Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a Rust version incompatibility that could cause the kernel to crash...

PT-2025-25810

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version Description A vulnerability in the Linux kernel has been resolved, related to the nvmet-tcp module. The issue occurs when the TCP connection is not established, causing the queue-state change to...

PT-2025-25824

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.15.0-rc6-zp 41 Description A kernel crash was observed due to a NULL pointer dereference when replacing free hugetlb folios. This issue arises from a potential race between update and free hugetlb folio and...

PT-2025-25973 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, which prevented a crash on an unused port. The issue occurred when the port was neither a CPU port nor a user port, resulting in ...

PT-2025-33802

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel's Wi-Fi driver for rtl818x devices. Specifically, the issue involves the order of operations during the rtl8187 stop function. Failing to kill URBs US...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: btrfs: Fixed a double accounting race when btrfsrundelallocrange fails. BUG When running btrfs with a block size 4K smaller than the page size 64K, aarch64, there is a very high chance of crashing the kernel at generic/750, wi...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: Wifi: mac80211: Purge vif txq in ieee80211dostop After ieee80211dostop, the packets from vif’s txq might still be processed. Another concurrent call to scheduleandwaketxq could cause those packets to be dequeued see...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: book3s64/radix : Align section vmemmap start address to PAGESIZE A vmemmap altmap is a device-provided region used to provide backing storage for struct pages. For each namespace, the altmap should belong to that same namespace. ...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fixed a possible crash that occurred when setting up bsg failed. If bsgsetupqueue fails, the bsgqueue is assigned a non-NULL value. Consequently, in mpi3mrbsgexit, the condition “if!mrioc-bsgqueue” will not be...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: sst: Fixed the issue where only one byte of data was written, regardless of the number of bytes passed to sstnorwritedata, causing a kernel crash during the write operation. The change introduced by “commit...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net/mlx5: The port select structure is cleared when attempting to create it. The port select structure is cleared in case of an error, so no stale values remain after the definers are destroyed. This is because the...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: sched: A potential NULL pointer dereferencing issue exists in the GRED scheduler. If kzalloc in gredinit returns a NULL pointer, the code follows the error handling path and invokes greddestroy. This, in turn, calls gredoffload. ...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: batman-adv: fixed a panic that occurred during the removal of an interface. Reference counting is used to ensure that batadvhardifneighnode and batadvhardiface are not freed before/during the completion of...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Media: MediTech; vcodec: Fixed the VP8 stateless decoder’s “smatch” warning. A “smatch” static checker warning was also fixed in vdecvp8reqif.c. This issue causes the kernel to crash when fb is set to NULL...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: bnxten: Fixed the receive ring space parameters when XDP is active. The MTU setting at the time a XDP multi-buffer is attached determines whether the aggregation ring will be used and the rxskbfunc handler. This is done in...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: The hanghws function in debugfs skips the GPU when using MES. The hanghws function is used in GPU reset tests involving HWS. For MES, this results in a crash. The issue occurs due to NULL pointer access in the kernel,...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: LoongArch: The hugepteoffset function currently returns a pointer to a PMD slot, even when the underlying entry points to an invalid invalidptetable indicating no mapping. Functions like smapshugetlbrange retrieve this invalid...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Set phy-enablecompletion only when we wait for it. The pm8001phycontrol function populates the enablecompletion pointer with a stack address, sends a PHYLINKRESET/PHYHARDRESET, waits for 300 milliseconds, and then...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: usb: renesasusbhs: Flush the notifyhotplugwork When performing continuous unbind/bind operations on the USB drivers available on the Renesas RZ/G2L SoC, a kernel crash with the message “Unable to handle kernel NULL pointer...

PT-2025-34409

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The stm32 spi probe function lacked a check to ensure the pointer returned by of device get match data was not NULL before accessing its members. This could lead to a NULL pointer...