CVE-2024-42133

CVE-2024-42133 : Linux kernel Bluetooth stack fix. The vulnerability arises from not filtering excessively large handle values in BIG, risking ida handles being released incorrectly during hci_conn_cleanup. The fix adds filtering in hci_le_big_sync_established_evt to ignore handles outside valid ...

CVE-2024-42132

The connected MiracleLinux advisory confirms CVE-2024-42132 affecting Linux kernel Bluetooth HCI code. Root cause: hci_le_big_sync_established_evt() could pass a handle larger than HCI_CONN_HANDLE_MAX, leading to freeing an unallocated handle and a warning in hci_conn_del(). The fix adds an upper...

CVE-2024-42141

Technical details for CVE-2024-42141 are not provided in the supplied documents; public exploitability, affected products, and fixes are not specified here. Monitor for updates.

CVE-2025-23129

CVE-2025-23129: In the Linux kernel, the ath11k PCI driver (ath11k_pci) could log a warning when error paths freed a shared IRQ without clearing the IRQ affinity hint. The root cause was setting the IRQ affinity hint after irq vector allocation in ath11k_pci_alloc_msi(), which caused free_irq in ...

CVE-2025-71141

CVE-2025-71141 (Linux kernel) affects the DRM tilcdc path. The root cause was that drm_kms_helper_poll_fini() and drm_atomic_helper_shutdown() were invoked unconditionally in tilcdc_fini(), even when the device failed to register, causing probe-time warnings. The fix rewrites the failed probe cle...

CVE-2025-71119

CVE-2025-71119 affects the Linux kernel. The vulnerability arises in powerpc/kexec where, if SMT is disabled or in partial SMT state, loading a new kernel image for kexec and rebooting can trigger a warning (Waking offline cpu) because add_cpu() fails when cpu_bootable() rejects CPUs due to cpu_s...