UBUNTU-CVE-2023-54013

In the Linux kernel, the following vulnerability has been resolved: interconnect: Fix locking for runpm vs reclaim For cases where iccbwset can be called in callbaths that could deadlock against shrinker/reclaim, such as runpm resume, we need to decouple the icc locking. Introduce a new iccbwlock...

UBUNTU-CVE-2023-54004

In the Linux kernel, the following vulnerability has been resolved: udplite: Fix NULL pointer dereference in skmemraiseallocated. syzbot reported 0 a null-ptr-deref in skgetrmem0 while using IPPROTOUDPLITE 0x88: 14:25:52 executing program 1: r0 = socket$inet60xa, 0x80002, 0x88 We had a similar...

CVE-2023-54004 udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().

In the Linux kernel, the following vulnerability has been resolved: udplite: Fix NULL pointer dereference in skmemraiseallocated. syzbot reported 0 a null-ptr-deref in skgetrmem0 while using IPPROTOUDPLITE 0x88: 14:25:52 executing program 1: r0 = socket$inet60xa, 0x80002, 0x88 We had a similar...

CVE-2022-50699 selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context()

In the Linux kernel, the following vulnerability has been resolved: selinux: enable use of both GFPKERNEL and GFPATOMIC in convertcontext The following warning was triggered on a hardware environment: SELinux: Converting 162 SID table entries... BUG: sleeping function called from invalid context ...

CVE-2025-68365 fs/ntfs3: Initialize allocated memory before use

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Initialize allocated memory before use KMSAN reports: Multiple uninitialized values detected: - KMSAN: uninit-value in ntfsreadhdr 3 - KMSAN: uninit-value in bcmp 3 Memory is allocated by getname, which is a wrapper for...

CVE-2025-68365 fs/ntfs3: Initialize allocated memory before use

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Initialize allocated memory before use KMSAN reports: Multiple uninitialized values detected: - KMSAN: uninit-value in ntfsreadhdr 3 - KMSAN: uninit-value in bcmp 3 Memory is allocated by getname, which is a wrapper for...

CVE-2025-68365

CVE-2025-68365 : Linux kernel (fs/ntfs3) fixed by zero-initializing allocated memory. Memory allocated via __getname() (kmem_cache_alloc()) was used before being cleared, triggering KMSAN reports (ntfs_read_hdr, bcmp). The patch replaces kmem_cache_alloc() with kmem_cache_zalloc() to allocate and...

CVE-2025-68356 gfs2: Prevent recursive memory reclaim

In the Linux kernel, the following vulnerability has been resolved: gfs2: Prevent recursive memory reclaim Function newinode returns a new inode with inode-imapping-gfpmask set to GFPHIGHUSERMOVABLE. This value includes the GFPFS flag, so allocations in that address space can recurse into...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unlocked PCM memory allocation check, which could result in allocating more memory than the maximum limit...

PT-2025-52970

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.0-rc8 Description The Linux kernel contained a locking issue within the interconnect component, specifically related to runpm runtime power management versus reclaim. The issue arose when icc bw set could be...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unchecked memory allocation return value that could result in a null pointer dereference...

PT-2025-52901

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description The Linux kernel’s NTFS3 filesystem component contains a flaw where allocated memory is not initialized before use. This issue is identified through Kernel Memory Sanitizer KMSAN reports...

PT-2025-53220

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak exists in the vdec msg queue init function within the MediaTek VCodec component of the Linux kernel. Specifically, if allocation of msg queue-wdma addr fails, the functio...

PT-2025-52961

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained a null pointer dereference issue within the UDPLITE protocol handling, specifically in the sk mem raise allocated function. This issue was identified through...

PT-2025-53070

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's ALSA PCM memory allocation helpers. A missing lock during a sanity check allows a user to potentially allocate more memory than the predefined maximum...

PT-2025-53047

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s rpmsg component related to glink handling. Specifically, a missing check for the return value of the kstrdup function could lead to a NULL pointer...

PT-2025-53135

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The mmc add host function may return an error. Ignoring this return value can lead to a memory leak because memory allocated in mmc alloc host is not freed. This can cause a kernel crash...

PT-2025-53145

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was identified within the orangefs module in the Linux kernel, specifically in the orangefs prepare debugfs help string function. This leak occurs during the insertion and...

PT-2025-52929

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10.0 1 Description The Linux kernel contained an issue where the convert context function, called within a critical section, could potentially cause a process to sleep while allocating memory using GFP KERNEL...

PT-2025-53017

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the visconti register pll function within the clock clk subsystem of the Linux kernel. Specifically, memory allocated for pll-rate table using kmemdup is not free...