AZL-60270 CVE-2025-21969 affecting package kernel for versions less than 6.6.85.1-2

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2capsendcmd After the hci sync command releases l2capconn, the hci receive data work queue references the released l2capconn when sending to the upper layer. Add hci dev lock to...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2025-097 (ALASKERNEL-5.4-2025-097)

The version of kernel installed on the remote host is prior to 5.4.291-206.400. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2025-097 advisory. In the Linux kernel, the following vulnerability has been resolved: Squashfs: check the inode number is no...

CVE-2024-26687 affecting package kernel for versions less than 5.15.176.3-3

CVE-2024-26687 affecting package kernel for versions less than 5.15.176.3-3. A patched version of the package is available...

AZL-69494 CVE-2025-21881 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: uprobes: Reject the shared zeropage in uprobewriteopcode We triggered the following crash in syzkaller tests: BUG: Bad page state in process syz.7.38 pfn:1eff3 page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0...

AZL-59405 CVE-2025-21887 affecting package kernel for versions less than 5.15.180.1-1

In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovldentryupdatereval by moving dput in ovllinkup The issue was caused by dputupper being called before ovldentryupdatereval, while upper-dflags was still accessed in ovldentryremote. Move dputupper after its last...

Important: Red Hat Security Advisory: kpatch-patch-5_14_0-427_13_1, kpatch-patch-5_14_0-427_31_1, kpatch-patch-5_14_0-427_44_1, and kpatch-patch-5_14_0-427_55_1 security update

An update for kpatch-patch-5140-427131, kpatch-patch-5140-427311, kpatch-patch-5140-427441, and kpatch-patch-5140-427551 is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

CentOS 9 : kernel-5.14.0-572.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the kernel-5.14.0-572.el9 build changelog. - In the Linux kernel, the following vulnerability has been resolved: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array The...

CVE-2024-47736 affecting package kernel for versions less than 6.6.76.1-1

CVE-2024-47736 affecting package kernel for versions less than 6.6.76.1-1. A patched version of the package is available...

CVE-2024-46859 affecting package kernel for versions less than 5.15.176.3-1

CVE-2024-46859 affecting package kernel for versions less than 5.15.176.3-1. A patched version of the package is available...

CVE-2024-53135 affecting package kernel for versions less than 5.15.176.3-1

CVE-2024-53135 affecting package kernel for versions less than 5.15.176.3-1. A patched version of the package is available...

PT-2025-18419

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.13.0-rc2+ Description A slab-use-after-free bug has been identified in the Linux kernel, specifically in the ext4 file system. The issue arises when the kernel fails to ignore extended attributes past the 'end'...

CVE-2024-53120 affecting package kernel for versions less than 5.15.176.3-1

CVE-2024-53120 affecting package kernel for versions less than 5.15.176.3-1. A patched version of the package is available...

CVE-2024-47143 affecting package kernel for versions less than 6.6.76.1-1

CVE-2024-47143 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-21658 affecting package kernel for versions less than 6.6.76.1-1

CVE-2025-21658 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-56602 affecting package kernel for versions less than 6.6.76.1-1

CVE-2024-56602 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-56640 affecting package kernel for versions less than 6.6.76.1-1

CVE-2024-56640 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...

AZL-58532 CVE-2025-21846 affecting package kernel for versions less than 6.6.82.1-1

In the Linux kernel, the following vulnerability has been resolved: acct: perform last write from workqueue In 1 it was reported that the acct2 system call can be used to trigger NULL deref in cases where it is set to write to a file that triggers an internal lookup. This can e.g., happen when...

Amazon Linux 2 : kernel, --advisory ALAS2-2025-2778 (ALAS-2025-2778)

The version of kernel installed on the remote host is prior to 4.14.352-267.564. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2778 advisory. In the Linux kernel, the following vulnerability has been resolved: net: relax socket state check at accept time...

CVE-2024-56629 affecting package kernel for versions less than 5.15.176.3-1

CVE-2024-56629 affecting package kernel for versions less than 5.15.176.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-56781 affecting package kernel for versions less than 5.15.176.3-1

CVE-2024-56781 affecting package kernel for versions less than 5.15.176.3-1. An upgraded version of the package is available that resolves this issue...