CVE-2025-40054 f2fs: fix UAF issue in f2fs_merge_page_bio()

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix UAF issue in f2fsmergepagebio As JY reported in bugzilla 1, Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 pc : 0xffffffe51d249484 f2fsiscpguaranteed+0x70/0x98 lr : 0xffffffe51d24ad...

EUVD-2025-36474

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix UAF issue in f2fsmergepagebio As JY reported in bugzilla 1, Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 pc : 0xffffffe51d249484 f2fsiscpguaranteed+0x70/0x98 lr : 0xffffffe51d24ad...

CVE-2025-40054

CVE-2025-40054: Linux kernel f2fs UAF in f2fs_merge_page_bio() due to race between commit into internal ipu cache and use of encrypted_page; can lead to NULL pointer dereference in f2fs_is_cp_guaranteed during writeback. Patches fix the UAF in f2fs_merge_page_bio() (see commits in stable kernel t...

CVE-2025-40054 f2fs: fix UAF issue in f2fs_merge_page_bio()

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix UAF issue in f2fsmergepagebio As JY reported in bugzilla 1, Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 pc : 0xffffffe51d249484 f2fsiscpguaranteed+0x70/0x98 lr : 0xffffffe51d24ad...

SUSE CVE-2021-47637

In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix deadlock in concurrent rename whiteout and inode writeback Following hung tasks: 77.028764 task:kworker/u8:4 state:D stack: 0 pid: 132 77.028820 Call Trace: 77.029027 schedule+0x8c/0x1b0 77.029067 mutexlock+0x50/0x60...

PT-2025-49435

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the btrfs file system related to handling dirty metadata when the file system encounters errors. Specifically, if btrfs experiences an error, the...

SUSE-SU-2025:3716-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49980: USB: gadget: fix use-after-free read in usbudcuevent bsc1245110. - CVE-2022-50233: Bluetooth: eir: Fix using strlen with hdev-devname,shortname...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987529)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987529 advisory. In the Linux kernel, the following vulnerability has been resolved: mm, thp: bail out early in collapsefile for writeback page Currently collapsefile does not...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987545)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987545 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix data corruption after conversion from inline format Commit 6dbf7bb55598 fs: Don't...

Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2025-1223)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1223 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix use-after-free in stateshow CVE-2025-39877 In the Linux kernel, the following vulnerability has been...

Unbreakable Enterprise kernel security update

5.15.0-313.189.5.1 - afunix: Don't leave consecutive consumed OOB skbs. Kuniyuki Iwashima Orabug: 38528187 CVE-2025-38236 - fs: writeback: fix use-after-free in markinodedirty Jiufei Xue Orabug: 38528183 CVE-2025-39866 - rtnetlink: Fix L3 stats disable handling in rtnloffloadxstatsfill Vijayendra...

s390/uv: Don't call folio_wait_writeback() without a folio reference

...

PT-2026-2504

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0 Description The Linux kernel contains a flaw within the f2fs file system related to handling compression contexts during writeback operations. A race condition can occur when a file is being fsynced, its...

CLSA-2025-1759866837 kernel: Fix of 44 CVEs

mm: zswap: fix missing folio cleanup in writeback race path CVE-2024-26832 - mm: fix zswap writeback race condition CVE-2023-53178 - dm array: fix releasing a faulty array block twice in dmarraycursorend CVE-2024-57929 - drm/dpmst: Fix MST sideband message body length check CVE-2024-56616 - gpio:...

EUVD-2017-17562

Malware in sbrugna...

EUVD-2017-18623

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986741)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986741 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: make sure wait for page writeback in memoryfailure Our syzkaller trigger the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986346)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986346 advisory. In the Linux kernel, the following vulnerability has been resolved: Revert mm/writeback: fix possible divide-by-zero in wbdirtylimits, again Patch series mm: Avoid...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986827)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986827 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix deadlock in nilfscountfreeblocks A semaphore deadlock can occur if nilfsgetblock...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-420717)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-420717 advisory. In the Linux kernel, the following vulnerability has been resolved: quota: flush quotareleasework upon quota writeback One of the paths quota writeback is called fr...