CVE-2025-40164

In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix using smpprocessorid in preemptible code warnings Syzbot reported the following warning: BUG: using smpprocessorid in preemptible 00000000 code: dhcpcd/2879 caller is usbnetskbreturn+0x74/0x490...

CVE-2025-40163 sched/deadline: Stop dl_server before CPU goes offline

In the Linux kernel, the following vulnerability has been resolved: sched/deadline: Stop dlserver before CPU goes offline IBM CI tool reported kernel warning1 when running a CPU removal operation through drmgr2. i.e "drmgr -c cpu -r -q 1" WARNING: CPU: 0 PID: 0 at kernel/sched/cpudeadline.c:219...

CVE-2025-40125 blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx

In the Linux kernel, the following vulnerability has been resolved: blk-mq: check kobject stateinsysfs before deleting in blkmqunregisterhctx In blkmqupdatenrhwqueues the return value of blkmqsysfsregisterhctxs is not checked. If sysfs creation for hctx fails, later changing the number of hwqueue...

EUVD-2025-112978

Malicious code in halley-cressida-gacrux-hyperion npm...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990869)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990869 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvlan: Dont Use skb-sk in ipvlanprocessv4,6outbound Raw packet from PFPACKET socket ontop of an...

CVE-2025-40140: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: usb: Remove disruptive netifwakequeue in rtl8150setmulticast syzbot reported WARNING in rtl8150startxmit/usbsubmiturb. This is the sequence of events that leads to the warning: rtl8150startxmit netifstopqueue;...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an unregistered virtual function that retains interrupts, which could result in an interrupt release warning...

CVE-2025-40163: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sched/deadline: Stop dlserver before CPU goes offline IBM CI tool reported kernel warning1 when running a CPU removal operation through drmgr2. i.e "drmgr -c cpu -r -q 1" WARNING: CPU: 0 PID: 0 at kernel/sched/cpudeadline.c:219...

CVE-2025-40136: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/qm - request reserved interrupt for virtual function The device interrupt vector 3 is an error interrupt for physical function and a reserved interrupt for virtual function. However, the driver has not registere...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990840)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990840 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: ensure the fwinfo is not null before using it This resolves the dereference null retu...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990887)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990887 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Fix memcpy field-spanning write warning in mwifiexcmd80211scanext Replace...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990765)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990765 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: imx: Add missing .thawnoirq hook The following warning is seen with non-console UART...

PT-2025-52899

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The bpf skb check mtu helper in the Linux kernel does not properly validate the skb-transport header, potentially leading to issues when the BPF MTU CHK SEGS flag is used. Specifically,...

CVE-2025-40125: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: blk-mq: check kobject stateinsysfs before deleting in blkmqunregisterhctx In blkmqupdatenrhwqueues the return value of blkmqsysfsregisterhctxs is not checked. If sysfs creation for hctx fails, later changing the number of hwqueue...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990744)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990744 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: core: Remove the /proc/scsi/$procname directory earlier Remove the /proc/scsi/$procname...

EUVD-2025-103096

Malicious code in patria-gorengan8-riris npm...

EUVD-2025-102009

Malicious code in surya-dradag66-riris npm...

SUSE-SU-2025:4057-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38008: mm/pagealloc: fix race condition in unaccepted memory handling bsc1244939. - CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister...

EUVD-2025-87395

Malicious code in zul-dradag47-miaww npm...

Samsung zero-day lets attackers take over your phone

A critical vulnerability has put Samsung mobile device owners at risk of sophisticated cyberattacks. On November 10, 2025, the US Cybersecurity and Infrastructure Security Agency CISA added a vulnerability, tracked as CVE-2025-21042, to its Known Exploited Vulnerabilities KEV catalog. The KEV...