CVE-2025-38011

Summary: CVE-2025-38011 affects the Linux kernel DRM/amdgpu path (csa unmapping). The root cause is a use of an interruptible lock while unmapping the CSA and freeing GPU VM, which could lead to a memory leak and a warning backtrace when a signal is accepted after process exit and a VM lock wait ...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not waiting for an IRQ to complete, which could lead to stack corruption...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from iforce not waking up a wait queue after clearing a flag, which could result in a deadlock...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: net: Use sockgenput when skstate is TCPTIMEWAIT. It is possible for a pointer of type struct inettimewaitsock to be returned from the functions inetlookupestablished and inet6lookupestablished. This can cause a crash when the...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: csa unmap uses uninterruptible lock After a process exits, attempting to unmap csa and free the GPU virtual memory may cause memory leakage. This issue occurs when the process waits for the vm lock to be released, and...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: perf: Fixed a hang that occurred when freeing a sigtrap event. Perfection may hang when freeing a sigtrap event if a related deferred signal fails to be sent before the file is closed: perfeventoverflow...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: pdscore: Make “waitcontext” a full part of the “qinfo” structure, rather than a stack variable that disappears after “pdscadminqpost” is executed. This ensures that the context is still available after the “wait” loop has ended...

Security update for docker-compose

This update for docker-compose fixes the following issues: Update to version 2.33.1: Improvements Add support for gwpriority, enableipv4 requires docker v28.0 by @thaJeztah in 12570 Fixes Run watch standalone if menu fails to start by @ndeloof in 12536 Report error using non-file secret|config wi...

SUSE-SU-2025:20385-1 Security update for docker-compose

This update for docker-compose fixes the following issues: Update to version 2.33.1: Improvements - Add support for gwpriority, enableipv4 requires docker v28.0 by @thaJeztah in 12570 Fixes - Run watch standalone if menu fails to start by @ndeloof in 12536 - Report error using non-file...

CLSA-2025-1749548218 Fix of 6 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-57896 - btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount CVE-url: https://ubuntu.com/security/CVE-2024-56551 - drm/amdgpu: fix usage slab after free CVE-url: https://ubuntu.com/security/CVE-2021-47211 - ALSA: usb-audi...

CVE-2024-35058

An issue in the API wait function of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via supplying a crafted string...

CVE-2010-2836

Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled, allows remote attackers to cause a denial of service memory consumption by improperly disconnecting SSL sessions, leading to connections that remain in the CLOSE-WAIT state, aka Bug ID...

DEBIAN-CVE-2025-37894

In the Linux kernel, the following vulnerability has been resolved: net: use sockgenput when skstate is TCPTIMEWAIT It is possible for a pointer of type struct inettimewaitsock to be returned from the functions inetlookupestablished and inet6lookupestablished. This can cause a crash when the...

UBUNTU-CVE-2025-37894

In the Linux kernel, the following vulnerability has been resolved: net: use sockgenput when skstate is TCPTIMEWAIT It is possible for a pointer of type struct inettimewaitsock to be returned from the functions inetlookupestablished and inet6lookupestablished. This can cause a crash when the...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper socket release in the TCPTIMEWAIT state, which could lead to a crash...

Astra Linux - уязвимость в linux-5.15, linux-5.10

In the Linux kernel, the following vulnerability has been resolved: NFSD: fix use-after-free in nfsd4sscsetupdul If signalpending returns true, scheduletimeout will not be executed, causing the waiting task to remain in the wait queue. Fixed by adding a call to finishwait, which ensures that the...

kernel: jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error

A flaw was found in the jbd2 component of the Linux kernel. When an input/output I/O error occurs during the journal cleanup process, the system may continue to wait for journal space that cannot be freed. This improper error handling can lead to a system becoming unresponsive or experiencing a...

kernel: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race

In the Linux kernel, the following vulnerability has been resolved: blk-rq-qos: fix crash on rqqoswait vs. rqqoswakefunction race We're seeing crashes from rqqoswakefunction that look like this: BUG: unable to handle page fault for address: ffffafe180a40084 PF: supervisor write access in kernel...

kernel: afs: Fix the setting of the server responding flag

A flaw was found in the Linux kernel's AFS Andrew File System module. This vulnerability occurs in the afswaitforoperation function, where the op-server pointer is not properly validated for NULL before being used. A local attacker with low privileges could exploit this flaw, leading to a system...

kernel: ext4: fix i_data_sem unlock order in ext4_ind_migrate()

A flaw was found in the kernel's ext4 filesystem. When an EXT4IOCMIGRATE ioctl input/output control operation, requiring synchronous updates, races with a write2 system call, it can lead to a deadlock. This deadlock occurs specifically when the CONFIGPROVELOCKING option is enabled, potentially...