CVE-2025-37880

CVE-2025-37880 affects the Linux kernel where sched_yield may not yield in time-travel mode due to a poorly implemented userspace spinlock in ASAN. The fix adds accounting of time to the process on every sched_yield to ensure proper scheduling. Impact can be extreme slowdown or deadlock depending...

CVE-2025-37854

CVE-2025-37854 affects the Linux kernel drm/amdkfd path. A use-after-free race occurs when mode1 reset is used to recover a hung GPU: after KFD signals user space to abort, the cleanup may free or reuse system memory (and VRAM) still in use by user queues, potentially corrupting data structures a...

CVE-2024-45565

Memory corruption when blob structure is modified by user-space after kernel verification...

libmnl bug fix update

An update is available for libmnl. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list libmnl is a minimalistic user-space library oriented to Netlink developers...

virt:rhel and virt-devel:rhel security update

An update is available for module.libvirt-dbus, swtpm, module.nbdkit, netcf, module.libiscsi, virt-v2v, libguestfs, module.virt-v2v, perl-Sys-Virt, module.supermin, sgabios, libvirt-dbus, module.netcf, libnbd, module.seabios, module.libvirt-python, hivex, seabios, module.sgabios,...

RLSA-2024:0135 Moderate: virt:rhel and virt-devel:rhel security update

Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the...

CVE-2024-45565

Memory corruption when blob structure is modified by user-space after kernel verification...

CVE-2024-45565

Memory corruption when blob structure is modified by user-space after kernel verification...

CVE-2024-45565 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver

Memory corruption when blob structure is modified by user-space after kernel verification...

CVE-2024-45565

CVE-2024-45565 describes a TOCTOU race condition in the Qualcomm camera driver where memory corruption can occur if a blob structure is modified by user-space after kernel verification. The issue affects Qualcomm chipsets with a camera driver component and is triggered by a mismatch between kerne...

CBL Mariner 2.0 Security Update: kernel (CVE-2025-21687)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21687 advisory. - In the Linux kernel, the following vulnerability has been resolved: vfio/platform: check the bounds of...

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets, which originates from a Camera kernel driver memory corruption during a user-space call to IOCTL to dump request information...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a kernel validation followed by a user-space modification of the blob structure, which could result in memory corruption...

AZL-70117 CVE-2022-49932 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Do all initialization before exposing /dev/kvm to userspace Call kvminit only after all setup is complete, as kvminit exposes /dev/kvm to userspace and thus allows userspace to create VMs and call other ioctls. E.g. KVM...

UBUNTU-CVE-2023-53141

In the Linux kernel, the following vulnerability has been resolved: ila: do not generate empty messages in ilaxlatnlcmdgetmapping ilaxlatnlcmdgetmapping generates an empty skb, triggerring a recent sanity check 1. Instead, return an error code, so that user space can get it. 1 skbassertlen WARNIN...

CVE-2023-53141 ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping()

In the Linux kernel, the following vulnerability has been resolved: ila: do not generate empty messages in ilaxlatnlcmdgetmapping ilaxlatnlcmdgetmapping generates an empty skb, triggerring a recent sanity check 1. Instead, return an error code, so that user space can get it. 1 skbassertlen WARNIN...

CVE-2023-53113 wifi: nl80211: fix NULL-ptr deref in offchan check

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: fix NULL-ptr deref in offchan check If, e.g. in AP mode, the link was already created by userspace but not activated yet, it has a chandef but the chandef isn't valid and has no channel. Check for this and ignore...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the uaudio driver not handling user space references correctly, which could lead to a deadlock...

UBUNTU-CVE-2022-49782

In the Linux kernel, the following vulnerability has been resolved: perf: Improve missing SIGTRAP checking To catch missing SIGTRAP we employ a WARN in perfeventoverflow, which fires if pendingsigtrap was already set: returning to user space without consuming pendingsigtrap, and then having the...

CVE-2022-49782 perf: Improve missing SIGTRAP checking

In the Linux kernel, the following vulnerability has been resolved: perf: Improve missing SIGTRAP checking To catch missing SIGTRAP we employ a WARN in perfeventoverflow, which fires if pendingsigtrap was already set: returning to user space without consuming pendingsigtrap, and then having the...