5453 matches found
CVE-2025-40156
Technical details for CVE-2025-40156 are not provided in the connected documents; the Ubuntu/Nessus entries reference other CVEs and do not disclose specifics of this CVE.
CVE-2025-40156
In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe The drv-sramreg pointer could be set to ERRPTR-EPROBEDEFER which would lead to a error pointer dereference. Use ISERRORNULL to check that the pointer is vali...
CVE-2025-40156 PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe()
In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe The drv-sramreg pointer could be set to ERRPTR-EPROBEDEFER which would lead to a error pointer dereference. Use ISERRORNULL to check that the pointer is vali...
CVE-2025-40156 PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe()
In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe The drv-sramreg pointer could be set to ERRPTR-EPROBEDEFER which would lead to a error pointer dereference. Use ISERRORNULL to check that the pointer is vali...
CVE-2025-40144 nvdimm: ndtest: Return -ENOMEM if devm_kcalloc() fails in ndtest_probe()
In the Linux kernel, the following vulnerability has been resolved: nvdimm: ndtest: Return -ENOMEM if devmkcalloc fails in ndtestprobe devmkcalloc may fail. ndtestprobe allocates three DMA address arrays dcrdma, labeldma, dimmdma and later unconditionally uses them in ndtestnvdimminit, which can...
CVE-2025-40116 usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup
In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup The kthreadrun function returns error pointers so the max3421hcd-spithread pointer can be either error pointers or NULL. Check for both before dereferencing i...
CVE-2025-40116
The CVE-2025-40116 issue is in the Linux kernel USB host max3421-hcd path. It arises from dereferencing kthread_run() return values that can be error pointers or NULL in probe cleanup. The SUSE advisories SUSE-SU-2025:4505-1 and SUSE-SU-2025:4516-1 (and related) document the fix and list the affe...
CVE-2025-40116 usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup
In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup The kthreadrun function returns error pointers so the max3421hcd-spithread pointer can be either error pointers or NULL. Check for both before dereferencing i...
Linux Distros Unpatched Vulnerability : CVE-2025-59088
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If kdcproxy receives a request for a realm which does not have server addresses defined in its configuration, by default, it will query SRV records in the DNS...
PT-2025-46619
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the ndtest component where a failure of devm kcalloc during memory allocation in the ndtest probe function can lead to a NULL pointer dereference...
Linux Distros Unpatched Vulnerability : CVE-2025-40156
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe The drv-sramreg pointer could be set to ERRPTR-EPROBEDEFER which would lead to a error...
PT-2025-46663
Name of the Vulnerable Software and Affected Versions N-central Software Probe versions prior to 2025.4 Description The N-central Software Probe is susceptible to Remote Code Execution through deserialization. No authentication is required for exploitation. Recommendations Update to a version of...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the mtk-cci driver not handling ERRPTR-EPROBEDEFER correctly, which could lead to dereferencing of incorrect...
RHEL 9 : kernel (RHSA-2025:21112)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21112 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: firmware: armscpi: Ensure...
Linux Distros Unpatched Vulnerability : CVE-2025-40116
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup The kthreadrun function returns error pointers so the max3421hcd-spithread pointer can be...
kernel: wifi: rtlwifi: remove unused check_buddy_priv
In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: remove unused checkbuddypriv Commit 2461c7d60f9f "rtlwifi: Update header file" introduced a global list of private data structures. Later on, commit 26634c4b1868 "rtlwifi Modify existing bits to match vendor versio...
kernel: wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Clear affinity hint before calling ath11kpcicfreeirq in error path If a shared IRQ is used by the driver due to platform limitation, then the IRQ affinity hint is set right after the allocation of IRQ vectors in...
kernel: block: fix uaf for flush rq while iterating tags
In the Linux kernel, the following vulnerability has been resolved: block: fix uaf for flush rq while iterating tags blkmqclearflushrqmapping is not called during scsi probe, by checking blkqueueinitdone. However, QUEUEFLAGINITDONE is cleared in delgendisk by commit aec89dc5d421 "block: keep...
kernel: can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods
A flaw was found in the Linux kernel. A local attacker could exploit a missing call to mcanclassfreedev in the mcanpciremove and mcanpciprobe error handling paths. This oversight leads to a memory leak, which could result in a denial of service DoS due to resource exhaustion...