UBUNTU-CVE-2026-23385

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: clone set on flush only Syzbot with fault injection triggered a failing memory allocation with GFPKERNEL which results in a WARN splat: iter.err WARNING: net/netfilter/nftablesapi.c:845 at...

CVE-2023-54224

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix lockdep splat and potential deadlock after failure running delayed items When running delayed items we are holding a delayed node's mutex and then we will attempt to modify a subvolume btree to insert/update/delete the...

CVE-2023-54224

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix lockdep splat and potential deadlock after failure running delayed items When running delayed items we are holding a delayed node's mutex and then we will attempt to modify a subvolume btree to insert/update/delete the...

CVE-2023-54224 btrfs: fix lockdep splat and potential deadlock after failure running delayed items

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix lockdep splat and potential deadlock after failure running delayed items When running delayed items we are holding a delayed node's mutex and then we will attempt to modify a subvolume btree to insert/update/delete the...

EUVD-2025-13072

Malicious code in bioql PyPI...

EUVD-2024-51827

Malicious code in bioql PyPI...

rcutorture: Fix rcutorture_one_extend_check() splat in RT kernels

...

DEBIAN-CVE-2025-39745

In the Linux kernel, the following vulnerability has been resolved: rcutorture: Fix rcutortureoneextendcheck splat in RT kernels For built with CONFIGPREEMPTRT=y kernels, running rcutorture tests resulted in the following splat: 68.797425 rcutortureoneextendcheck during change: Current 0x1 To add...

Malicious code in @malware-test-tupek-raver-splat-torii/test-mlw3-tupek-raver-splat-torii (npm)

The package @malware-test-tupek-raver-splat-torii/test-mlw3-tupek-raver-splat-torii was found to contain malicious code...

MAL-2025-9027 Malicious code in @malware-test-tupek-raver-splat-torii/test-mlw3-tupek-raver-splat-torii (npm)

The package @malware-test-tupek-raver-splat-torii/test-mlw3-tupek-raver-splat-torii was found to contain malicious code...

CVE-2022-49985

In the Linux kernel, the following vulnerability has been resolved: bpf: Don't use tnumrange on array range checking for poke descriptors Hsin-Wei reported a KASAN splat triggered by their BPF runtime fuzzer which is based on a customized syzkaller: BUG: KASAN: slab-out-of-bounds in...

CVE-2022-49985

The CVE-2022-49985 entry concerns the Linux kernel, where the BPF component allowed a range check descriptor to misrepresent a tight range because tnum_range(0, map->max_entries-1) may yield a superset of the intended values. The root cause is that the tnum-based range representation can erron...

CVE-2022-49985 bpf: Don't use tnum_range on array range checking for poke descriptors

In the Linux kernel, the following vulnerability has been resolved: bpf: Don't use tnumrange on array range checking for poke descriptors Hsin-Wei reported a KASAN splat triggered by their BPF runtime fuzzer which is based on a customized syzkaller: BUG: KASAN: slab-out-of-bounds in...

CVE-2025-37750

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in decryption with multichannel After commit f7025d861694 "smb: client: allocate crypto only for primary server" and commit b0abcd65ec54 "smb: client: fix UAF in async decryption", the channels started reusin...

CVE-2025-37750

The CVE-2025-37750 entry concerns a use-after-free in the Linux kernel SMB/CIFS client when multichannel decryption is used. The root cause is that after the commits “smb: client: allocate crypto only for primary server” and “smb: client: fix UAF in async decryption”, channels could concurrently ...

CVE-2025-37750 smb: client: fix UAF in decryption with multichannel

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in decryption with multichannel After commit f7025d861694 "smb: client: allocate crypto only for primary server" and commit b0abcd65ec54 "smb: client: fix UAF in async decryption", the channels started reusin...

CVE-2025-21868

CVE-2025-21868 affects the Linux kernel: the issue arises in net/core related to small head cache usage when MAX_SKB_FRAGS is large (example build with MAX_SKB_FRAGS=45). The splat trace points to netif_napi_add_weight_locked and related paths; the advisory notes that the root cause is independen...

PT-2025-16751

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the handling of SIOCBRADDIF and SIOCBRDELIF in the dev ioctl function, which can cause unnecessary RTNL dan...

Linux watch_queue Filter Out-Of-Bounds Write

The Linux watchqueue filter suffers from an out of bounds write vulnerability amongst other issues that are also noted. This bug report is about things in the watchqueue subsystem, which is only enabled under CONFIGWATCHQUEUE. That seems to be disabled e.g. on Debian, but Ubuntu and Fedora enable...

CVE-2022-49662 ipv6: fix lockdep splat in in6_dump_addrs()

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix lockdep splat in in6dumpaddrs As reported by syzbot, we should not use rcudereference when rcureadlock is not held. WARNING: suspicious RCU usage 5.19.0-rc2-syzkaller 0 Not tainted net/ipv6/addrconf.c:5175 suspicious...