CVE-2025-71193 phy: qcom-qusb2: Fix NULL pointer dereference on early suspend

In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qusb2: Fix NULL pointer dereference on early suspend Enabling runtime PM before attaching the QPHY instance as driver data can lead to a NULL pointer dereference in runtime PM callbacks that expect valid driver data...

CVE-2025-71193

The CVE-2025-71193 family (Linux kernel: phy: qcom-qusb2) describes a NULL pointer dereference during early suspend caused by enabling runtime PM before the QPHY driver data is attached. This creates a window where suspend callbacks may run with invalid driver data, leading to sporadic boot crash...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the phyqcomqusb2 driver’s inability to properly unreference null pointers when it is suspended...

Linux Distros Unpatched Vulnerability : CVE-2026-23055

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: riic: Move suspend handling to NOIRQ phase Commit 53326135d0e0 i2c: riic: Add suspend/resume support added suspend support for the Renesas I2C driver and...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005110)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005110 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: serial: mos7840: fix crash on resume Since commit c49cfa917025 USB: serial: use generic meth...

SUSE CVE-2026-23009

In the Linux kernel, the following vulnerability has been resolved: xhci: sideband: don't dereference freed ring when removing sideband endpoint xhcisidebandremoveendpoint incorrecly assumes that the endpoint is running and has a valid transfer ring. Lianqin reported a crash during suspend/wake-u...

CVE-2026-23009

In the Linux kernel, the following vulnerability has been resolved: xhci: sideband: don't dereference freed ring when removing sideband endpoint xhcisidebandremoveendpoint incorrecly assumes that the endpoint is running and has a valid transfer ring. Lianqin reported a crash during suspend/wake-u...

SUSE-SU-2026:0281-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38321: smb: Log an error when closeallcacheddirs fails bsc1246328. - CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd bsc1249256. -...

EUVD-2022-54546

In the Linux kernel, the following vulnerability has been resolved: virtionet: fix xdprxqinfo bug after suspend/resume The following sequence currently causes a driver bug warning when using virtionet: ip link set eth0 up echo mem /sys/power/state or e.g. rtcwake -s 10 -m mem ip link set eth0 dow...

Azure Linux 3.0 Security Update: kernel (CVE-2024-42085)

"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42085 advisory. - In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: remove lock of otg mod...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46846)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46846 advisory. - In the Linux kernel, the following vulnerability has been resolved: spi: rockchip: Resolve unbalanced runtim...

Azure Linux 3.0 Security Update: kernel (CVE-2024-41037)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-41037 advisory. - In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: fix null deref on...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-35794)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-35794 advisory. - In the Linux kernel, the following vulnerability has been resolved: dm-raid: really frozen syncthrea...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002353)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002353 advisory. The tmreclaimthread function in arch/powerpc/kernel/process.c in the Linux kernel before 4.4.1 on powerpc platforms does not ensure that TM suspend mode exists befor...

MiracleLinux 3 : kernel-2.6.18-128.12AXS3 (AXSA:2009-411:13)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2009-411:13 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating system:...

MiracleLinux 4 : NetworkManager-0.8.1-9.AXS4.3 (AXSA:2011-534:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2011-534:01 advisory. NetworkManager is a system network service that manages your network devices and connections, attempting to keep active network connectivity when...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: pwm: berlin: Fixed the incorrect register used in suspend/resume operations. The “enable” register should be BERLINPWMEN instead of BERLINPWMENABLE. Otherwise, the driver will access the wrong address, leading to a CPU exception...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: dm: Fix NULL pointer dereference in dmsuspend There is a race condition between the suspension of the dm device and the loading of data into the table, which can lead to a NULL pointer dereference. This issue occurs when the...

MiracleLinux 9 : kernel-5.14.0-503.35.1.el9_5 (AXSA:2025-9843:26)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9843:26 advisory. kernel: md: fix deadlock between mddevsuspend and flush bio CVE-2024-43855 Tenable has extracted the preceding description block directly from the MiracleLin...

Siemens SCALANCE, Ruggedcom ROX Incorrect Authorization (CVE-2022-30594)

The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACESEIZE code path allows attackers to bypass intended restrictions on setting the PTSUSPENDSECCOMP flag. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...