PT-2025-25938 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue is related to the initialization of jump labels on 64-bit systems. Specifically, calling jump label init in setup featu...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a random warning message that may be generated when the usb cdns3 driver is loaded...

PT-2025-26010 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.18.0 Description: A bug in the Linux kernel has been resolved, which was causing an address sanitizer warning in raid status. The warning occurred when using a kernel with the address sanitizer and running a...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from fbtft not setting memlen correctly, which could result in a warning being triggered...

Scattered Spider Aims at US Insurers After UK Retail Hit, Google Warns

Scattered Spider targets US insurance firms after UK retail attacks, using social engineering to breach help desks and disrupt services, Google warns...

Malicious code in vscode-websearchforcopilot (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 247d22ce4a478ffa11b9b10a31460cd13afeba961c80bf8f08a8557aef325569 Any computer that has this package installed or running should be considered...

Malicious code in graphlibcore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10441453f5296007b2b77ca9e580f3ce0a3ac50607cae82a6fe5858aaf1b0dee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Media: MediTech; vcodec: Fixed the VP8 stateless decoder’s “smatch” warning. A “smatch” static checker warning was also fixed in vdecvp8reqif.c. This issue causes the kernel to crash when fb is set to NULL...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: safesetid: Check the size of policy writes. syzbot attempts to write a buffer with a large size to a sysfs entry. The writing is handled by handlepolicyupdate, which triggers a warning in kmalloc. Check the size specified for the...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: perf/amlogic: Replace smpprocessorid with rawsmpprocessorid in mesonddrpmucreate The Amlogic DDR PMU driver’s mesonddrpmucreate function incorrectly uses smpprocessorid, which assumes disabled preemption. This leads to kernel...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: mptcp: always handle address removal under msk socket lock Syzkaller reported a lockdep splat in the PM control path: WARNING: CPU: 0 PID: 6693 at ./include/net/sock.h:1711 sockownedbyme include/net/sock.h:1711 inline WARNING:...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: PCI: brcmstb: Fixed the error handling path after a call to regulatorbulkget. If regulatorbulkget returns an error and no regulators are created, we need to set their number to zero. If we do not perform this action, and the PCIe...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: The code “openvswitch: switch to per-action label counting in conntrack” has been reverted. Currently, the ovsctsetlabels function is only called for confirmed conntrack entries within ovsctcommit. However, if the conntrack entry...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: clamping the maximum hashtable size to INTMAX The maximum size of the conntrack hashtable should be set to INTMAX. Otherwise, it is possible to encounter a WARNONONCE error in kvmallocnodenoprof when resizin...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fixed the WARNON!ctx message in freeevent for partial initialization. The call to getctxchildctx and the assignment of childevent-ctx are now performed immediately after the childevent is allocated. Ensure that...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: Wifi: iwlwifi: No warnings are displayed when there is a Firmware FW error. The iwltransreclaim function emits a warning if it is called when the FW is not active. However, if it is called during a pending restart, i.e., after...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: spi: cadence: Fixed an out-of-bounds array access in cdnsmrvlxspisetupclock If requestedclk 128, cdnsmrvlxspisetupclock iterates over the entire cdnsmrvlxspiclkdivlist array without exiting early, causing ‘i’ to go beyond the arr...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: idpf: fixed checksums set in idpfrxrsc idpfrxrsc uses skbtransportoffsetskb when the transport header is not yet set. This triggers the following warning in builds with CONFIGDEBUGNET=y:...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Ensure that the job pointer is set to NULL after the job completes. After a job is completed, the corresponding pointer in the device must be set to NULL. Failure to do this will trigger a warning when unloading the...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/core: Silence oversized kvmalloc warnings The syzkaller triggered an oversized kvmalloc warning. Silence this warning by adding GFPNOWARN. syzkaller log: WARNING: CPU: 7 PID: 518 at mm/util.c:665...