CVE-2025-68169

CVE-2025-68169 affects the Linux kernel where a deadlock can occur in netpoll when memory allocation happens under a spinlock in refill_skbs(). Under memory pressure, refill_skbs() holds skb_pool->lock, then alloc_skb() may fail and trigger slab_out_of_memory(), leading to printk() which can i...

CVE-2025-68169 netpoll: Fix deadlock in memory allocation under spinlock

In the Linux kernel, the following vulnerability has been resolved: netpoll: Fix deadlock in memory allocation under spinlock Fix a AA deadlock in refillskbs where memory allocation while holding skbpool-lock can trigger a recursive lock acquisition attempt. The deadlock scenario occurs when the...

PT-2025-51732

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18.0-rc2-00399-g6f1ab1b109b9 Description The Linux kernel contains a flaw within the lan966x driver where a mutex is used within an atomic context. This can lead to a kernel warning, specifically "BUG: sleeping...

Linux Distros Unpatched Vulnerability : CVE-2025-68320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lan966x: Fix sleeping in atomic context The following warning was seen when we try to connect using ssh to the device. BUG: sleeping function called from invali...

Linux Distros Unpatched Vulnerability : CVE-2025-68203

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: fix lock warning in amdgpuuserqfencedriverprocess Fix a potential deadlock caused by inconsistent spinlock usage between interrupt and process...

PT-2025-51582

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the netpoll subsystem that can lead to a deadlock scenario when the system experiences significant memory pressure. This occurs during memory...

PT-2025-51734

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the unwinder that can lead to a system crash due to unaligned memory access. This issue occurs when the unwinder attempts to read the previous stack...

Linux Distros Unpatched Vulnerability : CVE-2025-68322

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - parisc: Avoid crash due to unaligned access in unwinder Guenter Roeck reported this kernel crash on his emulated B160L machine: Starting network: udhcpc: starte...

PT-2025-51616

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the drm/amdgpu subsystem related to inconsistent spinlock usage between interrupt and process contexts within the userq fence driver. Specifically, th...

UBUNTU-CVE-2025-40315

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Fix epfile null pointer access after ep enable. A race condition occurs when ffsfuncepsenable runs concurrently with ffsdatareset. The ffsdataclear called in ffsdatareset sets ffs-epfiles to NULL before resettin...

Linux Distros Unpatched Vulnerability : CVE-2025-40280

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tipc: Fix use-after-free in tipcmonreinitself. syzbot reported use-after-free of tipcnetnet-monitors in tipcmonreinitself. 0 The array is protected by RTNL, but...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56610)

kcsan: Turn reportfilterlistlock into a rawspinlock, with a KCSAN- enabled PREEMPTRT kernel, we can see splats like sleeping function called from invalid context at kernel/locking/spinlockrt.c:48. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for...

EUVD-2025-124941

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Disable bottom softirqs as part of spinlockirq on PREEMPTRT sndpcmgrouplockirq acquires a spinlockt and disables interrupts via spinlockirq. This also implicitly disables the handling of softirqs such as TIMERSOFTIRQ. ...

kernel: xfrm: state: fix out-of-bounds read during lookup

In the Linux kernel, the following vulnerability has been resolved: xfrm: state: fix out-of-bounds read during lookup lookup and resize can run in parallel. The xfrmstatehashgeneration seqlock ensures a retry, but the hash functions can observe a hmask value that is too large for the new hlist...

drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV

...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990570)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990570 advisory. In the Linux kernel, the following vulnerability has been resolved: m68k: Fix spinlock race in kernel thread creation Context switching does take care to retain the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990445)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990445 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Fix sleeping function called from invalid context on RT kernel When setting...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988685)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988685 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: rndis: add spinlock for rndis response list There's no lock for rndis response list...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989843)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989843 advisory. In the Linux kernel, the following vulnerability has been resolved: m68k: Fix spinlock race in kernel thread creation Context switching does take care to retain the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989528)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989528 advisory. In the Linux kernel, the following vulnerability has been resolved: kcsan: Turn reportfilterlistlock into a rawspinlock Ran Xiaokai reports that with a KCSAN-enabled...