CVE-2026-23159 perf: sched: Fix perf crash with new is_user_task() helper

In the Linux kernel, the following vulnerability has been resolved: perf: sched: Fix perf crash with new isusertask helper In order to do a user space stacktrace the current task needs to be a user task that has executed in user space. It use to be possible to test if a task is a user task or not...

CVE-2022-50375

CVE-2022-50375 affects the Linux kernel: the fix ensures that in lpuart_dma_shutdown the flags for lpuart_dma_tx_use and lpuart_dma_rx_use are set to false. Without this, lpuart_flush_buffer could access DMA APIs after DMA teardown, causing aborts. The patch prevents DMA access after relinquishme...

CVE-2025-37938

In the Linux kernel, the following vulnerability has been resolved: tracing: Verify event formats that have "%p.." The trace event verifier checks the formats of trace events to make sure that they do not point at memory that is not in the trace event itself or in data that will never be freed. I...

CVE-2025-37782

In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: fix slab-out-of-bounds in hfsbnodereadkey Syzbot reported an issue in hfs subsystem: BUG: KASAN: slab-out-of-bounds in memcpyfrompage include/linux/highmem.h:423 inline BUG: KASAN: slab-out-of-bounds in hfsbnoderead...

CVE-2025-21823

CVE-2025-21823 relates to the Batman-adv (batman-adv) Linux kernel module. The root cause was the ELP metric worker per interface, which could sleep while iterating over neighbors under an RCU list, creating a race that could lead to invalid memory access if the worker was canceled or if interfac...