DEBIAN-CVE-2025-37818

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Return NULL from hugepteoffset for invalid PMD LoongArch's hugepteoffset currently returns a pointer to a PMD slot even if the underlying entry points to invalidptetable indicating no mapping. Callers like...

PT-2025-20347

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the LoongArch architecture. The issue arises when the huge pte offset function returns a pointer to a PMD slot even...

kernel: memcg: protect concurrent access to mem_cgroup_idr

memcg in linux kernel permit concurrent access to memcgroupidr which can lead to kernel crashes...

Linux Distros Unpatched Vulnerability : CVE-2024-56659

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: lapb: increase LAPBHEADERLEN It is unclear if net/lapb code is supposed to be ready for 8021q. We can at least avoid crashes like the following : skbuff:...

Linux Distros Unpatched Vulnerability : CVE-2024-56669

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Remove cache tags before disabling ATS The current implementation removes cache...

Linux Distros Unpatched Vulnerability : CVE-2024-36918

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Check bloom filter map value size This patch adds a missing check to bloom filter creating, rejecting values above KMALLOCMAXSIZE. This brings the bloom ma...

Linux Distros Unpatched Vulnerability : CVE-2024-26807

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Both cadence-quadspi -runtimesuspend and -runtimeresume implementations start with: struct cqspist cqspi = devgetdrvdatadev %NASLMINLEVEL 80900 C Tenable, Inc...

Linux Distros Unpatched Vulnerability : CVE-2022-49295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nbd: call genlunregisterfamily first in nbdcleanup Otherwise there may be race between module removal and the handling of netlink command, which can lead to the...

Linux Distros Unpatched Vulnerability : CVE-2022-49326

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rtl818x: Prevent using not initialized queues Using not existing queues can panic the kernel with rtl8180/rtl8185 cards. Ignore the skb priority for those cards...

CVE-2022-49152 XArray: Fix xas_create_range() when multi-order entry present

In the Linux kernel, the following vulnerability has been resolved: XArray: Fix xascreaterange when multi-order entry present If there is already an entry present that is of order = XACHUNKSHIFT when we call xascreaterange, xascreaterange will misinterpret that entry as a node and dereference...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the f2fs module not performing integrity checks on inline inodes, which could lead to a kernel crash...

CVE-2024-56669

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Remove cache tags before disabling ATS The current implementation removes cache tags after disabling ATS, leading to potential memory leaks and kernel crashes. Specifically, CACHETAGDEVTLB type cache tags may still...

CVE-2024-56669 iommu/vt-d: Remove cache tags before disabling ATS

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Remove cache tags before disabling ATS The current implementation removes cache tags after disabling ATS, leading to potential memory leaks and kernel crashes. Specifically, CACHETAGDEVTLB type cache tags may still...

CVE-2024-56669

CVE-2024-56669 (Linux kernel): Fix for cache tag leakage in VT-d IOMMU when disabling ATS that could cause use-after-free and kernel crash, notably with multiple VFs via vfio-pci. Root cause: cache tags were removed after ATS disable, leaving CACHE_TAG_DEVTLB entries in the domain’s list. The pat...

CVE-2024-56540

In CVE-2024-56540, the Linux kernel ivpu IPC path (drivers/accel/ivpu/ivpu_ipc.c) was refactored: ipc send/receive functions were adjusted to avoid triggering a recovery during probe/resume. ivpu_send_receive_internal() is now used by D0i3 entry, DCT init, and HW init, with updated functions retu...

PT-2024-36979 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue arises from the current implementation of the Linux kernel, where cache tags are removed after disabling ATS, leading to potential memory leaks and kernel crashes...

kernel: memcg: protect concurrent access to mem_cgroup_idr

memcg in linux kernel permit concurrent access to memcgroupidr which can lead to kernel crashes...

kernel: memcg: protect concurrent access to mem_cgroup_idr

memcg in linux kernel permit concurrent access to memcgroupidr which can lead to kernel crashes...

CVE-2022-49006

CVE-2022-49006 concerns Linux kernel tracing: when a dynamic event (e.g., a kprobe) is added and later removed, the event type number recycled after 65535 can cause the parsing logic for new events to misinterpret the binary blob. The vulnerability stems from reusing the former type number for a ...

CVE-2024-49888

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a sdiv overflow issue Zac Ecob reported a problem where a bpf program may cause kernel crash due to the following error: Oops: divide error: 0000 1 PREEMPT SMP KASAN PTI The failure is due to the below signed divide:...