CVE-2025-38109 net/mlx5: Fix ECVF vports unload on shutdown flow

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix ECVF vports unload on shutdown flow Fix shutdown flow UAF when a virtual function is created on the embedded chip ECVF of a BlueField device. In such case the vport acl ingress table is not properly destroyed. ECVF...

CVE-2025-38109

CVE-2025-38109 — Linux kernel : Affected component is the mlx5/eswitch path used for ECVF vports on BlueField devices. The issue is a use-after-free (UAF) during shutdown when a virtual function is created on the embedded BlueField chip, causing the vport ACL ingress table to not be properly dest...

CVE-2025-38109

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix ECVF vports unload on shutdown flow Fix shutdown flow UAF when a virtual function is created on the embedded chip ECVF of a BlueField device. In such case the vport acl ingress table is not properly destroyed. ECVF...

CVE-2025-38105 ALSA: usb-audio: Kill timer properly at removal

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Kill timer properly at removal The USB-audio MIDI code initializes the timer, but in a rare case, the driver might be freed without the disconnect call. This leaves the timer in an active state while the assigned...

PT-2025-27695

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free vulnerability has been identified in the Linux kernel, specifically in the net/mlx5 component. This issue occurs when a virtual function is created on the embedded chi...

📄 Turn off PC 1.0 Unauthenticated Remote System Control

Turn Off PC version 1.0 exposes an unsecured socket port 8081 allowing complete remote power control shutdown, restart, sleep without authentication, enabling system disruption attacks. Exploit Title: Turn Off PC 1.0 - Unauthenticated Remote System Control Shutdown/Restart/Sleep Date: 02/07/25...

CVE-2025-38093 arm64: dts: qcom: x1e80100: Add GPU cooling

In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: x1e80100: Add GPU cooling Unlike the CPU, the GPU does not throttle its speed automatically when it reaches high temperatures. With certain high GPU loads it is possible to reach the critical hardware shutdown...

CVE-2025-49481

Improper Resource Shutdown or Release vulnerability in ASR180x 、ASR190x in router modules allows Resource Leak Exposure. This vulnerability is associated with program files router/phonebook/pbwork-queue.C. This issue affects FalconLinux、Kestrel、LapwingLinux: before v1536...

CVE-2025-49482

Improper Resource Shutdown or Release vulnerability in ASR180x 、ASR190x in tr069 modules allows Resource Leak Exposure. This vulnerability is associated with program files tr069/tr098.c. This issue affects FalconLinux、Kestrel、LapwingLinux: before v1536...

CVE-2025-49481

Improper Resource Shutdown or Release vulnerability in ASR180x 、ASR190x in router modules allows Resource Leak Exposure. This vulnerability is associated with program files router/phonebook/pbwork-queue.C. This issue affects FalconLinux、Kestrel、LapwingLinux: before v1536...

CVE-2025-49482

Improper Resource Shutdown or Release vulnerability in ASR180x 、ASR190x in tr069 modules allows Resource Leak Exposure. This vulnerability is associated with program files tr069/tr098.c. This issue affects FalconLinux、Kestrel、LapwingLinux: before v1536...

CVE-2025-49483

Improper Resource Shutdown or Release vulnerability in ASR180x 、ASR190x in tr069 modules allows Resource Leak Exposure. This vulnerability is associated with program files tr069/tr069uci.c. This issue affects FalconLinux、Kestrel、LapwingLinux: before v1536...

CVE-2025-49481

The CVE-2025-49481 entry describes an Improper Resource Shutdown or Release vulnerability causing Resource Leak Exposure in ASR180x and ASR190x router modules, tied to the pbwork-queue.C file. Affected software includes ASR180x and ASR190x (and related Falcon Linux, Kestrel, Lapwing Linux lines) ...

CVE-2025-49491

Improper Resource Shutdown or Release vulnerability in ASR FalconLinux、Kestrel、LapwingLinux on Linux trafficstat modules allows Resource Leak Exposure. This vulnerability is associated with program files trafficstat/trafficservice/trafficservice.C. This issue affects...

CVE-2025-49488

Improper Resource Shutdown or Release vulnerability in ASR180x 、ASR190x in router components allows Resource Leak Exposure. This vulnerability is associated with program files router/phonebook/pb.c. This issue affects FalconLinux、Kestrel、LapwingLinux: before v1536...

CVE-2025-49491

CVE-2025-49491 affects ASR Falcon_Linux, ASR Kestrel, and ASR Lapwing_Linux (Linux) in the traffic_stat module, specifically traffic_stat/traffic_service/traffic_service.C. The issue is an Improper Resource Shutdown or Release that leads to a Resource Leak Exposure. Affected versions are before v...

CVE-2025-49489

Improper Resource Shutdown or Release vulnerability in ASR FalconLinux、Kestrel、LapwingLinux on Linux conmgr components allows Resource Leak Exposure. This vulnerability is associated with program files conmgr/dialertask.C. This issue affects FalconLinux、Kestrel、LapwingLinux: before v1536...

CVE-2025-49489

Improper Resource Shutdown or Release vulnerability in ASR FalconLinux、Kestrel、LapwingLinux on Linux conmgr components allows Resource Leak Exposure. This vulnerability is associated with program files conmgr/dialertask.C. This issue affects FalconLinux、Kestrel、LapwingLinux: before v1536...

CVE-2025-49489 Resource leaks in cm

Improper Resource Shutdown or Release vulnerability in ASR FalconLinux、Kestrel、LapwingLinux on Linux conmgr components allows Resource Leak Exposure. This vulnerability is associated with program files conmgr/dialertask.C. This issue affects FalconLinux、Kestrel、LapwingLinux: before v1536...

PT-2025-27517

Name of the Vulnerable Software and Affected Versions: ASR180x versions prior to v1536 ASR190x versions prior to v1536 Falcon Linux versions prior to v1536 Kestrel versions prior to v1536 Lapwing Linux versions prior to v1536 Description: The issue is related to an Improper Resource Shutdown or...