Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a DMA debugging module that may cause a deadlock when holding radixlock...

CLSA-2025-1736503760 unbound: Fix of CVE-2024-8508

CVE-2024-8508: Limit number of name compression calculations per packet to prevent CPU lock and potential denial of service...

SUSE CVE-2024-56635

In the Linux kernel, the following vulnerability has been resolved: net: avoid potential UAF in defaultoperstate syzbot reported an UAF in defaultoperstate 1 Issue is a race between device and netns dismantles. After calling rtnlunlock from netdevruntodo, we can not assume the netns of each devic...

SUSE CVE-2024-56640

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix LGR and link use-after-free issue We encountered a LGR/link use-after-free issue, which manifested as the LGR/link refcnt reaching 0 early and entering the clear process, making resource access unsafe. refcountt:...

CVE-2024-56758

CVE-2024-56758 affects the Linux kernel (btrfs) and describes a race where, after folio unlock during relocation, another thread can modify the folio mapping before folio_lock() and lead to an invalid page, potentially causing a NULL pointer dereference during concurrent transaction aborts. The i...

CVE-2024-43764

In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-43764

In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

The vulnerability of the rcu_nocb_bypass_lock function in the Linux operating system’s Read-Copy-Update (RCU) synchronization mechanism allows a attacker to trigger a service failure.

The vulnerability of the rcunocbbypasslock function in the Linux operating system’s Read-Copy-Update RCU synchronization mechanism is related to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-43764

In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-43764

CVE-2024-43764 affects Google Android where the onPrimaryClipChanged path in ClipboardListener.java could partially bypass the lock screen, enabling local elevation of privilege with no user interaction. Exploitation is described as requiring LOCAL access and LOW privileges with UI:N, and impact ...

CVE-2024-43764

In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2025-34363

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A race condition exists in the packet set ring and packet notifier functions within the net/packet module. This occurs when packet set ring releases po-bind lock, allowing another thre...

PT-2026-8178

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the mmp pdma residue function within the dmaengine subsystem of the Linux kernel. This condition can lead to a use-after-free issue when accessing the descript...

PT-2025-37189

🚨 CVE-2025-58144 This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. There are two issues related to the mapping of pages belonging to other domains: For one, an assertion is wrong there, where the case actually needs...

PT-2026-7455

Improper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to downgrade firmware potentially resulting in a loss of integrity...

PT-2025-49784

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a time-of-check to time-of-use TOCTOU issue that can lead to an out-of-bounds write. This occurs in the sctp diag dump function, which calls sctp for each...

PT-2025-49785

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s drm/amdkfd subsystem where a write lock acquired during retry fault draining is not released. This occurs because svm range restore pages calls mmap...

PT-2025-30862

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists when gs start io calls either gs start rx or gs start tx, as these functions briefly release the port lock for usb ep queue. This allows gs close and gserial...

PT-2025-49794

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to the handling of robust list pointers during an exec operation. Specifically, the sys get robust list and compat get robust list functions may...

PT-2026-2893

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18.0 Description The Linux kernel contains an issue within the smc91x driver when built with PREEMPT RT. A broken interrupt request IRQ context occurs due to improper handling of IRQ disabling and restoration...