PT-2025-52887

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak exists in the exfat find function related to exfat get dentry set. The exfat get dentry set function increases the reference counter of es-bh on success, requiring...

CVE-2025-40212 nfsd: fix refcount leak in nfsd_set_fh_dentry()

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix refcount leak in nfsdsetfhdentry nfsd exports a "pseudo root filesystem" which is used by NFSv4 to find the various exported filesystems using LOOKUP requests from a known root filehandle. NFSv3 uses the MOUNT protocol ...

CVE-2025-40212

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix refcount leak in nfsdsetfhdentry nfsd exports a "pseudo root filesystem" which is used by NFSv4 to find the various exported filesystems using LOOKUP requests from a known root filehandle. NFSv3 uses the MOUNT protocol ...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a reference count leak in the nfsdsetfhdentry function, which could lead to post-release reuse and denial of...

Siemens SCALANCE and RUGGEDCOM Devices Missing Release of Memory after Effective Lifetime (CVE-2024-44971)

net: dsa: bcmsf2: vulnerability caused a memory leak by not decrementing the reference count after finding and removing PHY devices, which has been fixed by adding a call to phydevicefree to balance the reference count. This plugin only works with Tenable.ot. Please visit...

ext4: guard against EA inode refcount underflow in xattr update

...

CVE-2025-40203 listmount: don't call path_put() under namespace semaphore

In the Linux kernel, the following vulnerability has been resolved: listmount: don't call pathput under namespace semaphore Massage listmount and make sure we don't call pathput under the namespace semaphore. If we put the last reference we're fscked...

CVE-2025-40190 ext4: guard against EA inode refcount underflow in xattr update

In the Linux kernel, the following vulnerability has been resolved: ext4: guard against EA inode refcount underflow in xattr update syzkaller found a path where ext4xattrinodeupdateref reads an EA inode refcount that is already ref underflow: refcount=-1 refchange=-1 EXT4-fs warning: eainode dec...

CVE-2025-40186 tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().

In the Linux kernel, the following vulnerability has been resolved: tcp: Don't call reqskfastopenremove in tcpconnrequest. syzbot reported the splat below in tcpconnrequest. 0 If a listener is closed while a TFO socket is being processed in tcpconnrequest, inetcskreqskqueueadd does not set reqsk-...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from an incorrect call to reqskfastopenremove in tcpconnrequest, which could result in a reference count underfl...

RLSA-2025:19105 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: vsock/virtio: Validate length in packet header before skbput CVE-2025-39718 kernel: NFS: Fix filehandle bounds checking in nfsfhtodentry CVE-2025-39730 kernel: ALSA: hda/ca0132: Fix buffe...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990569)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990569 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: acpi: fix resource leak in reconfiguration device addition acpii2cfindadapterbyhandle calls...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990410)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990410 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: usbip: fix a refcount leak in stubprobe usbgetdev is called in stubdevicealloc. When stubpro...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989044)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989044 advisory. In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix use-after-free race condition for maps It is possible that in between calling...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990025)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990025 advisory. In the Linux kernel, the following vulnerability has been resolved: xen: Fix the issue of resource not being properly released in xenbusdevprobe This patch fixes an...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989846)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989846 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: acpi: fix resource leak in reconfiguration device addition acpii2cfindadapterbyhandle calls...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989480)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989480 advisory. In the Linux kernel, the following vulnerability has been resolved: ice: avoid bpfprog refcount underflow Ice driver has the routines for managing XDP resources that...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-988880)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988880 advisory. In the Linux kernel, the following vulnerability has been resolved: ixgbe: fix pci device refcount leak As the comment of pcigetdomainbusandslot says, it returns a P...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989392)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989392 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: atmel: Add missing ofnodeput in at91sam9g20ekaudioprobe This node pointer is returned by...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988845)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988845 advisory. In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix vlan tunnel dst refcnt when egressing The egress tunnel code uses dstclone and...