CVE-2025-39964 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39964 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39880 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39880 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39970 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39970 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39842 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39842 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39961 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39961 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

AZL-68141 CVE-2025-39946 affecting package kernel for versions less than 6.6.112.1-1

In the Linux kernel, the following vulnerability has been resolved: tls: make sure to abort the stream if headers are bogus Normally we wait for the socket to buffer up the whole record before we service it. If the socket has a tiny buffer, however, we read out the data sooner, to prevent...

AZL-68135 CVE-2025-39938 affecting package kernel for versions less than 6.6.112.1-1

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed If earlier opening of source graph fails e.g. ADSP rejects due to incorrect audioreach topology, the graph is closed and "daidata-graphdai-id" is...

AZL-68129 CVE-2025-39934 affecting package kernel for versions less than 6.6.112.1-1

In the Linux kernel, the following vulnerability has been resolved: drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ If the interrupt occurs before resource initialization is complete, the interrupt handler/worker may access uninitialized data such as the I2C tcpcclient device,...

AZL-68049 CVE-2025-39913 affecting package kernel for versions less than 6.6.112.1-1

In the Linux kernel, the following vulnerability has been resolved: tcpbpf: Call skmsgfree when tcpbpfsendverdict fails to allocate psock-cork. syzbot reported the splat below. 0 The repro does the following: 1. Load a skmsg prog that calls bpfmsgcorkbytesmsg, corkbytes 2. Attach the prog to a...

AZL-67656 CVE-2025-39883 affecting package kernel for versions less than 6.6.112.1-1

In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: fix VMBUGONPAGEPagePoisonedpage when unpoison memory When I did memory failure tests, below panic occurs: page dumped because: VMBUGONPAGEPagePoisonedpage kernel BUG at include/linux/page-flags.h:616! Oops:...

AZL-67578 CVE-2025-39866 affecting package kernel for versions less than 6.6.112.1-1

In the Linux kernel, the following vulnerability has been resolved: fs: writeback: fix use-after-free in markinodedirty An use-after-free issue occurred when markinodedirty get the bdiwriteback that was in the progress of switching. CPU: 1 PID: 562 Comm: systemd-random- Not tainted...