CVE-2025-21844

CVE-2025-21844 affects the Linux kernel SMB client path. The vulnerability could allow a NULL pointer dereference in the receive_encrypted_standard() path due to missing checks, which could crash the kernel. The fix adds checks for the next_buffer in receive_encrypted_standard() and validates the...

CVE-2024-45019

CVE-2024-45019 affects the Linux kernel component net/mlx5e. The issue involves the required use of the state lock during the tx timeout reporter; a prior change removed the lock to fix another issue, which could risk deadlocks. The patch restores the lock at a later point when calling mlx5e_safe...

CVE-2024-26916

In the Linux kernel, CVE-2024-26916 is tied to the drm/amd gfxoff handling during suspend. Reverting earlier gfxoff flush logic allowed GFXOFF control to be exercised again on suspend, which can trigger SDMA traffic and lead to system deadlocks when suspending from GNOME. The fix is the revert of...