Moderate: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: information leak in scsiioctl CVE-2022-0494 use-after-free in tcnewtfilter in net/sched/clsapi.c CVE-2022-1055 For more details about the security issues, including the impact, a CVSS score,...

PT-2025-25950

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue occurred during debugging when the axi chan dump lli function was passed a NULL LLI pointer, causing an OOPS due to...

PT-2025-54120

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the DRM subsystem where the drm copy field function may attempt to copy a NULL pointer. This occurs when a driver has a bug and fails to set...

PT-2025-26132

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A pointer dereference issue exists in the emulation proc handler function within the ARM64 architecture support of the Linux kernel. When emulation proc handler is called concurrently wi...

GSD-2022-1002801 media: i2c: max9286: fix kernel oops when removing module

media: i2c: max9286: fix kernel oops when removing module This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

PT-2022-31064

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description A potential issue exists in the Linux Kernel, specifically in the max9286 module, which could lead to a kernel oops when the module is removed. The actual impact and attack plausibility have n...

PT-2022-31401

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description A potential issue exists in the Linux Kernel, specifically in the max9286 module, which could lead to a kernel oops when the module is removed. The actual impact and attack plausibility have...

PT-2022-31687

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description A potential issue exists in the Linux Kernel, specifically in the max9286 module, which could lead to a kernel oops when the module is removed. The actual impact and attack plausibility have...

NewStart CGSL MAIN 4.06 : kernel Multiple Vulnerabilities (NS-SA-2022-0075)

The remote NewStart CGSL host, running version MAIN 4.06, has kernel packages installed that are affected by multiple vulnerabilities: - The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMITSTACK is set to RLIMINFINITY and 1 Gigabyte of memory is allocated the maxim...

GSD-2022-1002237 Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt

Bluetooth: btmtksdio: Fix kernel oops in btmtksdiointerrupt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.189 by commit...

GSD-2022-1001198 Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt

Bluetooth: btmtksdio: Fix kernel oops in btmtksdiointerrupt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

UBUNTU-CVE-2022-1263

A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service...

GSD-2022-1000846 riscv: fix oops caused by irqsoff latency tracer

riscv: fix oops caused by irqsoff latency tracer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

A NULL pointer dereference was found in the Linux kernel's KVM when dirty ring logging is enabled without an active vCPU context. An unprivileged local attacker on the host may use this flaw to cause a kernel oops condition and thus a denial of service by issuing a KVM_XEN_HVM_SET_ATTR ioctl. This flaw affects Linux kernel versions prior to 5.17-rc1.

...

UBUNTU-CVE-2021-4095

A NULL pointer dereference was found in the Linux kernel's KVM when dirty ring logging is enabled without an active vCPU context. An unprivileged local attacker on the host may use this flaw to cause a kernel oops condition and thus a denial of service by issuing a KVMXENHVMSETATTR ioctl. This fl...

PT-2025-7958

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.10 Description A vulnerability in the Linux kernel has been resolved, which was caused by a missing clock parent. The issue occurred when the pcie0 rchng clk src had num parents set to 2 but only one parent...

PT-2025-37622

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc3+ 490 Description The Linux kernel contained a flaw in the ACPI subsystem where calling acpi os map memory on an invalid physical address could lead to a warning and potentially an oops/stacktrace. This...

PT-2021-8162 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a null pointer dereference in the i40e component of the Linux kernel. This occurs when synchronizing VSI filters, potentially allowing an attacker to cause a...

CVE-2021-38200

arch/powerpc/perf/core-book3s.c in the Linux kernel before 5.12.13, on systems with perfeventparanoid=-1 and no specific PMU driver support registered, allows local users to cause a denial of service perfinstructionpointer NULL pointer dereference and OOPS via a "perf record" command...

Null pointer dereference

arch/powerpc/perf/core-book3s.c in the Linux kernel before 5.12.13, on systems with perfeventparanoid=-1 and no specific PMU driver support registered, allows local users to cause a denial of service perfinstructionpointer NULL pointer dereference and OOPS via a "perf record" command...