CVE-2025-39842 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39842 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39845 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39845 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-40049 affecting package kernel for versions less than 6.6.112.1-2

CVE-2025-40049 affecting package kernel for versions less than 6.6.112.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2025-40080 affecting package kernel for versions less than 6.6.112.1-2

CVE-2025-40080 affecting package kernel for versions less than 6.6.112.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2025-40056 affecting package kernel for versions less than 6.6.112.1-2

CVE-2025-40056 affecting package kernel for versions less than 6.6.112.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2025-40044 affecting package kernel for versions less than 6.6.112.1-2

CVE-2025-40044 affecting package kernel for versions less than 6.6.112.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2025-39923 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39923 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

SUSE CVE-2025-40166

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Check GuC running state before deregistering exec queue In normal operation, a registered exec queue is disabled and deregistered through the GuC, and freed only after the GuC confirms completion. However, if the driv...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990921)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990921 advisory. In the Linux kernel, the following vulnerability has been resolved: ubi: fastmap: Fix duplicate slab cache names while attaching Since commit 4c39529663b9 slab: Warn...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990915)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990915 advisory. In the Linux kernel, the following vulnerability has been resolved: firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region This patch i...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990913)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990913 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Call crypto layer directly when padatadoparallel return -EBUSY Since commit...

SUSE CVE-2025-40127

In the Linux kernel, the following vulnerability has been resolved: hwrng: ks-sa - fix division by zero in kssarnginit Fix division by zero in kssarnginit caused by missing clock pointer initialization. The clkgetrate call is performed on an uninitialized clk pointer, resulting in division by zer...

Siemens SIMATIC S7-1500 Improper Input Validation (CVE-2024-50246)

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add rough attr allocsize check This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if descripti...

DEBIAN-CVE-2025-40206

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftobjref: validate objref and objrefmap expressions Referencing a synproxy stateful object from OUTPUT hook causes kernel crash due to infinite recursive calls: BUG: TASK stack guard page was hit at 000000008bda5b8c...

AZL-70073 CVE-2025-40200 affecting package kernel for versions less than 6.6.117.1-1

In the Linux kernel, the following vulnerability has been resolved: Squashfs: reject negative file sizes in squashfsreadinode Syskaller reports a "WARNING in ovlcopyupfile" in overlayfs. This warning is ultimately caused because the underlying Squashfs file system returns a file with a negative...

DEBIAN-CVE-2025-40191

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix kfd process ref leaking when userptr unmapping kfdlookupprocessbypid hold the kfd process reference to ensure it doesn't get destroyed while sending the segfault event to user space. Calling kfdlookupprocessbypid ...

CVE-2025-40202

In the Linux kernel, the following vulnerability has been resolved: ipmi: Rework user message limit handling The limit on the number of user messages had a number of issues, improper counting in some cases and a use after free. Restructure how this is all done to handle more in the receive messag...

CVE-2025-40198

CVE-2025-40198 affects the Linux kernel's ext4 subsystem. The issue is a potential buffer over-read in parse_apply_sb_mount_options(), triggered by handling of the s_mount_opts string. The fix Hardened parse_apply_sb_mount_options() by treating s_mount_opts as a potential __nonstring and relying ...

CVE-2025-40187 net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()

In the Linux kernel, the following vulnerability has been resolved: net/sctp: fix a null dereference in sctpdisposition sctpsfdo51Dce If newasoc-peer.adaptationind=0 and sctpulpeventmakeauthkey=0 and sctpulpeventmakeauthkey returns 0, then the variable aiev remains zero and the zero will be...

CVE-2025-40187

CVE-2025-40187 (Linux kernel SCTP). A null dereference in net/sctp: sctp_disposition sctp_sf_do_5_1D_ce() can occur when new_asoc->peer.adaptation_ind=0 and sctp_ulpevent_make_authkey=0, and sctp_ulpevent_make_authkey() returns 0, leaving ai_ev zero and dereferenced in sctp_ulpevent_free(). Th...