Linux Distros Unpatched Vulnerability : CVE-2025-68192

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: usb: qmiwwan: initialize MAC header offset in qmimuxrxfixup Raw IP packets have no MAC header, leaving skb-macheader uninitialized. This can trigger kernel...

Linux Distros Unpatched Vulnerability : CVE-2025-68258

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - comedi: multiq3: sanitize config options in multiq3attach Syzbot identified an issue 1 in multiq3attach that induces a task timeout due to open or COMEDIDEVCONF...

Linux Distros Unpatched Vulnerability : CVE-2025-68290

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - most: usb: fix double free on late probe failure The MOST subsystem has a non-standard registration function which frees the interface on registration failures...

Linux Distros Unpatched Vulnerability : CVE-2025-40360

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/sysfb: Do not dereference NULL pointer in plane reset The plane state in drmgemresetshadowplane can be NULL. Do not deref that pointer, but forward NULL to...

Linux Distros Unpatched Vulnerability : CVE-2025-68201

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: remove two invalid BUGONs Those can be triggered trivially by userspace. CVE-2025-68201 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2025-40353

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arm64: mte: Do not warn if the page is already tagged in copyhighpage The arm64 copyhighpage assumes that the destination page is newly allocated and not...

Linux Distros Unpatched Vulnerability : CVE-2025-68194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: imon: make sendpacket more robust syzbot is reporting that imon has three problems which result in hung tasks due to forever holding device lock 1. First...

Linux Distros Unpatched Vulnerability : CVE-2025-68222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pinctrl: s32cc: fix uninitialized memory in s32pinctrldesc s32pinctrldesc is allocated with devmkmalloc, but not all of its fields are initialized. Notably,...

Linux fs/ceph/crypto.c DoS

The vulnerability of the fs/ceph/crypto.c component in the Linux operating system is related to incorrect null termination. Exploiting this vulnerability allows an attacker to cause a service failure...

Linux IPv6 seg6_hmac Buffer Overflow DoS

The vulnerability in the net/ipv6/seg6hmac.c component of the Linux operating system is related to a information leakage due to temporal discrepancies. Exploiting this vulnerability allows an attacker to cause service failures...

Linux Component DoS

The vulnerability of the comedi/drivers/pcl726.c component in the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability allows an attacker to cause service failures...

Linux scsi/bfa/bfad_im.c Buffer Overflow DoS

The vulnerability of the scsi/bfa/bfadim.c component of the Linux operating system is related to the repeated release of memory. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...

Venus kernel DoS

The vulnerability of the Venus kernel component in the Linux operating system is related to reading data from beyond the allowed buffer limits. Exploiting this vulnerability allows an attacker to cause a service failure...

Linux Powerpc Eeh DoS

The vulnerability of the powerpc/eeh module in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to cause service failures...

am65-cpsw-nuss Component Confidential Data DoS

The vulnerability of the am65-cpsw-nuss component in the Linux operating system is related to the lack of initialization for resources. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause service failures...

pinctrl-msm Linux DoS

The vulnerability of the pinctrl-msm component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability allows an attacker to cause service failures...

Linux ufs-exynos.c Component Confidential Data Access Data Compromise

The vulnerability of the ufs-exynos.c component in the Linux operating system is related to reading data from within acceptable limits. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

Linux drivers/net/wireless/ath/ath12k Info Disclosure

The vulnerability of the drivers/net/wireless/ath/ath12k component of the Linux operating system is related to reading data from buffer files beyond the allowed limits. Exploiting this vulnerability allows an attacker to gain access to protected information...

Linux qcom/venus/hfi_venus.c DoS

The vulnerability of the qcom/venus/hfivenus.c component in the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability allows an attacker to cause a service failure...

Linux mm/damon/ops-common.c DoS

The vulnerability in the mm/damon/ops-common.c component of the Linux operating system is related to incorrect checking of the amount of data at input. Exploiting this vulnerability allows an attacker to cause a service failure...