CVE-2025-38004

In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking for bcmop runtime updates The CAN broadcast manager CAN BCM can send a sequence of CAN frames via hrtimer. The content and also the length of the sequence can be changed resp reduced at runtime where the...

CVE-2025-38004 can: bcm: add locking for bcm_op runtime updates

In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking for bcmop runtime updates The CAN broadcast manager CAN BCM can send a sequence of CAN frames via hrtimer. The content and also the length of the sequence can be changed resp reduced at runtime where the...

CVE-2025-38004

The CVE-2025-38004 entry affects the Linux kernel CAN BCM subsystem. A race allowed by updates to the currframe/count in bcm_can_tx() could enable user-space-triggered modifications from hrtimer context, leading to a KASAN slab-out-of-bounds read. The patch fixes by moving the count variable into...

CVE-2025-38002

In the Linux kernel, the following vulnerability has been resolved: iouring/fdinfo: grab ctx-uringlock around iouringshowfdinfo Not everything requires locking in there, which is why the 'haslock' variable exists. But enough does that it's a bit unwieldy to manage. Wrap the whole thing in a...

UBUNTU-CVE-2025-38002

In the Linux kernel, the following vulnerability has been resolved: iouring/fdinfo: grab ctx-uringlock around iouringshowfdinfo Not everything requires locking in there, which is why the 'haslock' variable exists. But enough does that it's a bit unwieldy to manage. Wrap the whole thing in a...

CVE-2025-38002 io_uring/fdinfo: grab ctx->uring_lock around io_uring_show_fdinfo()

In the Linux kernel, the following vulnerability has been resolved: iouring/fdinfo: grab ctx-uringlock around iouringshowfdinfo Not everything requires locking in there, which is why the 'haslock' variable exists. But enough does that it's a bit unwieldy to manage. Wrap the whole thing in a...

CVE-2025-38002

CVE-2025-38002 concerns the Linux kernel io_uring/fdinfo path. The fix acquires the ctx->uring_lock around io_uring_show_fdinfo() and wraps the whole process in a ->uring_lock_trylock, returning no output if the lock can’t be grabbed. This addresses a race when the ring is actively resized,...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a lack of locking in iouringshowfdinfo, which could result in reading inconsistent SQE fields...

Linux kernel Locking DoS

The vulnerability in the fs/dlm/lock.c module of the Linux operating system’s locking manager, which involves pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

BTRFS File System Heap Buffer Overflow DoS

The vulnerability of the devreplacerwsem function in the BTRFS file system of Linux operating systems is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux Kernel DoS

The vulnerabilities of the functions checksessionid, smb2checkusersession, smb2sesssetup, smb2sessionlogoff, smb3decryptreq, ksmbdsessionlookup, ksmbdsessionlookupslowpath, and ksmbdgetencryptionkey in the Linux operating system are related to improper locking mechanisms. Exploiting these...

Linux file system F2FS DoS

The vulnerability in the fs/f2fs/extentcache.c file of the Linux file system’s f2fs kernel is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux enetc_tx_onstep_tstamp() DoS

The vulnerability of the enetctxonesteptstamp function in the Linux operating system is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Kernel DoS

The vulnerabilities of the l2tpxmitcore, l2tptunnelcreate, and l2tptunnelregister functions in the Linux kernel are related to improper resource locking. Exploiting these vulnerabilities can allow an attacker to cause service failures...

Linux kernel pt_core_execute_cmd pt_core_init DoS

The vulnerability of the ptcoreexecutecmd and ptcoreinit functions in the Linux operating system’s kernel is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to trigger a service failure...

Linux kernel mm/swapfile DoS

The vulnerability of the mm/swapfile component in the Linux operating system’s kernel is related to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel w1 DoS

The vulnerability of component w1 in the Linux operating system’s kernel is related to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20250602-01

A vulnerability in the Bluetooth component of the Linux kernel is related to a memory leak in the function hcigetrandomaddress in net/bluetooth/hcisync.c. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the traceeventshist component of the...

SUSE CVE-2025-37997

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix region locking in hash types Region locking introduced in v5.6-rc4 contained three macros to handle the region locks: ahashbucketstart, ahashbucketend which gave back the start and end hash bucket values...

SUSE CVE-2025-37999

In the Linux kernel, the following vulnerability has been resolved: fs/erofs/fileio: call erofsonlinefoliosplit after bioaddfolio If bioaddfolio fails because it is full, erofsfileioscanfolio needs to submit the I/O request via erofsfileiorqsubmit and allocate a new I/O request with an empty stru...