CVE-2025-22120

CVE-2025-22120 affects the Linux kernel ext4: in ext4_setattr(), a jump to the right label out_mmap_sem may occur. If ext4_inode_attach_jinode() fails, filemap_invalidate_unlock() may not be called to unlock mapping->invalidate_lock, leading to a hung task (as shown by the given EXT4-fs error ...

CVE-2025-37984

The CVE-2025-37984 entry documents a Linux kernel fix for an integer overflow in DIV_ROUND_UP() within ECDSA paths. The root cause is that DIV_ROUND_UP() could overflow when a crypto ->key_size() callback returns an unusually large value. The proposed mitigation introduces a generic DIV_ROUND_...

CVE-2025-37784

CVE-2025-37784 affects the Linux kernel ICSS IEP driver (net: ti: icss-iep). The vulnerability was caused by a NULL pointer dereference when disabling PPS/PEROUT during icss_iep_exit(), due to lingering perout state referenced by icss_iep_perout_enable_hw. The fix updates icss_iep_perout_enable_h...

CVE-2024-40917

CVE-2024-40917 affects the Linux kernel memory management (memblock) related to NUMA/node handling. The issue stems from memblock_validate_numa_coverage() allowing a NUMA_NO_NODE condition and memblock_alloc_range_nid() warning about MAX_NUMNODES, leading to a NULL dereference in memmap_init() wh...