PT-2025-51615

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the scx dump state function related to unsafe locking when built with CONFIG PREEMPT RT=y. Specifically, the dump lock can become a sleepable spinlock...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991145)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991145 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Fix sleeping function called from invalid context on RT kernel When setting...

SUSE CVE-2025-40142

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Disable bottom softirqs as part of spinlockirq on PREEMPTRT sndpcmgrouplockirq acquires a spinlockt and disables interrupts via spinlockirq. This also implicitly disables the handling of softirqs such as TIMERSOFTIRQ. ...

Siemens SIMATIC S7-1500 Improper Input Validation (CVE-2025-21767)

In the Linux kernel, the following vulnerability has been resolved: clocksource: Use migratedisable to avoid calling getrandomu32 in atomic context The following bug report happened with a PREEMPTRT kernel: BUG: sleeping function called from invalid context at kernel/locking/spinlockrt.c:48...

EUVD-2025-124941

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Disable bottom softirqs as part of spinlockirq on PREEMPTRT sndpcmgrouplockirq acquires a spinlockt and disables interrupts via spinlockirq. This also implicitly disables the handling of softirqs such as TIMERSOFTIRQ. ...

CVE-2025-40142

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Disable bottom softirqs as part of spinlockirq on PREEMPTRT sndpcmgrouplockirq acquires a spinlockt and disables interrupts via spinlockirq. This also implicitly disables the handling of softirqs such as TIMERSOFTIRQ. ...

CVE-2025-40142

CVE-2025-40142 affects the Linux kernel’s ALSA PCM path. The function snd_pcm_group_lock_irq() acquires a spinlock_t using spin_lock_irq(), which disables interrupts and implicitly affects softirq handling. On PREEMPT_RT, softirqs are preemptible and spin_lock_irq() does not disable them, allowin...

CVE-2025-40142 ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on PREEMPT_RT

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Disable bottom softirqs as part of spinlockirq on PREEMPTRT sndpcmgrouplockirq acquires a spinlockt and disables interrupts via spinlockirq. This also implicitly disables the handling of softirqs such as TIMERSOFTIRQ. ...

CVE-2025-40142 ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on PREEMPT_RT

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Disable bottom softirqs as part of spinlockirq on PREEMPTRT sndpcmgrouplockirq acquires a spinlockt and disables interrupts via spinlockirq. This also implicitly disables the handling of softirqs such as TIMERSOFTIRQ. ...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an undisabled bottom soft interrupt on PREEMPTRT, which could lead to a deadlock...

Linux Distros Unpatched Vulnerability : CVE-2025-40142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: pcm: Disable bottom softirqs as part of spinlockirq on PREEMPTRT sndpcmgrouplockirq acquires a spinlockt and disables interrupts via spinlockirq. This als...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990445)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990445 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Fix sleeping function called from invalid context on RT kernel When setting...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989934)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989934 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Fix sleeping function called from invalid context on RT kernel When setting...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989491)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989491 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/smp: do not decrement idle task preempt count in CPU offline With PREEMPTCOUNT=y, when a...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: netsched: genestimator: fix esttimer vs CONFIGPREEMPTRT=y The syzbot reported a warning in esttimer 1. The problem arises from the fact that when CONFIGPREEMPTRT=y is enabled, timer callbacks can be preempted...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987614)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987614 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Fix sleeping function called from invalid context on RT kernel When setting...

EUVD-2025-31851

A flaw has been found in JhumanJ OpnForm up to 1.9.3. This affects an unknown part of the file /api/open/forms/ of the component Form Editor. This manipulation causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may be used. This issue is currentl...

CVE-2023-53586

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix multiple LUNRESET handling This fixes a bug where an initiator thinks a LUNRESET has cleaned up running commands when it hasn't. The bug was added in commit 51ec502a3266 "target: Delete tmr from list before...

CVE-2023-53586

Technical details for CVE-2023-53586 are not present in the provided documents. The included advisories list the CVE but do not expose products, versions, impacts, or fixes here. Monitor vendor advisories for updates.

EUVD-2025-28967

Malicious code in bioql PyPI...