CVE-2025-21859 USB: gadget: f_midi: f_midi_complete to call queue_work

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: fmidi: fmidicomplete to call queuework When using USB MIDI, a lock is attempted to be acquired twice through a re-entrant call to fmiditransmit, causing a deadlock. Fix it by using queuework to schedule the inner...

CVE-2025-21858 geneve: Fix use-after-free in geneve_find_dev().

In the Linux kernel, the following vulnerability has been resolved: geneve: Fix use-after-free in genevefinddev. syzkaller reported a use-after-free in genevefinddev 0 without repro. geneveconfigure links struct genevedev.next to netgenericnet, genevenetid-genevelist. The net here could differ fr...

CVE-2025-21858 geneve: Fix use-after-free in geneve_find_dev().

In the Linux kernel, the following vulnerability has been resolved: geneve: Fix use-after-free in genevefinddev. syzkaller reported a use-after-free in genevefinddev 0 without repro. geneveconfigure links struct genevedev.next to netgenericnet, genevenetid-genevelist. The net here could differ fr...

CVE-2025-21857 net/sched: cls_api: fix error handling causing NULL dereference

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: fix error handling causing NULL dereference tcfextsmisscookiebasealloc calls xaalloccyclic which can return 1 if the allocation succeeded after wrapping. This was treated as an error, with value 1 returned to...

CVE-2025-21857

CVE-2025-21857 affects the Linux kernel net/sched code (cls_api). The root cause is error handling in tcf_exts_miss_cookie_base_alloc() calling xa_alloc_cyclic() that can return 1 (wraps successfully), which is treated as an error by tcf_exts_init_ex() and causes ext­s to be NULL. fl_change() the...

CVE-2025-21857 net/sched: cls_api: fix error handling causing NULL dereference

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: fix error handling causing NULL dereference tcfextsmisscookiebasealloc calls xaalloccyclic which can return 1 if the allocation succeeded after wrapping. This was treated as an error, with value 1 returned to...

CVE-2025-21856 s390/ism: add release function for struct device

In the Linux kernel, the following vulnerability has been resolved: s390/ism: add release function for struct device According to devicerelease in /drivers/base/core.c, a device without a release function is a broken device and must be fixed. The current code directly frees the device after calli...

CVE-2025-21852 net: Add rx_skb of kfree_skb to raw_tp_null_args[].

In the Linux kernel, the following vulnerability has been resolved: net: Add rxskb of kfreeskb to rawtpnullargs. Yan Zhai reported a BPF prog could trigger a null-ptr-deref 0 in tracekfreeskb if the prog does not check if rxsk is NULL. Commit c53795d48ee8 "net: add rxsk to tracekfreeskb" added rx...

CVE-2025-21851

CVE-2025-21851 is fixed in the Linux kernel for aarch64 systems using 64 KB page size. The issue originated in arena_map_free() calling apply_to_pte_range() with a non-page-aligned address returned by bpf_arena_get_kern_vm_start(), which could cause a segmentation fault and soft lockup during are...

CVE-2025-21849 drm/i915/gt: Use spin_lock_irqsave() in interruptible context

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Use spinlockirqsave in interruptible context spinlock/unlock functions used in interrupt contexts could result in a deadlock, as seen in GitLab issue 13399, which occurs when interrupt comes in while holding a lock...

CVE-2025-21848 nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()

In the Linux kernel, the following vulnerability has been resolved: nfp: bpf: Add check for nfpappctrlmsgalloc Add check for the return value of nfpappctrlmsgalloc in nfpbpfcmsgalloc to prevent null pointer dereference...

CVE-2025-21849

CVE-2025-21849: Linux kernel drm/i915/gt had potential deadlocks due to spin_lock/unlock() used in interrupt contexts. The fix saves irq state before acquiring locks. Version history shows v2 adds irq state save/restore around signal_irq_work locks; v3 uses spin_lock_irqsave() in guc_lrc_desc_unp...

CVE-2024-58087 ksmbd: fix racy issue from session lookup and expire

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix racy issue from session lookup and expire Increment the session reference count within the lock for lookup to avoid racy issue with session expire...

PT-2025-11011 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns the use of spin lock/unlock functions in interrupt contexts, which could result in a deadlock when an interrupt occurs while holding a lock, as seen in GitLab issue...

PT-2025-14348

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a use-after-free vulnerability in the ksmbd component of the Linux kernel. Specifically, the interim entry of ksmbd work could be deleted after an oplock is freed...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56572)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56572 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: platform: allegro-dvt: Fix possib...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56720)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56720 advisory. - In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Several fixes to...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-56587)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56587 advisory. - In the Linux kernel, the following vulnerability has been resolved: leds: class: Protect brightnessshow with...

Azure Linux 3.0 Security Update: kernel (CVE-2024-53157)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53157 advisory. - In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Check the DVFS OPP...

PT-2025-14336

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the ksmbd component. The issue involved the potential freeing of ksmbd work after connection release during oplock...