Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unchecked kzalloc return value that could lead to a null pointer dereference...

PT-2025-51721

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to PCI/AER functionality. Specifically, a NULL pointer access can occur within the aer info structure due to a potential NULL return from the...

PT-2025-44127

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's coresight component related to the handling of return values from the devm kzalloc function. Specifically, the return value of devm kzalloc could be a...

drm/amd/display: Add NULL pointer check for kzalloc

...

Linux Distros Unpatched Vulnerability : CVE-2025-37743

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath12k: Avoid memory leak while enabling statistics Driver uses monitor destination rings for extended statistics mode and standalone monitor mode. In...

Linux Distros Unpatched Vulnerability : CVE-2025-38373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IB/mlx5: Fix potential deadlock in MR deregistration The issue arises when kzalloc is invoked while holding umemmutex or any other lock acquired under umemmutex...

Linux Distros Unpatched Vulnerability : CVE-2025-38408

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - genirq/irqsim: Initialize work context pointers properly Initialize ops member's pointers properly by using kzalloc instead of kmalloc when allocating the...

Linux Distros Unpatched Vulnerability : CVE-2024-56730

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/9p/usbg: fix handling of the failed kzalloc memory allocation On the linux-next,...

Linux Distros Unpatched Vulnerability : CVE-2022-3115

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel through 5.16-rc6. malidpcrtcreset in drivers/gpu/drm/arm/malidpcrtc.c lacks check of the return value of kzalloc and...

PT-2025-39127

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s dmaengine subsystem, specifically within the idxd setup wqs function. The issue involves a potential double free condition during cleanup operations...

Linux Distros Unpatched Vulnerability : CVE-2025-38363

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/tegra: Fix a possible null pointer dereference In tegracrtcreset, new memory is allocated with kzalloc, but no check is performed. Before calling...

Linux Distros Unpatched Vulnerability : CVE-2024-36014

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/arm/malidp: fix a possible null pointer dereference In malidpmwconnectorreset, new memor...

Linux Distros Unpatched Vulnerability : CVE-2024-26817

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - amdkfd: use calloc instead of kzalloc to avoid integer overflow This uses calloc instead of doing the multiplication which might overflow. CVE-2024-26817 Note...

Linux Distros Unpatched Vulnerability : CVE-2025-37989

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: phy: leds: fix memory leak A network restart test on a router led to an out-of-memory condition, which was traced to a memory leak in the PHY LED trigger...

Linux Distros Unpatched Vulnerability : CVE-2023-3220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel through 6.1-rc8. dpucrtcatomiccheck in drivers/gpu/drm/msm/disp/dpu1/dpucrtc.c lacks check of the return value of...

The vulnerability of the kzalloc() function in the irq_sim component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the kzalloc function in the irqsim component of the Linux operating system’s kernel is related to improper initialization of the resource. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

SUSE CVE-2025-38408

In the Linux kernel, the following vulnerability has been resolved: genirq/irqsim: Initialize work context pointers properly Initialize ops member's pointers properly by using kzalloc instead of kmalloc when allocating the simulation work context. Otherwise the pointers contain random content...

SUSE CVE-2025-38363

In the Linux kernel, the following vulnerability has been resolved: drm/tegra: Fix a possible null pointer dereference In tegracrtcreset, new memory is allocated with kzalloc, but no check is performed. Before calling drmatomichelpercrtcreset, state should be checked to prevent possible null...

DEBIAN-CVE-2025-38408

In the Linux kernel, the following vulnerability has been resolved: genirq/irqsim: Initialize work context pointers properly Initialize ops member's pointers properly by using kzalloc instead of kmalloc when allocating the simulation work context. Otherwise the pointers contain random content...

UBUNTU-CVE-2025-38408

In the Linux kernel, the following vulnerability has been resolved: genirq/irqsim: Initialize work context pointers properly Initialize ops member's pointers properly by using kzalloc instead of kmalloc when allocating the simulation work context. Otherwise the pointers contain random content...