may expire on a deleted connection and crash with such logs: Did not receive response to NOPIN on CID: 0, failing connection for IT Nexus...

CVE-2025-38073 block: fix race between set_blocksize and read paths

In the Linux kernel, the following vulnerability has been resolved: block: fix race between setblocksize and read paths With the new large sector size support, it's now the case that setblocksize can change iblksize and the folio order in a manner that conflicts with a concurrent reader and cause...

CVE-2025-38073

...

CVE-2025-38069

Technical details for CVE-2025-38069 are not provided in the connected documents. Monitor for updates from upstream advisories.

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a Rust version incompatibility that could cause the kernel to crash...

PT-2025-25824

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.15.0-rc6-zp 41 Description A kernel crash was observed due to a NULL pointer dereference when replacing free hugetlb folios. This issue arises from a potential race between update and free hugetlb folio and...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a misconfiguration of the clock source, which could cause the kernel to crash...

PT-2025-25990 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free issue in the Linux kernel has been identified, specifically in the virtio-blk component. The issue occurs when the hctx-user data is set to vq in virtblk init hctx, bu...

PT-2025-25973 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, which prevented a crash on an unused port. The issue occurred when the port was neither a CPU port nor a user port, resulting in ...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from the arkfb driver's divide-by-zero error in arksetpixclock, which could lead to a crash...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a potential divide-by-zero error in fbpm2fb, which could cause the kernel to crash...

编号撤回

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a race condition between setblocksize and the read path, which could cause the kernel to crash...