CVE-2025-23163 net: vlan: don't propagate flags on open

In the Linux kernel, the following vulnerability has been resolved: net: vlan: don't propagate flags on open With the device instance lock, there is now a possibility of a deadlock: 1.211455 ============================================ 1.211571 WARNING: possible recursive locking detected 1.21168...

CVE-2025-23162

The CVE-2025-23162 issue affects the Linux kernel DRM/XE driver with SR-IOV VFs. A VF could trigger a GT reset and attempt to write to register 0x941c, which is inaccessible to VFs, leading to a fault path during reset handling. The available connected docs document the root cause and provide a r...

CVE-2025-23162 drm/xe/vf: Don't try to trigger a full GT reset if VF

In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Don't try to trigger a full GT reset if VF VFs don't have access to the GDRST0x941c register that driver uses to reset a GT. Attempt to trigger a reset using debugfs: $ cat...

CVE-2025-23157 media: venus: hfi_parser: add check to avoid out of bound access

In the Linux kernel, the following vulnerability has been resolved: media: venus: hfiparser: add check to avoid out of bound access There is a possibility that initcodecs is invoked multiple times during manipulated payload from video firmware. In such case, if codecscount can get incremented to...

CVE-2025-23151 bus: mhi: host: Fix race between unprepare and queue_buf

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Fix race between unprepare and queuebuf A client driver may use mhiunpreparefromtransfer to quiesce incoming data during the client driver's tear down. The client driver might also be processing data at the same...

CVE-2025-23148 soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()

In the Linux kernel, the following vulnerability has been resolved: soc: samsung: exynos-chipid: Add NULL pointer check in exynoschipidprobe socdevattr-revision could be NULL, thus, a pointer check is added to prevent potential NULL pointer dereference. This is similar to the fix in commit...

CVE-2025-23145

Summary (CVE-2025-23145) : Linux kernel MPTCP component fix for a NULL pointer dereference in can_accept_new_subflow when subflow_req->msk is NULL. The issue could occur when a SYN-ACK is received twice in quick succession and the ownership of subflow_req->msk is transferred to the first su...

CVE-2025-23145 mptcp: fix NULL pointer in can_accept_new_subflow

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix NULL pointer in canacceptnewsubflow When testing valkey benchmark tool with MPTCP, the kernel panics in 'mptcpcanacceptnewsubflow' because subflowreq-msk is NULL. Call trace: mptcpcanacceptnewsubflow...

PT-2025-18509 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential array out of bounds access issue has been resolved in the Linux kernel's iio core, specifically in the mp2629 adc driver. To prevent this issue, a sentinel has been added a...

PT-2025-18529 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been resolved in the Linux kernel. The problem occurs when the VLAN protocol of a bridge changes, and the bridge driver attempts to delete a VLAN via the 8021q...

PT-2025-18538

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A possible memory leak in the mISDN module has been resolved. The issue occurred after a commit where the device name is allocated dynamically, and the reference is given up using put...

PT-2025-18640 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential memory leak has been identified in the Linux kernel, specifically in the nxp nci send function. This function calls nxp nci i2c write and only frees the skb when nxp nci i2...

PT-2025-18614 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel related to the fscrypt feature. Specifically, when a mount attempt fails after the test dummy encryption option has been...

PT-2025-18515 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A race condition in the Linux kernel's tracing system allows eprobes to be called before the event, potentially leading to a NULL kernel pointer bug. This occurs because the flag...

SUSE SLES15 Security Update : kernel (Live Patch 52 for SLE 15 SP3) (SUSE-SU-2025:1418-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:1418-1 advisory. This update for the Linux Kernel 5.3.18-15030059188 fixes one issue. The following security issue was fixed: - CVE-2024-56650: netfilter: xtables: fix...

PT-2025-18554 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to memory leaks in the check func call function of the Linux kernel's bpf module. The problem occurs when the callee is not released in abnormal scenarios, leading...

PT-2025-18580 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is caused by a NULL pointer dereference in the can rx register function when testing the following scenario: a creating a netlink socket using syscall NR socket, 0x10ul, 3ul,...

PT-2025-18552 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential memory leak issue has been resolved in the Linux kernel, specifically in the ALSA hda component. The problem occurred in the add widget node function, where kobject add may...

PT-2025-18578 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A resource leak issue has been identified in the Linux kernel, specifically in the dmaengine mv xor v2 component. The problem arises from an unbalanced clk prepare enable call in the...

PT-2025-18583 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the MHI driver. The driver registers a network device without setting the needs free netdev flag and does n...