UBUNTU-CVE-2025-37860

In the Linux kernel, the following vulnerability has been resolved: sfc: fix NULL dereferences in ef100processdesignparam Since cited commit, ef100probemain and hence also ef100checkdesignparams run before efx-netdev is created; consequently, we cannot netifsettsomaxsize or segs at this point. Mo...

CVE-2025-37860 sfc: fix NULL dereferences in ef100_process_design_param()

In the Linux kernel, the following vulnerability has been resolved: sfc: fix NULL dereferences in ef100processdesignparam Since cited commit, ef100probemain and hence also ef100checkdesignparams run before efx-netdev is created; consequently, we cannot netifsettsomaxsize or segs at this point. Mo...

SUSE CVE-2025-22084

In the Linux kernel, the following vulnerability has been resolved: w1: fix NULL pointer dereference in probe The w1uartprobe function calls w1uartserdevopen which includes devmserdevdeviceopen before setting the client ops via serdevdevicesetclientops. This ordering can trigger a NULL pointer...

DEBIAN-CVE-2025-23136

In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: Add NULL check for adev Not all devices have an ACPI companion fwnode, so adev might be NULL. This is similar to the commit cd2fd6eab480 "platform/x86: int3472: Check for adev == NULL". Add a check for adev not...

UBUNTU-CVE-2025-22066

In the Linux kernel, the following vulnerability has been resolved: ASoC: imx-card: Add NULL check in imxcardprobe devmkasprintf returns NULL when memory allocation fails. Currently, imxcardprobe does not check for this case, which results in a NULL pointer dereference. Add NULL check after...

UBUNTU-CVE-2025-23136

In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: Add NULL check for adev Not all devices have an ACPI companion fwnode, so adev might be NULL. This is similar to the commit cd2fd6eab480 "platform/x86: int3472: Check for adev == NULL". Add a check for adev not...

CVE-2025-23136

CVE-2025-23136 (Linux kernel, thermal/int340x): The issue arises when an ACPI companion fwnode is missing and the kernel may dereference a NULL adev in int3402_thermal_probe() (and similarly in int3400_thermal_probe()). The fix adds a NULL check for adev and returns -ENODEV when it is not set, pr...

CVE-2025-22084

In the Linux kernel, the following vulnerability has been resolved: w1: fix NULL pointer dereference in probe The w1uartprobe function calls w1uartserdevopen which includes devmserdevdeviceopen before setting the client ops via serdevdevicesetclientops. This ordering can trigger a NULL pointer...

The vulnerability of the hisi_spi_probe() function in Linux kernel-based SPI device drivers allows a hacker to induce a service failure.

The vulnerability of the hisispiprobe function in Linux kernel-based SPI device drivers is related to a division by zero error due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause system failures...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a null pointer dereference in the w1 probe, which could cause the kernel to crash...

PT-2025-16724 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A NULL pointer dereference issue has been identified in the Linux kernel, specifically in the w1 uart probe function. This function calls w1 uart serdev open, which includes devm serde...

PT-2025-20522

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the txgbe probe function. The leak occurs when the txgbe sw init function is called, allocating memory for th...

CVE-2025-3572

SmartRobot from INTUMIT has a Server-Side Request Forgery vulnerability, allowing unauthenticated remote attackers to probe internal network and even access arbitrary local files on the server...

Vulnerability of the pps_gpio_probe() function in the drivers/pps/clients/pps-gpio.c module – This driver for Linux kernel’s PPS client support allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the pps gpioprobe function in the drivers/pps/clients/pps-gpio.c module – The Linux kernel’s PPS client driver has a vulnerability related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the Xen kernel component in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the xen component in the Linux operating system’s kernel is related to a memory leak in the xenbusdevprobe function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel’s media component, which allows a hacker to cause a service failure

The vulnerability of the Linux operating system’s kernel media component is related to defects in exception handling in the mxcjpegprobe function. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of the lgdt3306a_probe() function in the module drivers/media/dvb-frontends/lgdt3306a.c – A driver for supporting multimedia devices in the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the lgdt3306aprobe function in the drivers/media/dvb-frontends/lgdt3306a.c module – Linux’s multimedia device support driver framework – is related to the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...

Vulnerability of the ifcvf_probe() function in the drivers/vdpa/ifcvf/ifcvf_main.c file – This function is a driver for vDPA devices in the Linux kernel. It allows a hacker to cause a service failure.

Vulnerability of the ifcvfprobe function in the drivers/vdpa/ifcvf/ifcvfmain.c file – The drivers for vDPA devices in the Linux operating system are vulnerable to a vulnerability where memory is not properly released before the last reference is deleted memory leak. Exploiting this vulnerability...

PT-2025-18462

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.15.0-rc1-00004-g44722359ed83 Description A NULL pointer dereference issue has been identified in the Linux kernel, specifically in the i2c-cros-ec-tunnel module. This issue occurs when the EC driver and...

PT-2025-20524

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the ngbe probe function. The leak occurs when the ngbe sw init function is called, allocating memory for rss...