SUSE-SU-2025:20475-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup bsc1237913. - CVE-2024-58053: rxrpc: Fix handling of received connection abort bsc123898...

tracing: Verify event formats that have "%*p.."

...

tracing: Fix oob write in trace_seq_to_buffer()

...

Azure Linux 3.0 Security Update: kernel (CVE-2025-22035)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22035 advisory. - In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free in...

Windows Event Tracing Privilege Escalation

The vulnerability of Windows Event Tracing in operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2025-47985

Untrusted pointer dereference in Windows Event Tracing allows an authorized attacker to elevate privileges locally...

CVE-2025-49660

Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally...

CVE-2025-38327 fgraph: Do not enable function_graph tracer when setting funcgraph-args

In the Linux kernel, the following vulnerability has been resolved: fgraph: Do not enable functiongraph tracer when setting funcgraph-args When setting the funcgraph-args option when function graph tracer is net enabled, it incorrectly enables it. Worse, it unregisters itself when it was never...

CVE-2025-38285

CVE-2025-38285 – Linux kernel : The issue stems from a WARN_ON_ONCE in the BPF tracing path (get_bpf_raw_tp_regs) triggered by a corner case involving trace_mmap_lock and stack maps. The issue surfaces during BPF stack retrieval and is reported in kernel/bpf_trace.c, with inline calls in bpf_get_...

Windows Event Tracing Privilege Escalation

The vulnerability of the Windows Event Tracing service in operating systems is related to the misuse of a trusted pointer. Exploiting this vulnerability can allow attackers to gain increased privileges...

CVE-2025-49660

Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally...

CVE-2025-49660

Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally...

CVE-2025-47985

Untrusted pointer dereference in Windows Event Tracing allows an authorized attacker to elevate privileges locally...

CVE-2025-47985

Untrusted pointer dereference in Windows Event Tracing allows an authorized attacker to elevate privileges locally...

CVE-2025-49660 Windows Event Tracing Elevation of Privilege Vulnerability

...

CVE-2025-49660

Technical details about CVE-2025-49660 (affected product/component/version, root cause, impact, exploit status, or available patch) are not provided in the connected documents; monitor official disclosures for updates.

CVE-2025-47985 Windows Event Tracing Elevation of Privilege Vulnerability

...

CVE-2025-47985 Windows Event Tracing Elevation of Privilege Vulnerability

...

CVE-2025-47985

Technical details (affected component/version, root cause, exploitation) are not provided in the supplied documents. Monitor official advisories for updates and confirmed fixes.

SUSE-SU-2025:02254-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL bsc1228557. - CVE-2024-49568: net/smc: check v2extoffset/eidcnt/ismgidcnt when...