CVE-2025-38353

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix taking invalid lock on wedge If device wedges on e.g. GuC upload, the submission is not yet enabled and the state is not even initialized. Protect the wedge call so it does nothing in this case. It fixes the following...

CVE-2025-38353 drm/xe: Fix taking invalid lock on wedge

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix taking invalid lock on wedge If device wedges on e.g. GuC upload, the submission is not yet enabled and the state is not even initialized. Protect the wedge call so it does nothing in this case. It fixes the following...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an invalid lock operation in the xegucsubmitwedge function...

PT-2025-33582

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel related to trace event handling. Concurrent loading of modules can lead to corruption of the trace event list during modification of printk format...

CVE-2025-38349 eventpoll: don't decrement ep refcount while still holding the ep mutex

In the Linux kernel, the following vulnerability has been resolved: eventpoll: don't decrement ep refcount while still holding the ep mutex Jann Horn points out that epoll is decrementing the ep refcount and then doing a mutexunlock&ep-mtx; afterwards. That's very wrong, because it can lead to a...

CVE-2025-0886

An incorrect permissions vulnerability was reported in Elliptic Labs Virtual Lock Sensor that could allow a local, authenticated user to escalate privileges...

CVE-2025-0886

CVE-2025-0886 concerns an incorrect permissions vulnerability in Lenovo/ Elliptic Labs Virtual Lock Sensor that could allow a local, authenticated user to escalate privileges. The available documents identify the affected component as the Elliptic Labs Virtual Lock Sensor and describe the root ca...

CVE-2025-0886

An incorrect permissions vulnerability was reported in Elliptic Labs Virtual Lock Sensor that could allow a local, authenticated user to escalate privileges...

ALPINE-CVE-2025-1713

When setting up interrupt remapping for legacy PCI-X devices, including PCI-X bridges, a lookup of the upstream bridge is required. This lookup, itself involving acquiring of a lock, is done in a context where acquiring that lock is unsafe. This can lead to a deadlock...

DEBIAN-CVE-2025-1713

When setting up interrupt remapping for legacy PCI-X devices, including PCI-X bridges, a lookup of the upstream bridge is required. This lookup, itself involving acquiring of a lock, is done in a context where acquiring that lock is unsafe. This can lead to a deadlock...

CVE-2025-1713 deadlock potential with VT-d and legacy PCI device pass-through

When setting up interrupt remapping for legacy PCI-X devices, including PCI-X bridges, a lookup of the upstream bridge is required. This lookup, itself involving acquiring of a lock, is done in a context where acquiring that lock is unsafe. This can lead to a deadlock...

PT-2025-29955 · Elliptic · Elliptic Labs Virtual Lock Sensor

Name of the Vulnerable Software and Affected Versions: Elliptic Labs Virtual Lock Sensor affected versions not specified Description: An incorrect permissions vulnerability exists that could allow a local, authenticated user to escalate privileges. Recommendations: At the moment, there is no...

Lenovo Elliptic Labs Virtual Lock Sensor 安全漏洞

Lenovo Elliptic Labs Virtual Lock Sensor is a virtual lock sensor from the Chinese company Lenovo Lenovo. It can detect when a user is in front of a PC/laptop system. A security vulnerability exists in the Lenovo Elliptic Labs Virtual Lock Sensor, which stems from improper privilege assignment an...

Xen 安全漏洞

Xen is an open source virtual machine monitor product from Xen Open Source. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in Xen that stems from an...

SUSE CVE-2025-38311

In the Linux kernel, the following vulnerability has been resolved: iavf: get rid of the crit lock Get rid of the crit lock. That frees us from the error prone logic of trylocks. Thanks to netdevlock by Jakub it is now easy, and in most cases we were protected by it already - replace crit lock by...

hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio

...

PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type

...

crypto: null - Use spin lock instead of mutex

...

backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()

...

SUSE CVE-2025-38271

In the Linux kernel, the following vulnerability has been resolved: net: prevent a NULL deref in rtnlcreatelink At the time rtnlcreatelink is running, dev-netdevops is NULL, we must not use netdevlockops or risk a NULL deref if CONFIGNETSHAPER is defined. Use netifsetgroup instead of devsetgroup...