kernel-livepatch-SLE15-SP6-RT_Update_16 (SUSE:Linux Enterprise Live Patching 15 SP6) — known CVEs & security advisories
Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Live Patching 15 SP6 package kernel-livepatch-SLE15-SP6-RT_Update_16, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVEs (200)
CVE-2025-39889 — CVSS 8.1 (high): In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: Check encryption key size on incoming connection This…
CVE-2025-38593 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()'…
CVE-2025-38595 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: xen: fix UAF in dmabuf_exp_from_pages() [dma_buf_fd() fixes; no…
CVE-2023-53274 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: mt8183: Add back SSPM related clocks This reverts commit…
CVE-2025-38574 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: pptp: ensure minimal skb length in pptp_xmit() Commit aabc6596ffb3…
CVE-2025-39701 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: ACPI: pfr_update: Fix the driver update version check The…
CVE-2023-53316 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: Free resources after unregistering them The DP component's…
CVE-2023-53257 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check S1G action frame size Before checking the action…
CVE-2023-53386 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix potential use-after-free when clear keys Similar to…
CVE-2025-39854 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: ice: fix NULL access of tx->in_use in ice_ll_ts_intr Recent versions of…
CVE-2023-53322 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Wait for io return on terminate rport System crash due…
CVE-2024-58240 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're…
CVE-2025-22022 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Apply the link chain quirk on NEC isoc endpoints Two clearly…
CVE-2023-53395 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer ACPICA commit…
CVE-2025-39730 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() The function…
CVE-2025-39863 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info…
CVE-2025-39738 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: btrfs: do not allow relocation of partially dropped subvolumes [BUG]…
CVE-2025-39873 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted…
CVE-2025-39743 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: jfs: truncate good inode pages when hard link is 0 The fileset value of…
CVE-2025-39849 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() If…
CVE-2023-31248 — CVSS 7.8 (high): Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain…
CVE-2023-53263 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/disp: fix use-after-free in error handling of…
CVE-2025-39766 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit…
CVE-2023-53426 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: xsk: Fix xsk_diag use-after-free error during socket cleanup Fix a…
CVE-2025-38456 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()…
CVE-2023-53331 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Check start of empty przs during init After commit…
CVE-2025-39783 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix configfs group list head handling Doing a list_del()…
CVE-2025-38488 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in crypt_message when using async…
CVE-2025-39790 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Detect events pointing to unexpected TREs When a remote…
CVE-2025-39797 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: xfrm: Duplicate SPI Handling The issue originates when Strongswan…
CVE-2023-53432 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: firewire: net: fix use after free in fwnet_finish_incoming_packet() The…
CVE-2025-38527 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifs_oplock_break A race condition…
CVE-2025-38533 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix the using of Rx buffer DMA The wx_rx_buffer structure…
CVE-2025-39810 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix memory corruption when FW resources change during ifdown…
CVE-2025-39823 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: KVM: x86: use array_index_nospec with indices that come from guest min…
CVE-2025-39824 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix UAF via HID_CLAIMED_INPUT validation After…
CVE-2025-39835 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xattr code ENODATA (aka…
CVE-2023-53338 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: lwt: Fix return values of BPF xmit ops BPF encap ops can return…
CVE-2025-38584 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: padata: Fix pd UAF once and for all There is a race condition/UAF in…
CVE-2023-53446 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free…
CVE-2025-39871 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Remove improper idxd_free The call to idxd_free()…
CVE-2023-53205 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: KVM: s390/diag: fix racy access of physical cpu number in diag 9c…
CVE-2023-53286 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Return the firmware result upon destroying QP/RQ Previously…
CVE-2023-53454 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Correct devm device reference for hidinput input_dev…
CVE-2023-53235 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: drm/tests: helpers: Avoid a driver uaf when using…
CVE-2023-53184 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: arm64/sme: Set new vector length before reallocating As part of fixing…
CVE-2023-53148 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: igb: Fix igb_down hung on surprise removal In a setup where a…
CVE-2025-38676 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Avoid stack buffer overflow from kernel cmdline While the…
CVE-2023-53187 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free of new block group that became unused If a…
CVE-2025-39861 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: Bluetooth: vhci: Prevent use-after-free by removing debugfs files early…
CVE-2023-53479 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: cxl/acpi: Fix a use-after-free in cxl_parse_cfmws() KASAN and KFENCE…
CVE-2023-53179 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for…
CVE-2025-38685 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix vmalloc out-of-bounds write in fast_imageblit This issue…
CVE-2025-39860 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() syzbot…
CVE-2023-53485 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev…
CVE-2023-53487 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas_flash: allow user copy to flash block cache objects With…
CVE-2023-53305 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free Fix potential use-after-free in…
CVE-2025-39870 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix double free in idxd_setup_wqs() The clean up in…
CVE-2025-39882 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: fix potential OF node use-after-free The…
CVE-2025-38697 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: jfs: upper bound check of tree index in dbAllocAG When computing the…
CVE-2023-53492 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: do not ignore genmask when looking up chain by id…
CVE-2023-53493 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: accel/qaic: tighten bounds checking in decode_message() Copy the bounds…
CVE-2025-38702 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: fbdev: fix potential buffer overflow in do_register_framebuffer() The…
CVE-2023-53495 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mvpp2_main: fix possible OOB write in…
CVE-2023-53192 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix nexthop hash size The nexthop code expects a 31 bit hash…
CVE-2023-53500 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: xfrm: fix slab-use-after-free in decode_session6 When the xfrm device…
CVE-2023-53504 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Properly order ib_device_unalloc() to avoid UAF…
CVE-2025-38722 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: habanalabs: fix UAF in export_dmabuf() As soon as we'd inserted a file…
CVE-2025-38724 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()…
CVE-2023-53311 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput…
CVE-2023-53507 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Unregister devlink params in case interface is down…
CVE-2025-38729 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 power domain descriptors, too UAC3 power…
CVE-2025-38730 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: io_uring/net: commit partial buffers on retry Ring provided buffers are…
CVE-2023-53508 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: ublk: fail to start device if queue setup is interrupted In…
CVE-2025-38734 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF on smcsk after smc_listen_out() BPF CI testing report…
CVE-2023-53510 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix handling of lrbp->cmd ufshcd_queuecommand() may be…
CVE-2023-53515 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: virtio-mmio: don't break lifecycle of vm_dev vm_dev has a separate…
CVE-2023-53516 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: macvlan: add forgotten nla_policy for IFLA_MACVLAN_BC_CUTOFF The…
CVE-2023-53215 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: sched/fair: Don't balance task to its current running CPU We've run…
CVE-2023-53374 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: fail SCO/ISO via hci_conn_failed if ACL gone early…
CVE-2025-39864 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix use-after-free in cmp_bss() Following bss_free()…
CVE-2023-53377 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: cifs: prevent use-after-free by freeing the cfile later In…
CVE-2025-39686 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: comedi: Make insn_rw_emulate_bits() do insn->n samples The…
CVE-2025-39691 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: fs/buffer: fix use-after-free when call bh_read() helper There's issue…
CVE-2023-53252 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync…
CVE-2023-53217 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: nubus: Partially revert proc_create_single_data() conversion The…
CVE-2025-39744 — CVSS 7.1 (high): In the Linux kernel, the following vulnerability has been resolved: rcu: Fix rcu_read_unlock() deadloop due to IRQ work During…
CVE-2025-39869 — CVSS 7.1 (high): In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: edma: Fix memory allocation size for queue_priority_map…
CVE-2025-38616 — CVSS 7.1 (high): In the Linux kernel, the following vulnerability has been resolved: tls: handle data disappearing from under the TLS ULP TLS expects that…
CVE-2025-38713 — CVSS 7.1 (high): In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() The…
CVE-2025-38714 — CVSS 7.1 (high): In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() The…
CVE-2025-38715 — CVSS 7.1 (high): In the Linux kernel, the following vulnerability has been resolved: hfs: fix slab-out-of-bounds in hfs_bnode_read() This patch introduces…
CVE-2023-53420 — CVSS 7.1 (high): In the Linux kernel, the following vulnerability has been resolved: ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()…
CVE-2025-39685 — CVSS 7.1 (high): In the Linux kernel, the following vulnerability has been resolved: comedi: pcl726: Prevent invalid irq number The reproducer passed in an…
CVE-2025-38556 — CVSS 7.1 (high): In the Linux kernel, the following vulnerability has been resolved: HID: core: Harden s32ton() against conversion to 0 bits Testing by the…
CVE-2025-39891 — CVSS 7.1 (high): In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Initialize the chan_stats array to zero The…
CVE-2023-53272 — CVSS 7.1 (high): In the Linux kernel, the following vulnerability has been resolved: net: ena: fix shift-out-of-bounds in exponential backoff The ENA…
CVE-2023-53238 — CVSS 7.1 (high): In the Linux kernel, the following vulnerability has been resolved: phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() The…
CVE-2023-53357 — CVSS 7.1 (high): In the Linux kernel, the following vulnerability has been resolved: md/raid10: check slab-out-of-bounds in md_bitmap_get_counter If we…
CVE-2025-39750 — CVSS 7.1 (high): In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Correct tid cleanup when tid setup fails Currently, if…
CVE-2023-53465 — CVSS 7.1 (high): In the Linux kernel, the following vulnerability has been resolved: soundwire: qcom: fix storing port config out-of-bounds The…
CVE-2023-53321 — CVSS 7.1 (high): In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: drop short frames While technically some control…
CVE-2025-39710 — CVSS 7.1 (high): In the Linux kernel, the following vulnerability has been resolved: media: venus: Add a check for packet size after reading from shared…
CVE-2025-38679 — CVSS 7.1 (high): In the Linux kernel, the following vulnerability has been resolved: media: venus: Fix OOB read due to missing payload bound check…
CVE-2025-38680 — CVSS 7.1 (high): In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()…
CVE-2025-39839 — CVSS 7.1 (high): In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix OOB read/write in network-coding decode…
CVE-2025-39757 — CVSS 7.1 (high): In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 cluster segment descriptors UAC3 class…
CVE-2025-39806 — CVSS 7.1 (high): In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() A…
CVE-2025-39719 — CVSS 7.1 (high): In the Linux kernel, the following vulnerability has been resolved: iio: imu: bno055: fix OOB access of hw_xlate array Fix a potential…
CVE-2025-38736 — CVSS 7.1 (high): In the Linux kernel, the following vulnerability has been resolved: net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization…
CVE-2025-39760 — CVSS 7.1 (high): In the Linux kernel, the following vulnerability has been resolved: usb: core: config: Prevent OOB read in SS endpoint companion parsing…
CVE-2025-39853 — CVSS 7.1 (high): In the Linux kernel, the following vulnerability has been resolved: i40e: Fix potential invalid access when MAC list is empty…
CVE-2025-39761 — CVSS 7.1 (high): In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Decrement TID on RX peer frag setup error handling…
CVE-2023-53222 — CVSS 7.1 (high): In the Linux kernel, the following vulnerability has been resolved: jfs: jfs_dmap: Validate db_l2nbperpage while mounting In jfs_dmap.c at…
CVE-2025-39682 — CVSS 7.1 (high): In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg()…
CVE-2023-53333 — CVSS 7.1 (high): In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: dccp: copy entire header to stack buffer, not…
CVE-2025-39749 — CVSS 7.0 (high): In the Linux kernel, the following vulnerability has been resolved: rcu: Protect ->defer_qs_iw_pending from data race On kernels built with…
CVE-2025-39826 — CVSS 7.0 (high): In the Linux kernel, the following vulnerability has been resolved: net: rose: convert 'use' field to refcount_t The 'use' field in struct…
CVE-2025-39759 — CVSS 7.0 (high): In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix race between quota disable and quota rescan ioctl…
CVE-2023-42753 — CVSS 7.0 (high): An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of…
CVE-2025-38419 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Cleanup acquired resources when…
CVE-2025-38465 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: netlink: Fix wraparounds of sk->sk_rmem_alloc. Netlink has this pattern…
CVE-2025-38466 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: perf: Revert to requiring CAP_SYS_ADMIN for uprobes Jann reports that…
CVE-2025-38514 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix oops due to non-existence of prealloc backlog struct If an…
CVE-2025-38526 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: ice: add NULL check in eswitch lag check The function…
CVE-2025-38544 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix bug due to prealloc collision When userspace is using…
CVE-2025-38590 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Remove skb secpath if xfrm state is not found Hardware…
CVE-2025-38597 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: vop2: fail cleanly if missing a primary plane for a…
CVE-2025-38605 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type()…
CVE-2025-38614 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: eventpoll: Fix semi-unbounded recursion Ensure that epoll instances can…
CVE-2025-38622 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: net: drop UFO packets in udp_rcv_segment() When sending a packet with…
CVE-2025-38623 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: PCI: pnv_php: Fix surprise plug detection and recovery The existing…
CVE-2025-38639 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_nfacct: don't assume acct name is null-terminated BUG…
CVE-2025-38640 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: bpf: Disable migration in nf_hook_run_bpf(). syzbot reported that the…
CVE-2025-38643 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()…
CVE-2025-38645 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Check device memory pointer before usage Add a NULL check…
CVE-2025-38659 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: gfs2: No more self recovery When a node withdraws and it turns out that…
CVE-2025-38660 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: [ceph] parse_longname(): strrchr() expects NUL-terminated string…
CVE-2025-38664 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() Add…
CVE-2025-38668 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix NULL dereference on unbind due to stale coupling…
CVE-2025-38678 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject duplicate device on updates A…
CVE-2025-38683 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Fix panic during namespace deletion with VF The existing…
CVE-2025-38684 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: use old 'nbands' while purging unused classes Shuang…
CVE-2025-38691 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix uninited ptr deref in block/scsi layout The error occurs on…
CVE-2025-38692 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: exfat: add cluster chain loop check for dir An infinite loop may occur…
CVE-2025-38693 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: w7090p: fix null-ptr-deref in…
CVE-2025-38694 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: dib7090p: fix null-ptr-deref in…
CVE-2025-38695 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport…
CVE-2025-38698 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: jfs: Regular file corruption check The reproducer builds a corrupted…
CVE-2025-38701 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr A syzbot…
CVE-2025-38705 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix null pointer access Writing a string without delimiters…
CVE-2025-38706 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()…
CVE-2025-38709 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: loop: Avoid updating block size under exclusive owner Syzbot came up…
CVE-2025-38712 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() When…
CVE-2025-38721 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: fix refcount leak on table dump There is a…
CVE-2025-38725 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: net: usb: asix_devices: add phy_mask for ax88772 mdio bus Without…
CVE-2025-38727 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: netlink: avoid infinite retry looping in netlink_unicast()…
CVE-2025-38732 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject: don't leak dst refcount for loopback packets…
CVE-2025-38735 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: gve: prevent ethtool ops after shutdown A crash can occur if an ethtool…
CVE-2025-39675 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session…
CVE-2025-39677 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix backlog accounting in qdisc_dequeue_internal This issue…
CVE-2025-39678 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL If…
CVE-2025-39679 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor(). When…
CVE-2025-39681 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper…
CVE-2025-39684 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: comedi: Fix use of uninitialized memory in do_insn_ioctl() and…
CVE-2025-39693 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid a NULL pointer dereference [WHY] Although…
CVE-2025-39694 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Fix SCCB present check Tracing code called by the SCLP…
CVE-2025-39703 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: net, hsr: reject HSR frame if skb can't hold tag Receiving HSR frame…
CVE-2025-39705 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix a Null pointer dereference vulnerability [Why] A…
CVE-2025-39706 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Destroy KFD debugfs after destroy KFD wq Since KFD proc…
CVE-2025-39709 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: media: venus: protect against spurious interrupts during probe Make…
CVE-2025-39714 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: media: usbtv: Lock resolution while streaming When an program is…
CVE-2025-39718 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Validate length in packet header before skb_put() When…
CVE-2025-39721 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: crypto: qat - flush misc workqueue during device shutdown Repeated…
CVE-2025-39724 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix panic due to PSLVERR When the PSLVERR_RESP_EN…
CVE-2025-39732 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask()…
CVE-2025-39739 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-qcom: Add SM6115 MDSS compatible Add the SM6115 MDSS…
CVE-2025-39742 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() The…
CVE-2025-39746 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: shutdown driver when hardware is unreliable In rare…
CVE-2025-39758 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages Ever since…
CVE-2025-39763 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: send SIGBUS to current task if synchronous memory error not…
CVE-2025-39764 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: remove refcounting in expectation dumpers Same…
CVE-2025-39770 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: net: gso: Forbid IPv6 TSO with extensions on devices with only…
CVE-2025-39772 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: drm/hisilicon/hibmc: fix the hibmc loaded failed bug When hibmc loaded…
CVE-2025-39773 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix soft lockup in br_multicast_query_expired() When set…
CVE-2025-39782 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: jbd2: prevent softlockup in jbd2_log_do_checkpoint() Both…
CVE-2025-39787 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: soc: qcom: mdt_loader: Ensure we don't read past the ELF header When…
CVE-2025-39798 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: NFS: Fix the setting of capabilities when automounting a new filesystem…
CVE-2025-39800 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: btrfs: abort transaction on unexpected eb generation at…
CVE-2025-39801 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Remove WARN_ON for device endpoint command timeouts This…
CVE-2025-39808 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: HID: hid-ntrig: fix unable to handle page fault in…
CVE-2025-39827 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: net: rose: include node references in rose_neigh refcount Current…
CVE-2025-39832 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix lockdep assertion on sync reset unload event Fix lockdep…
CVE-2025-39833 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: mISDN: hfcpci: Fix warning when deleting uninitialized timer With…
CVE-2025-40300 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: x86/vmscape: Add conditional IBPB mitigation VMSCAPE is a vulnerability…
CVE-2023-3772 — CVSS 5.5 (medium): A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with…
CVE-2023-53147 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: xfrm: add NULL check in xfrm_update_ae_params Normally, x->replay_esn…
CVE-2023-53150 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Pointer may be dereferenced Klocwork tool reported…
CVE-2023-53151 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: md/raid10: prevent soft lockup while flush writes Currently, there is…
CVE-2023-53152 — CVSS 5.5 (medium): In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix calltrace warning in amddrm_buddy_fini The following…