CVE-2025-38019 mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumrouter: Fix use-after-free when deleting GRE net devices The driver only offloads neighbors that are constructed on top of net devices registered by it or their uppers which are all Ethernet. The device supports GR...

CVE-2025-38019 mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumrouter: Fix use-after-free when deleting GRE net devices The driver only offloads neighbors that are constructed on top of net devices registered by it or their uppers which are all Ethernet. The device supports GR...

CVE-2025-38020

In the Linux kernel issue CVE-2025-38020, MACsec offload is not supported in switchdev mode for uplink representors. The vulnerability stems from NETIF_F_HW_MACSEC remaining set when switching to the uplink representor profile, allowing a null pointer dereference when offloads are added. The fix ...

CVE-2025-38020 net/mlx5e: Disable MACsec offload for uplink representor profile

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Disable MACsec offload for uplink representor profile MACsec offload is not supported in switchdev mode for uplink representors. When switching to the uplink representor profile, the MACsec offload feature must be...

CVE-2025-38018 net/tls: fix kernel panic when alloc_page failed

In the Linux kernel, the following vulnerability has been resolved: net/tls: fix kernel panic when allocpage failed We cannot set fraglist to NULL pointer when allocpage failed. It will be used in tlsstrpcheckqueueok when the next time tlsstrpreadsock is called. This is because we don't reset...

CVE-2025-38016

The CVE-2025-38016 issue concerns the Linux kernel HID-BPF path. Root cause: HID-BPF dispatch may access a cleaned SRCU after hid_bpf_destroy_device() when a device with LEDs is active and hid_ll_driver->request() is unimplemented, causing a potential use-after-free-like access to not-present ...

CVE-2025-38014 dmaengine: idxd: Refactor remove call with idxd_cleanup() helper

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Refactor remove call with idxdcleanup helper The idxdcleanup helper cleans up perfmon, interrupts, internals and so on. Refactor remove call with the idxdcleanup helper to avoid code duplication. Note, this also...

CVE-2025-38013

CVE-2025-38013 (Linux kernel) : Affected component is the wifi/mac80211 path. The issue is a UBSAN/array-index-out-of-bounds condition reported when setting n_channels during scan request construction, caused by allocating the scan request before the int_scan_req structure is allocated. The fix r...

CVE-2025-38012

The CVE-2025-38012 issue affects Linux kernel sched_ext: bpf_iter_scx_dsq_new() may leave an uninitialized iterator after an error, causing bpf_iter_scx_dsq_next() to dereference garbage data. The documented fix is to always clear kit->dsq in bpf_iter_scx_dsq_new(), so that next() and destroy(...

CVE-2025-38013 wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Set nchannels after allocating struct cfg80211scanrequest Make sure that nchannels is set after allocating the struct cfg80211registereddevice::intscanreq member. Seen with syzkaller: UBSAN:...

CVE-2025-38010 phy: tegra: xusb: Use a bitmask for UTMI pad power state tracking

In the Linux kernel, the following vulnerability has been resolved: phy: tegra: xusb: Use a bitmask for UTMI pad power state tracking The current implementation uses biaspadenable as a reference count to manage the shared bias pad for all UTMI PHYs. However, during system suspension with connecte...

CVE-2025-38008 mm/page_alloc: fix race condition in unaccepted memory handling

In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: fix race condition in unaccepted memory handling The page allocator tracks the number of zones that have unaccepted memory using staticbranchenc/dec and uses that static branch in hot paths to determine if it needs ...

CVE-2025-38007 HID: uclogic: Add NULL check in uclogic_input_configured()

In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: Add NULL check in uclogicinputconfigured devmkasprintf returns NULL when memory allocation fails. Currently, uclogicinputconfigured does not check for this case, which results in a NULL pointer dereference. Add NULL...

CVE-2025-38006 net: mctp: Don't access ifa_index when missing

In the Linux kernel, the following vulnerability has been resolved: net: mctp: Don't access ifaindex when missing In mctpdumpaddrinfo, ifaindex can be used to filter interfaces, but only when the struct ifaddrmsg is provided. Otherwise it will be comparing to uninitialised memory - reproducible i...

PT-2025-26054 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns the Linux kernel, specifically the android binder component. It involves the unsafe practice of saving a pointer to a VMA outside of the mmap lock for later use. Thi...

PT-2025-25902

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically related to the handling of the Chuwi Hi8 touchscreen with Windows BIOS. The issue arises when the x86-android-tablets...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unreleased node reference that could lead to a memory leak...

PT-2025-25943 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A refcount leak bug has been identified in the Linux kernel, specifically in the mips: cavium-octeon module. The issue arises from a missing of node put call for the reference 'uctl...

PT-2025-26093

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential 32-bit overflow issue has been identified in the Linux kernel when accessing BPF array map elements. This occurs when the BPF array map exceeds 4GB, causing the element point...

PT-2025-25983 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.18.0-rc3-syzkaller-00016-gb253435746d9 Description: A NULL pointer dereference issue has been identified in the Linux kernel, specifically in the fs/ntfs3 component. This issue occurs when the ntfs fill super...