Linux Distros Unpatched Vulnerability : CVE-2025-38694

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090prwonapb In dib7090prwonapb, msg is controlled by user. When msg0.buf is null and msg0.len is zero,...

Linux Distros Unpatched Vulnerability : CVE-2025-38678

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: reject duplicate device on updates A chain/flowtable update with...

Linux Distros Unpatched Vulnerability : CVE-2025-38712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hfsplus: don't use BUGON in hfspluscreateattributesfile When the volume header contains erroneous values that do not reflect the actual state of the filesystem,...

Linux Distros Unpatched Vulnerability : CVE-2025-38698

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jfs: Regular file corruption check The reproducer builds a corrupted file on disk with a negative isize value. Add a check when opening this file to avoid...

Linux Distros Unpatched Vulnerability : CVE-2025-39711

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function...

Linux Distros Unpatched Vulnerability : CVE-2025-38726

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ftgmac100: fix potential NULL pointer access in ftgmac100phydisconnect After the call to phydisconnect netdev-phydev is reset to NULL. So fixedphyunregiste...

Linux Distros Unpatched Vulnerability : CVE-2025-58057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In...

Linux Distros Unpatched Vulnerability : CVE-2025-39680

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: rtl9300: Fix out-of-bounds bug in rtl9300i2csmbusxfer The data-block0 variable comes from user. Without proper check, the variable may be very large to cau...

Linux Distros Unpatched Vulnerability : CVE-2025-39681

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/cpu/hygon: Add missing resctrlcpudetect in bspinit helper Since 923f3a2b48bd x86/resctrl: Query LLC monitoring properties once during boot resctrlcpudetect...

Linux Distros Unpatched Vulnerability : CVE-2025-38711

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb/server: avoid deadlock when linking with ReplaceIfExists If smb2createlink is called with ReplaceIfExists set and the name does exist then a deadlock will...

Linux Distros Unpatched Vulnerability : CVE-2025-38699

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: bfa: Double-free fix When the bfadimprobe function fails during initialization, the memory pointed to by bfad-im is freed without setting bfad-im to NULL...

Linux Distros Unpatched Vulnerability : CVE-2025-39712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: mt9m114: Fix deadlock in getframeinterval/setframeinterval Getting / Setting the frame interval using the V4L2 subdev pad ops...

Linux Distros Unpatched Vulnerability : CVE-2025-38734

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/smc: fix UAF on smcsk after smclistenout BPF CI testing report a UAF issue: 16.446633 BUG: kernel NULL pointer dereference, address: 000000000000003 0...

Linux Distros Unpatched Vulnerability : CVE-2025-39718

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vsock/virtio: Validate length in packet header before skbput When receiving a vsock packet in the guest, only the virtqueue buffer size is validated prior to...

Linux Distros Unpatched Vulnerability : CVE-2025-38696

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MIPS: Don't crash in stacktop for tasks without ABI or vDSO Not all tasks have an ABI associated or vDSO mapped, for example kthreads never do. If such a task...

Linux Distros Unpatched Vulnerability : CVE-2025-38680

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: uvcvideo: Fix 1-byte out-of-bounds read in uvcparseformat The buffer length check before calling uvcparseformat only ensured that the buffer has at least...

Linux Distros Unpatched Vulnerability : CVE-2025-38707

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: Add sanity check for file name The length of the file name should be smaller than the directory entry size. CVE-2025-38707 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2025-39702

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for...

Linux Distros Unpatched Vulnerability : CVE-2025-39703

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net, hsr: reject HSR frame if skb can't hold tag Receiving HSR frame with insufficient space to hold HSR tag in the skb can result in a crash kernel BUG:...

Linux Distros Unpatched Vulnerability : CVE-2025-39692

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: server: split ksmbdrdmastoplistening out of ksmbdrdmadestroy We can't call destroyworkqueuesmbdirectwq %NASLMINLEVEL 80900 C Tenable, Inc...