Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unchecked mmcaddhost return value, which could lead to a memory leak and null pointer dereference...

CVE-2022-50877: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: broadcom: bcm4908enet: update TX stats after actual transmission Queueing packets doesn't guarantee their transmission. Update TX stats after hardware confirms consuming submitted data. This also fixes a possible race and NU...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992445)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992445 advisory. In the Linux kernel, the following vulnerability has been resolved: pm: cpupower: bench: Prevent NULL dereference on malloc failure If malloc returns NULL due to low...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992167)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992167 advisory. In the Linux kernel, the following vulnerability has been resolved: pnode: terminate at peers of source The propagatemnt function handles mount propagation when...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992695)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992695 advisory. In the Linux kernel, the following vulnerability has been resolved: cpufreq: scpi: Fix null-ptr-deref in scpicpufreqgetrate cpufreqcpugetraw can return NULL when the...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992216)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992216 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: Add missing check for allocorderedworkqueue Add check for the return value of...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992254)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992254 advisory. In the Linux kernel, the following vulnerability has been resolved: qed/qedsriov: guard against NULL derefs from qediovgetvfinfo We have to make sure that the info...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the existence of a warning in the dqgrab function that could lead to a null pointer dereference...

CVE-2023-54233: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: avoid a NULL dereference with unsupported widgets If an IPC4 topology contains an unsupported widget, its .moduleinfo field won't be set, then sofipc4routesetup will cause a kernel Oops trying to dereference it. Add a...

PT-2025-54113

In the Linux kernel, the following vulnerability has been resolved: net: broadcom: bcm4908 enet: update TX stats after actual transmission Queueing packets doesn't guarantee their transmission. Update TX stats after hardware confirms consuming submitted data. This also fixes a possible race and...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the use of null cpumask when setting virtual queue affinities, which could lead to null pointer dereferences...

CVE-2023-54261: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add missing gfx11 MQD manager callbacks mqdstride function was introduced in commit 2f77b9a242a2 "drm/amdkfd: Update MQD management on multi XCC setup" but not assigned for gfx11. Fixes a NULL dereference in debugfs...

Linux Distros Unpatched Vulnerability : CVE-2023-54261

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: Add missing gfx11 MQD manager callbacks mqdstride function was introduced in commit 2f77b9a242a2 drm/amdkfd: Update MQD management on multi XCC setu...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992628)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992628 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: single: fix potential NULL dereference in pcsgetfunction pinmuxgenericgetfunction can...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992697)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992697 advisory. In the Linux kernel, the following vulnerability has been resolved: qed/qedsriov: guard against NULL derefs from qediovgetvfinfo We have to make sure that the info...

UBUNTU-CVE-2025-14180

In PHP versions 8.1. before 8.1.34, 8.2. before 8.2.30, 8.3. before 8.3.29, 8.4. before 8.4.16, 8.5. before 8.5.1 when using the PDO PostgreSQL driver with PDO::ATTREMULATEPREPARES enabled, an invalid character sequence such as \x99 in a prepared statement parameter may cause the quoting function...

Linux Distros Unpatched Vulnerability : CVE-2023-54138

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/msm: fix NULL-deref on irq uninstall In case of early initialisation errors and on platforms that do not use the DPU controller, the deinitilisation code ca...

CVE-2023-53987

A flaw was found in the Linux kernel. A local attacker could exploit a potential NULL dereference vulnerability in the ping socket handling when accessing /proc/net/icmp. This issue arises from an incorrect use of Read-Copy Update RCU instead of a spinlock. Successful exploitation of this flaw...

RDMA/rxe: Fix null deref on srq->rq.queue after resize failure

...

SUSE CVE-2023-53987

In the Linux kernel, the following vulnerability has been resolved: ping: Fix potentail NULL deref for /proc/net/icmp. After commit dbca1596bbb0 "ping: convert to RCU lookups, get rid of rwlock", we use RCU for ping sockets, but we should use spinlock for /proc/net/icmp to avoid a potential NULL...