CVE-2025-21937

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name()

Add check for the return value of mgmt_alloc_skb() in mgmt_remote_name() to prevent null pointer dereference.

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name() Add check for the return value of mgmt_alloc_skb() in mgmt_remote_name() to prevent null pointer dereference.

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

pfifo_tail_enqueue: Drop new packet when sch->limit == 0

Expected behaviour: In case we reach scheduler's limit, pfifo_tail_enqueue() will drop a packet in scheduler's queue and decrease scheduler's qlen by one. Then, pfifo_tail_enqueue() enqueue new packet and increase scheduler's qlen by one. Finally, pfifo_tail_enqueue() return NET_XMIT_CN status code.

Weird behaviour: In case we set sch->limit == 0 and trigger pfifo_tail_enqueue() on a scheduler that has no packet, the 'drop a packet' step will do nothing. This means the scheduler's qlen still has value equal 0. Then, we continue to enqueue new packet and increase scheduler's qlen by one. In summary, we can leverage pfifo_tail_enqueue() to increase qlen by one and return NET_XMIT_CN status code.

The problem is: Let's say we have two qdiscs: Qdisc_A and Qdisc_B.

• Qdisc_A's type must have '->graft()' function to create parent/child relationship. Let's say Qdisc_A's type is hfsc. Enqueue packet to this qdisc will trigger hfsc_enqueue.
• Qdisc_B's type is pfifo_head_drop. Enqueue packet to this qdisc will trigger pfifo_tail_enqueue.
• Qdisc_B is configured to have sch->limit == 0.
• Qdisc_A is configured to route the enqueued's packet to Qdisc_B.

Enqueue packet through Qdisc_A will lead to:

• hfsc_enqueue(Qdisc_A) -> pfifo_tail_enqueue(Qdisc_B)
• Qdisc_B->q.qlen += 1
• pfifo_tail_enqueue() return NET_XMIT_CN
• hfsc_enqueue() check for NET_XMIT_SUCCESS and see NET_XMIT_CN => hfsc_enqueue() don't increase qlen of Qdisc_A.

The whole process lead to a situation where Qdisc_A->q.qlen == 0 and Qdisc_B->q.qlen == 1. Replace 'hfsc' with other type (for example: 'drr') still lead to the same problem. This violate the design where parent's qlen should equal to the sum of its childrens'qlen.

Bug impact: This issue can be used for user->kernel privilege escalation when it is reachable.(CVE-2025-21702)

In the Linux kernel, the following vulnerability has been resolved:

mptcp: always handle address removal under msk socket lock

Syzkaller reported a lockdep splat in the PM control path:

WARNING: CPU: 0 PID: 6693 at ./include/net/sock.h:1711 sock_owned_by_me include/net/sock.h:1711 [inline] WARNING: CPU: 0 PID: 6693 at ./include/net/sock.h:1711 msk_owned_by_me net/mptcp/protocol.h:363 [inline] WARNING: CPU: 0 PID: 6693 at ./include/net/sock.h:1711 mptcp_pm_nl_addr_send_ack+0x57c/0x610 net/mptcp/pm_netlink.c:788 Modules linked in: CPU: 0 UID: 0 PID: 6693 Comm: syz.0.205 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 Hardware name: Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 RIP: 0010:sock_owned_by_me include/net/sock.h:1711 [inline] RIP: 0010:msk_owned_by_me net/mptcp/protocol.h:363 [inline] RIP: 0010:mptcp_pm_nl_addr_send_ack+0x57c/0x610 net/mptcp/pm_netlink.c:788 Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 ca 7b d3 f5 eb b9 e8 c3 7b d3 f5 90 0f 0b 90 e9 dd fb ff ff e8 b5 7b d3 f5 90 <0f> 0b 90 e9 3e fb ff ff 44 89 f1 80 e1 07 38 c1 0f 8c eb fb ff ff RSP: 0000:ffffc900034f6f60 EFLAGS: 00010283 RAX: ffffffff8bee3c2b RBX: 0000000000000001 RCX: 0000000000080000 RDX: ffffc90004d42000 RSI: 000000000000a407 RDI: 000000000000a408 RBP: ffffc900034f7030 R08: ffffffff8bee37f6 R09: 0100000000000000 R10: dffffc0000000000 R11: ffffed100bcc62e4 R12: ffff88805e6316e0 R13: ffff88805e630c00 R14: dffffc0000000000 R15: ffff88805e630c00 FS: 00007f7e9a7e96c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2fd18ff8 CR3: 0000000032c24000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3:…

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

pfifo_tail_enqueue: Drop new packet when sch->limit == 0

Expected behaviour: In case we reach scheduler's limit, pfifo_tail_enqueue() will drop a packet in scheduler's queue and decrease scheduler's qlen by one. Then, pfifo_tail_enqueue() enqueue new packet and increase scheduler's qlen by one. Finally, pfifo_tail_enqueue() return NET_XMIT_CN status code.

Weird behaviour: In case we set sch->limit == 0 and trigger pfifo_tail_enqueue() on a scheduler that has no packet, the 'drop a packet' step will do nothing. This means the scheduler's qlen still has value equal 0. Then, we continue to enqueue new packet and increase scheduler's qlen by one. In summary, we can leverage pfifo_tail_enqueue() to increase qlen by one and return NET_XMIT_CN status code.

The problem is: Let's say we have two qdiscs: Qdisc_A and Qdisc_B.

• Qdisc_A's type must have '->graft()' function to create parent/child relationship. Let's say Qdisc_A's type is hfsc. Enqueue packet to this qdisc will trigger hfsc_enqueue.
• Qdisc_B's type is pfifo_head_drop. Enqueue packet to this qdisc will trigger pfifo_tail_enqueue.
• Qdisc_B is configured to have sch->limit == 0.
• Qdisc_A is configured to route the enqueued's packet to Qdisc_B.

Enqueue packet through Qdisc_A will lead to:

• hfsc_enqueue(Qdisc_A) -> pfifo_tail_enqueue(Qdisc_B)
• Qdisc_B->q.qlen += 1
• pfifo_tail_enqueue() return NET_XMIT_CN
• hfsc_enqueue() check for NET_XMIT_SUCCESS and see NET_XMIT_CN => hfsc_enqueue() don't increase qlen of Qdisc_A.

The whole process lead to a situation where Qdisc_A->q.qlen == 0 and Qdisc_B->q.qlen == 1. Replace 'hfsc' with other type (for example: 'drr') still lead to the same problem. This violate the design where parent's qlen should equal to the sum of its childrens'qlen.

Bug impact: This issue can be used for user->kernel privilege escalation when it is reachable.(CVE-2025-21702)

In the Linux kernel, the following vulnerability has been resolved:

netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()

qdisc_tree_reduce_backlog() notifies parent qdisc only if child qdisc becomes empty, therefore we need to reduce the backlog of the child qdisc before calling it. Otherwise it would miss the opportunity to call cops->qlen_notify(), in the case of DRR, it resulted in UAF since DRR uses ->qlen_notify() to maintain its active list.(CVE-2025-21703)

In the Linux kernel, the following vulnerability has been resolved:

mptcp: always handle address removal under msk socket lock

Syzkaller reported a lockdep splat in the PM control path:

WARNING: CPU: 0 PID: 6693 at ./include/net/sock.h:1711 sock_owned_by_me include/net/sock.h:1711 [inline] WARNING: CPU: 0 PID: 6693 at ./include/net/sock.h:1711 msk_owned_by_me net/mptcp/protocol.h:363 [inline] WARNING: CPU: 0 PID: 6693 at ./include/net/sock.h:1711 mptcp_pm_nl_addr_send_ack+0x57c/0x610 net/mptcp/pm_netlink.c:788 Modules linked in: CPU: 0 UID: 0 PID: 6693 Comm: syz.0.205 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 Hardware name: Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 RIP: 0010:sock_owned_by_me include/net/sock.h:1711 [inline] RIP: 0010:msk_owned_by_me net/mptcp/protocol.h:363 [inline] RIP: 0010:mptcp_pm_nl_addr_send_ack+0x57c/0x610 net/mptcp/pm_netlink.c:788 Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 ca 7b d3 f5 eb b9 e8 c3 7b d3 f5 90 0f 0b 90 e9 dd fb ff ff e8 b5 7b d3 f5 90 <0f> 0b 90 e9 3e fb ff ff 44 89 f1 80 e1 07 38 c1 0f 8c eb fb ff ff RSP: 0000:ffffc900034f6f60 EFLAGS: 00010283 RAX: ffffffff8bee3c2b RBX: 0000000000000001 RCX: 0000000000080000 RDX: ffffc90004d42000 RSI: 000000000000a407 RDI:…

Root has patched CVE-2025-21937 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name() Add check for the return value of mgmt_alloc_skb() in mgmt_remote_name() to prevent null pointer dereference.

• KVM: x86: Check for invalid/obsolete root after making MMU pages available {CVE-2026-64561}
• KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level {CVE-2026-63807}
• Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak {CVE-2025-40035}
• thunderbolt: Limit XDomain response copy to actual frame size {CVE-2026-53146}
• drm/gud: Fix UBSAN warning {CVE-2022-50628}
• wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads {CVE-2022-49740}
• scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests {CVE-2023-54108}
• fs: udf: fix OOB read in lengthAllocDescs handling {CVE-2025-40044}
• tipc: Fix use-after-free in tipc_mon_reinit_self(). {CVE-2025-40280}
• isofs: Fix out of bound access for corrupted isofs image {CVE-2021-47478}
• pppoe: drop PFC frames {CVE-2026-53003}
• nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free {CVE-2026-46304}
• net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery {CVE-2026-43466}
• scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails {CVE-2026-45997}
• irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions {CVE-2022-49716}
• drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}
• can: dev: can_set_termination(): allow sleeping GPIOs {CVE-2024-56625}
• cxl/mem: Fix shutdown order {CVE-2023-52849}
• pinctrl: check the return value of pinmux_ops::get_function_name() {CVE-2025-40030}
• usb: usbtmc: Flush anchored URBs in usbtmc_release {CVE-2026-31758}
• RDMA/siw: Fix potential NULL pointer dereference in header processing {CVE-2026-23242}
• ASoC: wm_adsp: Fix NULL dereference when removing firmware controls {CVE-2026-53350}
• net: bcmgenet: fix off-by-one in bcmgenet_put_txcb {CVE-2026-53088}
• HID: multitouch: Check to ensure report responses match the request {CVE-2026-43047}
• can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak {CVE-2026-23058}
• firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle {CVE-2023-53250}
• usb: storage: Fix memory leak in USB bulk transport {CVE-2025-68288}
• wifi: rtw88: check for PCI upstream bridge existence {CVE-2026-46092}
• crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed {CVE-2026-31697}
• scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts() {CVE-2022-48650}
• HID: apple: avoid memory leak in apple_report_fixup() {CVE-2026-31520}
• HID: magicmouse: avoid memory leak in magicmouse_report_fixup() {CVE-2026-31522}
• scsi: qla2xxx: Avoid fcport pointer dereference {CVE-2023-53603}
• RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() {CVE-2026-46178}
• scsi: mpi3mr: Add NULL checks when resetting request and reply queues {CVE-2026-43473}
• HID: roccat: fix use-after-free in roccat_report_event {CVE-2026-43111}
• tap: free page on error paths in tap_get_user_xdp() {CVE-2026-46320}
• net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode {CVE-2026-43180}
• usb: xhci: Fix memory leak in xhci_disable_slot() {CVE-2026-43432}
• PCI: Fix reset_method_store() memory leak {CVE-2024-56745}
• rbd: fix null-ptr-deref when device_add_disk() fails {CVE-2026-46079}
• net: stmmac: fix integer underflow in chain mode {CVE-2026-31649}
• be2net: pass wrb_params in case of OS2BMC {CVE-2025-40264}
• thunderbolt: Validate XDomain request packet size before type cast {CVE-2026-53147}
• Input: uinput - fix circular locking dependency with ff-core {CVE-2026-31667}
• usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency {CVE-2023-52855}
• nbd: defer config put in recv_work {CVE-2025-68372}
• net: hns3: using the num_tqps in the vf driver to apply for resources {CVE-2025-71064}
• serial: imx: fix tx statemachine deadlock {CVE-2023-52456}
• bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave() {CVE-2024-47734}
• dm-thin: fix metadata refcount underflow {CVE-2026-46107}
• net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering…

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
• CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
• CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
• CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
• CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
• CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
• CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
• CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510).
• CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
• CVE-2025-21696: mm: clear uffd-wp PTE/PMD state on mremap() (bsc#1237111).
• CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
• CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
• CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
• CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
• CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
• CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
• CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
• CVE-2025-21808: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742).
• CVE-2025-21812: ax25: rcu protect dev->ax25_ptr (bsc#1238471).
• CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (bsc#1239108).
• CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
• CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
• CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
• CVE-2025-21867: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181).
• CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
• CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
• CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
• CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
• CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
• CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
• CVE-2025-21894: net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC (bsc#1240581).
• CVE-2025-21895: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (bsc#1240585).
• CVE-2025-21904: caif_virtio: fix wrong pointer check in cfv_probe() (bsc#1240576).
• CVE-2025-21906: wifi: iwlwifi: mvm: clean up ROC on failure (bsc#1240587).
• CVE-2025-21908: NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (bsc#1240600).
• CVE-2025-21913: x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (bsc#1240591).
• CVE-2025-21922: ppp: Fix KMSAN uninit-value warning with bpf (bsc#1240639).
• CVE-2025-21924: net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error (bsc#1240720). -…

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-27415: netfilter: bridge: confirm multicast packets before passing them up the stack (bsc#1224757).
• CVE-2024-28956: Intel CPU: Indirect Target Selection (ITS) (bsc#1242006).
• CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
• CVE-2024-46763: fou: Fix null-ptr-deref in GRO (bsc#1230764).
• CVE-2024-50038: netfilter: xtables: avoid NFPROTO_UNSPEC where needed (bsc#1231910).
• CVE-2024-50162: bpf: devmap: provide rxq after redirect (bsc#1233075).
• CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
• CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
• CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
• CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
• CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
• CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510).
• CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
• CVE-2025-21696: mm: clear uffd-wp PTE/PMD state on mremap() (bsc#1237111).
• CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
• CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
• CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
• CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
• CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
• CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
• CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
• CVE-2025-21808: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742).
• CVE-2025-21812: ax25: rcu protect dev->ax25_ptr (bsc#1238471).
• CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (bsc#1239108).
• CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
• CVE-2025-21854: sockmap, vsock: For connectible sockets allow only connected (bsc#1239470).
• CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
• CVE-2025-21867: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181).
• CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
• CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
• CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
• CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
• CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
• CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
• CVE-2025-21894: net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC (bsc#1240581).
• CVE-2025-21895: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (bsc#1240585).
• CVE-2025-21904: caif_virtio: fix wrong pointer check in cfv_probe() (bsc#1240576).
• CVE-2025-21906: wifi: iwlwifi: mvm: clean up ROC on failure (bsc#1240587).
• CVE-2025-21908: NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (bsc#1240600).
• CVE-2025-21913: x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (bsc#1240591).
• CVE-2025-21922: ppp: Fix KMSAN uninit-value warning with bpf (bsc#1240639).…

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
• CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
• CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-43869: perf: Fix hang while freeing sigtrap event (bsc#1229491).
• CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
• CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
• CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
• CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
• CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
• CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
• CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
• CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
• CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
• CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
• CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086). -…

The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
• CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
• CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49570: drm/xe/tracing: Fix a potential TP_printk UAF (bsc#1238782).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
• CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
• CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
• CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
• CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
• CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
• CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
• CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
• CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
• CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
• CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
• CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
• CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
• CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
• CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
• CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
• CVE-2024-58074: drm/i915: Grab intel_display from the encoder to avoid potential (bsc#1238972).
• CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
• CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510). -…

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
• CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
• CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
• CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
• CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
• CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
• CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
• CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
• CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
• CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
• CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510).
• CVE-2025-21648: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (bsc#1236142).
• CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
• CVE-2025-21696: mm: clear uffd-wp PTE/PMD state on mremap() (bsc#1237111).
• CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
• CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
• CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
• CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
• CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
• CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
• CVE-2025-21787: team: better TEAM_OPTION_TYPE_STRING validation (bsc#1238774).
• CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
• CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
• CVE-2025-21808: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742).
• CVE-2025-21812: ax25: rcu protect dev->ax25_ptr (bsc#1238471).
• CVE-2025-21814: ptp: Ensure info->enable callback is always set (bsc#1238473).
• CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (bsc#1239108).
• CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
• CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
• CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
• CVE-2025-21867: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181).
• CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
• CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
• CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
• CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
• CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
• CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
• CVE-2025-21894: net: enetc: VFs do not…

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
• CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
• CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49570: drm/xe/tracing: Fix a potential TP_printk UAF (bsc#1238782).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
• CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
• CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
• CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
• CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
• CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
• CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
• CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
• CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
• CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
• CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
• CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
• CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
• CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
• CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
• CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
• CVE-2024-58074: drm/i915: Grab intel_display from the encoder to avoid potential (bsc#1238972).
• CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
• CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510). -…

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
• CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
• CVE-2024-35910: kABI fix for tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
• CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
• CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
• CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
• CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
• CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
• CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
• CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free…

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
• CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
• CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
• CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
• CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
• CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
• CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
• CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
• CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
• CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
• CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
• CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
• CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
• CVE-2025-21894: net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC (bsc#1240581).
• CVE-2025-21895: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (bsc#1240585).
• CVE-2025-21906: wifi: iwlwifi: mvm: clean up ROC on failure (bsc#1240587).
• CVE-2025-21908: NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (bsc#1240600).
• CVE-2025-21913: x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (bsc#1240591).
• CVE-2025-21922: ppp: Fix KMSAN uninit-value warning with bpf (bsc#1240639).
• CVE-2025-21924: net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error (bsc#1240720).
• CVE-2025-21957: scsi: qla1280: Fix kernel oops when debug level > 2 (bsc#1240742).
• CVE-2025-21960: eth: bnxt: do not update checksum in bnxt_xdp_build_skb() (bsc#1240815).
• CVE-2025-21961: eth: bnxt: fix truesize for mb-xdp-pass case (bsc#1240816).
• CVE-2025-21969: kABI workaround for l2cap_conn changes (bsc#1240784).
• CVE-2025-21970: net/mlx5: Bridge, fix the crash caused by LAG state check (bsc#1240819).
• CVE-2025-21972: net: mctp: unshare packets when reassembling (bsc#1240813).
• CVE-2025-21975: net/mlx5: handle errors in mlx5_chains_create_table() (bsc#1240812).
• CVE-2025-21981: ice: fix memory leak in aRFS after reset (bsc#1240612).
• CVE-2025-21991: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (bsc#1240795).
• CVE-2025-21993: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (bsc#1240797).
• CVE-2025-2312: CIFS: New mount option for cifs.upcall namespace resolution (bsc#1239684).

The following non-security bugs were fixed:

• ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP (stable-fixes).
• ACPI: x86: Extend Lenovo Yoga Tab 3 quirk with skip GPIO event-handlers (git-fixes).
• ALSA: hda/realtek: Fix built-in mic breakage on ASUS VivoBook X515JA (git-fixes).
• ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model (git-fixes).
• ASoC: imx-card: Add NULL check in imx_card_probe() (git-fixes).
• ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns (git-fixes).
• ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment (git-fixes).
• ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path (git-fixes).
• HID:…

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
• CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
• CVE-2024-35910: kABI fix for tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
• CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
• CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
• CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
• CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
• CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
• CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
• CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free…

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
• CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
• CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
• CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
• CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
• CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
• CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
• CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
• CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
• CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
• CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
• CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
• CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
• CVE-2025-21894: net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC (bsc#1240581).
• CVE-2025-21895: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (bsc#1240585).
• CVE-2025-21906: wifi: iwlwifi: mvm: clean up ROC on failure (bsc#1240587).
• CVE-2025-21908: NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (bsc#1240600).
• CVE-2025-21913: x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (bsc#1240591).
• CVE-2025-21922: ppp: Fix KMSAN uninit-value warning with bpf (bsc#1240639).
• CVE-2025-21924: net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error (bsc#1240720).
• CVE-2025-21957: scsi: qla1280: Fix kernel oops when debug level > 2 (bsc#1240742).
• CVE-2025-21960: eth: bnxt: do not update checksum in bnxt_xdp_build_skb() (bsc#1240815).
• CVE-2025-21961: eth: bnxt: fix truesize for mb-xdp-pass case (bsc#1240816).
• CVE-2025-21969: kABI workaround for l2cap_conn changes (bsc#1240784).
• CVE-2025-21970: net/mlx5: Bridge, fix the crash caused by LAG state check (bsc#1240819).
• CVE-2025-21972: net: mctp: unshare packets when reassembling (bsc#1240813).
• CVE-2025-21975: net/mlx5: handle errors in mlx5_chains_create_table() (bsc#1240812).
• CVE-2025-21981: ice: fix memory leak in aRFS after reset (bsc#1240612).
• CVE-2025-21991: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (bsc#1240795).
• CVE-2025-21993: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (bsc#1240797).
• CVE-2025-2312: CIFS: New mount option for cifs.upcall namespace resolution (bsc#1239684).

The following non-security bugs were fixed:

• ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP (stable-fixes).
• ACPI: x86: Extend Lenovo Yoga Tab 3 quirk with skip GPIO event-handlers (git-fixes).
• ALSA: hda/realtek: Fix built-in mic breakage on ASUS VivoBook X515JA (git-fixes).
• ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model (git-fixes).
• ASoC: imx-card: Add NULL check in imx_card_probe() (git-fixes).
• ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns (git-fixes).
• ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment (git-fixes).
• ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path (git-fixes).
• HID:…

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Compute Acceleration Framework;
• ACPI drivers;
• Ublk userspace block driver;
• Compressed RAM block device driver;
• Bus devices;
• AMD CDX bus driver;
• Clock framework and drivers;
• DMA engine subsystem;
• DPLL subsystem;
• Qualcomm firmware drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• IIO subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• NVME drivers;
• PCI subsystem;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• VideoCore services drivers;
• Thermal drivers;
• USB DSL drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Virtio Host (VHOST) subsystem;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• W1 Dallas's 1-wire bus driver;
• 9P distributed file system;
• File systems infrastructure;
• Ext4 file system;
• JFS file system;
• Network file systems library;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• Proc file system;
• SMB network file system;
• Memory Management;
• Key Management;
• Memory management;
• Scheduler infrastructure;
• UProbes tracing;
• RDMA verbs API;
• SoC audio core drivers;
• BPF subsystem;
• Perf events;
• Kernel fork() syscall;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Netfilter;
• Network traffic control;
• SCTP protocol;
• Switch device API;
• Wireless networking;
• eXpress Data Path;
• Key management;
• ALSA framework;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-21913, CVE-2025-22070, CVE-2025-21918, CVE-2025-21916, CVE-2025-22090, CVE-2025-22040, CVE-2025-21972, CVE-2025-21920, CVE-2025-22071, CVE-2025-21989, CVE-2025-22037, CVE-2025-22068, CVE-2025-38049, CVE-2025-21980, CVE-2025-21956, CVE-2025-21962, CVE-2025-21929, CVE-2025-37785, CVE-2025-37889, CVE-2025-21990, CVE-2025-21966, CVE-2025-38240, CVE-2025-22058, CVE-2025-22072, CVE-2025-22056, CVE-2025-21963, CVE-2025-23134, CVE-2025-22075, CVE-2025-22054, CVE-2025-22064, CVE-2025-22027, CVE-2025-21927, CVE-2025-21943, CVE-2025-22081, CVE-2025-21975, CVE-2025-39735, CVE-2025-22088, CVE-2025-21996, CVE-2025-22009, CVE-2025-22000, CVE-2025-21912, CVE-2025-21967, CVE-2025-21995, CVE-2025-21973, CVE-2025-21908, CVE-2025-22047, CVE-2025-21930, CVE-2025-22078, CVE-2025-21957, CVE-2025-22021, CVE-2025-22019, CVE-2025-21935, CVE-2025-21951, CVE-2025-37937, CVE-2025-22043, CVE-2025-22057, CVE-2025-21922, CVE-2025-22003, CVE-2025-21978, CVE-2025-22010, CVE-2025-39989, CVE-2025-22034, CVE-2025-21986, CVE-2025-22016, CVE-2025-21960, CVE-2025-22038, CVE-2025-21924, CVE-2025-22015, CVE-2025-38152, CVE-2025-21939, CVE-2025-21917, CVE-2025-21974, CVE-2025-22001, CVE-2025-22025, CVE-2025-22062, CVE-2025-21979, CVE-2025-21911, CVE-2025-22045, CVE-2025-21914, CVE-2025-21937, CVE-2025-22095, CVE-2025-21981, CVE-2025-22014,…

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Compute Acceleration Framework;
• ACPI drivers;
• Ublk userspace block driver;
• Compressed RAM block device driver;
• Bus devices;
• AMD CDX bus driver;
• Clock framework and drivers;
• DMA engine subsystem;
• DPLL subsystem;
• Qualcomm firmware drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• IIO subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• NVME drivers;
• PCI subsystem;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• VideoCore services drivers;
• Thermal drivers;
• USB DSL drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Virtio Host (VHOST) subsystem;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• W1 Dallas's 1-wire bus driver;
• 9P distributed file system;
• File systems infrastructure;
• Ext4 file system;
• JFS file system;
• Network file systems library;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• Proc file system;
• SMB network file system;
• Memory Management;
• Key Management;
• Memory management;
• Scheduler infrastructure;
• UProbes tracing;
• RDMA verbs API;
• SoC audio core drivers;
• BPF subsystem;
• Perf events;
• Kernel fork() syscall;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Netfilter;
• Network traffic control;
• SCTP protocol;
• Switch device API;
• Wireless networking;
• eXpress Data Path;
• Key management;
• ALSA framework;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-21913, CVE-2025-22070, CVE-2025-21918, CVE-2025-21916, CVE-2025-22090, CVE-2025-22040, CVE-2025-21972, CVE-2025-21920, CVE-2025-22071, CVE-2025-21989, CVE-2025-22037, CVE-2025-22068, CVE-2025-38049, CVE-2025-21980, CVE-2025-21956, CVE-2025-21962, CVE-2025-21929, CVE-2025-37785, CVE-2025-37889, CVE-2025-21990, CVE-2025-21966, CVE-2025-38240, CVE-2025-22058, CVE-2025-22072, CVE-2025-22056, CVE-2025-21963, CVE-2025-23134, CVE-2025-22075, CVE-2025-22054, CVE-2025-22064, CVE-2025-22027, CVE-2025-21927, CVE-2025-21943, CVE-2025-22081, CVE-2025-21975, CVE-2025-39735, CVE-2025-22088, CVE-2025-21996, CVE-2025-22009, CVE-2025-22000, CVE-2025-21912, CVE-2025-21967, CVE-2025-21995, CVE-2025-21973, CVE-2025-21908, CVE-2025-22047, CVE-2025-21930, CVE-2025-22078, CVE-2025-21957, CVE-2025-22021, CVE-2025-22019, CVE-2025-21935, CVE-2025-21951, CVE-2025-37937, CVE-2025-22043, CVE-2025-22057, CVE-2025-21922, CVE-2025-22003, CVE-2025-21978, CVE-2025-22010, CVE-2025-39989, CVE-2025-22034, CVE-2025-21986, CVE-2025-22016, CVE-2025-21960, CVE-2025-22038, CVE-2025-21924, CVE-2025-22015, CVE-2025-38152, CVE-2025-21939, CVE-2025-21917, CVE-2025-21974, CVE-2025-22001, CVE-2025-22025, CVE-2025-22062, CVE-2025-21979, CVE-2025-21911, CVE-2025-22045, CVE-2025-21914, CVE-2025-21937, CVE-2025-22095, CVE-2025-21981, CVE-2025-22014,…

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Compute Acceleration Framework;
• ACPI drivers;
• Ublk userspace block driver;
• Compressed RAM block device driver;
• Bus devices;
• AMD CDX bus driver;
• Clock framework and drivers;
• DMA engine subsystem;
• DPLL subsystem;
• Qualcomm firmware drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• IIO subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• NVME drivers;
• PCI subsystem;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• VideoCore services drivers;
• Thermal drivers;
• USB DSL drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Virtio Host (VHOST) subsystem;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• W1 Dallas's 1-wire bus driver;
• 9P distributed file system;
• File systems infrastructure;
• Ext4 file system;
• JFS file system;
• Network file systems library;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• Proc file system;
• SMB network file system;
• Memory Management;
• Key Management;
• Memory management;
• Scheduler infrastructure;
• UProbes tracing;
• RDMA verbs API;
• SoC audio core drivers;
• BPF subsystem;
• Perf events;
• Kernel fork() syscall;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Netfilter;
• Network traffic control;
• SCTP protocol;
• Switch device API;
• Wireless networking;
• eXpress Data Path;
• Key management;
• ALSA framework;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-22072, CVE-2025-22039, CVE-2025-22078, CVE-2025-21972, CVE-2025-21989, CVE-2025-21919, CVE-2025-22030, CVE-2025-22084, CVE-2025-22086, CVE-2025-21956, CVE-2025-21924, CVE-2025-22016, CVE-2025-23138, CVE-2025-22059, CVE-2025-21928, CVE-2025-21906, CVE-2025-21947, CVE-2025-21936, CVE-2025-21982, CVE-2025-38152, CVE-2025-38049, CVE-2025-21974, CVE-2025-21962, CVE-2025-22075, CVE-2025-21959, CVE-2025-22002, CVE-2025-22014, CVE-2025-21905, CVE-2025-22044, CVE-2025-22000, CVE-2025-21925, CVE-2025-21944, CVE-2025-21926, CVE-2025-21904, CVE-2024-58092, CVE-2025-21964, CVE-2025-22009, CVE-2025-22083, CVE-2025-21992, CVE-2025-39778, CVE-2025-22021, CVE-2025-22090, CVE-2025-21934, CVE-2025-22043, CVE-2025-22027, CVE-2025-21951, CVE-2025-22019, CVE-2025-21908, CVE-2025-22062, CVE-2025-22071, CVE-2025-21914, CVE-2025-21966, CVE-2025-21984, CVE-2025-39735, CVE-2025-21912, CVE-2025-21979, CVE-2025-22063, CVE-2025-37785, CVE-2025-22081, CVE-2025-22024, CVE-2025-38637, CVE-2025-22070, CVE-2025-21911, CVE-2025-21935, CVE-2024-58093, CVE-2025-21960, CVE-2025-21913, CVE-2025-21927, CVE-2025-21977, CVE-2025-37843, CVE-2025-22055, CVE-2025-22035, CVE-2025-21998, CVE-2025-22041, CVE-2025-21945, CVE-2025-22080, CVE-2025-21963, CVE-2025-21994, CVE-2025-21957, CVE-2025-22079, CVE-2025-22034, CVE-2025-21946, CVE-2025-22053,…

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Compute Acceleration Framework;
• ACPI drivers;
• Ublk userspace block driver;
• Compressed RAM block device driver;
• Bus devices;
• AMD CDX bus driver;
• Clock framework and drivers;
• DMA engine subsystem;
• DPLL subsystem;
• Qualcomm firmware drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• IIO subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• NVME drivers;
• PCI subsystem;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• VideoCore services drivers;
• Thermal drivers;
• USB DSL drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Virtio Host (VHOST) subsystem;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• W1 Dallas's 1-wire bus driver;
• 9P distributed file system;
• File systems infrastructure;
• Ext4 file system;
• JFS file system;
• Network file systems library;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• Proc file system;
• SMB network file system;
• Memory Management;
• Key Management;
• Memory management;
• Scheduler infrastructure;
• UProbes tracing;
• RDMA verbs API;
• SoC audio core drivers;
• BPF subsystem;
• Perf events;
• Kernel fork() syscall;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Netfilter;
• Network traffic control;
• SCTP protocol;
• Switch device API;
• Wireless networking;
• eXpress Data Path;
• Key management;
• ALSA framework;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-39728, CVE-2025-22059, CVE-2025-22008, CVE-2025-37932, CVE-2025-22033, CVE-2025-21984, CVE-2025-22063, CVE-2025-22065, CVE-2025-21991, CVE-2025-38479, CVE-2025-21948, CVE-2025-21936, CVE-2025-22038, CVE-2025-21951, CVE-2025-21906, CVE-2025-21924, CVE-2025-21966, CVE-2025-22073, CVE-2025-22020, CVE-2025-21974, CVE-2025-22043, CVE-2025-22088, CVE-2025-21959, CVE-2025-38575, CVE-2025-22035, CVE-2025-23134, CVE-2025-22009, CVE-2025-22010, CVE-2025-21941, CVE-2025-21914, CVE-2025-22066, CVE-2025-22017, CVE-2025-21911, CVE-2025-21928, CVE-2025-21998, CVE-2025-21920, CVE-2025-21961, CVE-2025-21992, CVE-2025-21995, CVE-2025-21997, CVE-2025-22084, CVE-2025-22011, CVE-2025-22039, CVE-2025-21977, CVE-2025-21963, CVE-2025-21981, CVE-2024-53222, CVE-2025-22037, CVE-2025-22070, CVE-2025-21950, CVE-2025-21980, CVE-2025-22023, CVE-2025-38049, CVE-2025-22018, CVE-2025-22072, CVE-2025-22021, CVE-2025-21986, CVE-2025-22019, CVE-2025-22045, CVE-2025-21990, CVE-2025-21926, CVE-2025-39989, CVE-2025-21902, CVE-2025-21946, CVE-2025-21908, CVE-2025-22081, CVE-2025-22042, CVE-2024-58092, CVE-2025-21939, CVE-2025-22086, CVE-2025-21996, CVE-2025-21929, CVE-2025-21947, CVE-2025-21919, CVE-2025-21922, CVE-2023-53034, CVE-2025-22013, CVE-2025-21979, CVE-2025-21968, CVE-2025-22056, CVE-2025-37937, CVE-2025-22047, CVE-2025-21956,…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• x86 architecture;
• Compute Acceleration Framework;
• Bus devices;
• AMD CDX bus driver;
• DPLL subsystem;
• EFI core;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Network drivers;
• Mellanox network drivers;
• NVME drivers;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• UFS subsystem;
• USB DSL drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• Network file system (NFS) client;
• Proc file system;
• SMB network file system;
• Memory Management;
• Scheduler infrastructure;
• SoC audio core drivers;
• Perf events;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Network traffic control;
• Switch device API;
• Wireless networking;
• eXpress Data Path; (CVE-2025-22008, CVE-2025-21872, CVE-2025-21945, CVE-2025-37889, CVE-2025-21997, CVE-2025-21935, CVE-2025-21986, CVE-2025-21890, CVE-2025-21925, CVE-2024-58090, CVE-2025-38569, CVE-2025-21911, CVE-2025-21957, CVE-2025-21891, CVE-2025-21924, CVE-2025-21956, CVE-2025-21994, CVE-2025-22013, CVE-2025-21964, CVE-2025-21909, CVE-2025-21888, CVE-2025-21918, CVE-2025-21981, CVE-2025-21966, CVE-2025-22011, CVE-2025-21877, CVE-2025-21913, CVE-2025-21895, CVE-2025-21929, CVE-2025-22010, CVE-2025-21992, CVE-2025-21930, CVE-2025-21982, CVE-2025-21894, CVE-2025-21934, CVE-2025-21873, CVE-2025-21914, CVE-2025-21941, CVE-2025-21962, CVE-2025-22014, CVE-2025-21905, CVE-2025-21908, CVE-2025-21898, CVE-2025-21878, CVE-2025-22009, CVE-2025-21961, CVE-2025-22015, CVE-2025-21883, CVE-2025-21916, CVE-2025-22016, CVE-2025-21936, CVE-2025-21947, CVE-2025-21927, CVE-2025-22004, CVE-2025-21926, CVE-2025-21969, CVE-2025-21976, CVE-2025-21912, CVE-2025-21920, CVE-2025-21951, CVE-2025-22005, CVE-2025-21978, CVE-2025-21975, CVE-2025-22007, CVE-2025-21928, CVE-2025-21968, CVE-2025-21963, CVE-2025-21977, CVE-2025-21915, CVE-2025-21980, CVE-2025-22047, CVE-2025-21972, CVE-2025-21892, CVE-2025-22003, CVE-2025-21979, CVE-2025-21944, CVE-2025-21880, CVE-2025-21899, CVE-2025-21995, CVE-2025-22017, CVE-2025-21946, CVE-2025-22001, CVE-2025-21904, CVE-2025-21881, CVE-2025-21917, CVE-2025-21970, CVE-2025-21889, CVE-2025-21922, CVE-2025-21875, CVE-2025-21919, CVE-2025-21991, CVE-2025-21967, CVE-2025-21960, CVE-2025-21959, CVE-2025-21955, CVE-2025-21996, CVE-2025-21950, CVE-2025-21937, CVE-2025-21948, CVE-2025-21903, CVE-2025-21885, CVE-2025-21999, CVE-2025-21910)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• x86 architecture;
• Compute Acceleration Framework;
• Bus devices;
• AMD CDX bus driver;
• DPLL subsystem;
• EFI core;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Network drivers;
• Mellanox network drivers;
• NVME drivers;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• UFS subsystem;
• USB DSL drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• Network file system (NFS) client;
• Proc file system;
• SMB network file system;
• Memory Management;
• Scheduler infrastructure;
• SoC audio core drivers;
• Perf events;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Network traffic control;
• Switch device API;
• Wireless networking;
• eXpress Data Path; (CVE-2025-21945, CVE-2025-21991, CVE-2025-22008, CVE-2025-21996, CVE-2025-21924, CVE-2025-21986, CVE-2025-21872, CVE-2025-21962, CVE-2025-22007, CVE-2025-37889, CVE-2025-21889, CVE-2025-21968, CVE-2025-21903, CVE-2025-21955, CVE-2025-21982, CVE-2025-21929, CVE-2025-21944, CVE-2025-22004, CVE-2025-21997, CVE-2025-21941, CVE-2025-22047, CVE-2025-21915, CVE-2025-21995, CVE-2025-22011, CVE-2025-21891, CVE-2025-22009, CVE-2025-22015, CVE-2024-58090, CVE-2025-21947, CVE-2025-21976, CVE-2025-21964, CVE-2025-21904, CVE-2025-21880, CVE-2025-21918, CVE-2025-21950, CVE-2025-21948, CVE-2025-21888, CVE-2025-22014, CVE-2025-21963, CVE-2025-21875, CVE-2025-21967, CVE-2025-21972, CVE-2025-21895, CVE-2025-21961, CVE-2025-21926, CVE-2025-21892, CVE-2025-21916, CVE-2025-21894, CVE-2025-21930, CVE-2025-21927, CVE-2025-21911, CVE-2025-21936, CVE-2025-21881, CVE-2025-38569, CVE-2025-21873, CVE-2025-21951, CVE-2025-22003, CVE-2025-21877, CVE-2025-21908, CVE-2025-21956, CVE-2025-21977, CVE-2025-21917, CVE-2025-21922, CVE-2025-21959, CVE-2025-22005, CVE-2025-22017, CVE-2025-22016, CVE-2025-21878, CVE-2025-21970, CVE-2025-21905, CVE-2025-21978, CVE-2025-21981, CVE-2025-21980, CVE-2025-21910, CVE-2025-21925, CVE-2025-21885, CVE-2025-21946, CVE-2025-21937, CVE-2025-21919, CVE-2025-22013, CVE-2025-21883, CVE-2025-21957, CVE-2025-21914, CVE-2025-21909, CVE-2025-21934, CVE-2025-21975, CVE-2025-21912, CVE-2025-21969, CVE-2025-21898, CVE-2025-21890, CVE-2025-21899, CVE-2025-22001, CVE-2025-21979, CVE-2025-21966, CVE-2025-21935, CVE-2025-21920, CVE-2025-21913, CVE-2025-22010, CVE-2025-21992, CVE-2025-21960, CVE-2025-21994, CVE-2025-21999, CVE-2025-21928)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• x86 architecture;
• Compute Acceleration Framework;
• Bus devices;
• AMD CDX bus driver;
• DPLL subsystem;
• EFI core;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Network drivers;
• Mellanox network drivers;
• NVME drivers;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• UFS subsystem;
• USB DSL drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• Network file system (NFS) client;
• Proc file system;
• SMB network file system;
• Memory Management;
• Scheduler infrastructure;
• SoC audio core drivers;
• Perf events;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Network traffic control;
• Switch device API;
• Wireless networking;
• eXpress Data Path; (CVE-2025-21980, CVE-2025-21999, CVE-2025-21991, CVE-2025-21937, CVE-2025-22016, CVE-2025-21920, CVE-2025-21979, CVE-2025-21919, CVE-2025-21969, CVE-2025-21872, CVE-2025-21996, CVE-2025-21927, CVE-2025-21904, CVE-2025-22013, CVE-2025-21928, CVE-2025-21891, CVE-2025-21889, CVE-2025-21972, CVE-2025-21981, CVE-2025-38569, CVE-2025-21910, CVE-2025-21945, CVE-2025-22011, CVE-2025-21916, CVE-2025-21924, CVE-2025-21922, CVE-2025-21975, CVE-2025-21880, CVE-2025-21995, CVE-2025-21977, CVE-2025-21947, CVE-2025-21914, CVE-2025-21905, CVE-2025-22009, CVE-2025-21892, CVE-2025-22005, CVE-2024-58090, CVE-2025-21926, CVE-2025-37889, CVE-2025-21966, CVE-2025-21955, CVE-2025-22007, CVE-2025-21894, CVE-2025-21909, CVE-2025-21883, CVE-2025-21992, CVE-2025-21976, CVE-2025-21890, CVE-2025-21898, CVE-2025-21982, CVE-2025-21877, CVE-2025-21925, CVE-2025-21970, CVE-2025-21930, CVE-2025-21946, CVE-2025-22017, CVE-2025-21908, CVE-2025-21944, CVE-2025-21885, CVE-2025-22010, CVE-2025-21917, CVE-2025-21918, CVE-2025-21934, CVE-2025-21950, CVE-2025-21963, CVE-2025-22003, CVE-2025-21961, CVE-2025-21967, CVE-2025-21878, CVE-2025-21895, CVE-2025-21913, CVE-2025-21875, CVE-2025-21959, CVE-2025-22008, CVE-2025-21968, CVE-2025-21936, CVE-2025-21956, CVE-2025-21903, CVE-2025-22004, CVE-2025-21986, CVE-2025-21915, CVE-2025-21964, CVE-2025-22014, CVE-2025-21994, CVE-2025-21912, CVE-2025-21873, CVE-2025-21957, CVE-2025-22015, CVE-2025-21997, CVE-2025-21948, CVE-2025-21951, CVE-2025-21962, CVE-2025-22001, CVE-2025-21978, CVE-2025-21960, CVE-2025-22047, CVE-2025-21935, CVE-2025-21899, CVE-2025-21911, CVE-2025-21881, CVE-2025-21929, CVE-2025-21941)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• x86 architecture;
• Compute Acceleration Framework;
• Bus devices;
• AMD CDX bus driver;
• DPLL subsystem;
• EFI core;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Network drivers;
• Mellanox network drivers;
• NVME drivers;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• UFS subsystem;
• USB DSL drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• Network file system (NFS) client;
• Proc file system;
• SMB network file system;
• Memory Management;
• Scheduler infrastructure;
• SoC audio core drivers;
• Perf events;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Network traffic control;
• Switch device API;
• Wireless networking;
• eXpress Data Path; (CVE-2025-21961, CVE-2025-21895, CVE-2025-21934, CVE-2025-21898, CVE-2024-58090, CVE-2025-21999, CVE-2025-22004, CVE-2025-21966, CVE-2025-21922, CVE-2025-21920, CVE-2025-21911, CVE-2025-21885, CVE-2025-21912, CVE-2025-21996, CVE-2025-21924, CVE-2025-21914, CVE-2025-21936, CVE-2025-21944, CVE-2025-21877, CVE-2025-21909, CVE-2025-21986, CVE-2025-21890, CVE-2025-22009, CVE-2025-21905, CVE-2025-21969, CVE-2025-21935, CVE-2025-21917, CVE-2025-22008, CVE-2025-21994, CVE-2025-21980, CVE-2025-22014, CVE-2025-21915, CVE-2025-21991, CVE-2025-22015, CVE-2025-21875, CVE-2025-21975, CVE-2025-21878, CVE-2025-21930, CVE-2025-21967, CVE-2025-21908, CVE-2025-22007, CVE-2025-21899, CVE-2025-21950, CVE-2025-21959, CVE-2025-21937, CVE-2025-22010, CVE-2025-21945, CVE-2025-21997, CVE-2025-21992, CVE-2025-22003, CVE-2025-22013, CVE-2025-21963, CVE-2025-22001, CVE-2025-21927, CVE-2025-21894, CVE-2025-21960, CVE-2025-21956, CVE-2025-21948, CVE-2025-21929, CVE-2025-21919, CVE-2025-21972, CVE-2025-21883, CVE-2025-21880, CVE-2025-21976, CVE-2025-22005, CVE-2025-22016, CVE-2025-21978, CVE-2025-21873, CVE-2025-21925, CVE-2025-21904, CVE-2025-21928, CVE-2025-21892, CVE-2025-21891, CVE-2025-21995, CVE-2025-21968, CVE-2025-21982, CVE-2025-21918, CVE-2025-21889, CVE-2025-21970, CVE-2025-21910, CVE-2025-21913, CVE-2025-21926, CVE-2025-21955, CVE-2025-21947, CVE-2025-21979, CVE-2025-21981, CVE-2025-22011, CVE-2025-21888, CVE-2025-37889, CVE-2025-21957, CVE-2025-21977, CVE-2025-21903, CVE-2025-21946, CVE-2025-21941, CVE-2025-21964, CVE-2025-21951, CVE-2025-21962, CVE-2025-22017, CVE-2025-21872, CVE-2025-21881, CVE-2025-21916)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• x86 architecture;
• Compute Acceleration Framework;
• Bus devices;
• AMD CDX bus driver;
• DPLL subsystem;
• EFI core;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Network drivers;
• Mellanox network drivers;
• NVME drivers;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• UFS subsystem;
• USB DSL drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• Network file system (NFS) client;
• Proc file system;
• SMB network file system;
• Memory Management;
• Scheduler infrastructure;
• SoC audio core drivers;
• Perf events;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Network traffic control;
• Switch device API;
• Wireless networking;
• eXpress Data Path; (CVE-2025-21966, CVE-2025-21895, CVE-2025-21944, CVE-2025-21986, CVE-2025-21918, CVE-2025-21873, CVE-2025-21963, CVE-2025-21929, CVE-2025-21995, CVE-2025-22017, CVE-2025-21991, CVE-2025-21960, CVE-2025-21946, CVE-2025-21976, CVE-2025-21922, CVE-2025-21925, CVE-2025-21903, CVE-2025-21978, CVE-2025-21979, CVE-2025-22016, CVE-2025-21936, CVE-2025-21997, CVE-2025-21992, CVE-2025-21920, CVE-2025-21875, CVE-2025-21934, CVE-2025-21919, CVE-2025-21972, CVE-2025-22001, CVE-2025-21981, CVE-2025-21910, CVE-2025-21969, CVE-2025-22010, CVE-2025-21908, CVE-2025-21957, CVE-2025-22009, CVE-2025-21927, CVE-2025-21930, CVE-2025-21994, CVE-2025-21980, CVE-2025-21885, CVE-2025-21967, CVE-2025-21899, CVE-2025-21890, CVE-2025-21948, CVE-2025-21964, CVE-2025-21911, CVE-2025-21982, CVE-2025-21883, CVE-2025-21913, CVE-2025-21917, CVE-2025-21905, CVE-2025-21968, CVE-2025-22013, CVE-2025-22005, CVE-2025-21916, CVE-2025-21880, CVE-2025-21881, CVE-2025-22003, CVE-2025-21892, CVE-2025-21937, CVE-2025-21970, CVE-2025-22004, CVE-2025-21950, CVE-2025-21924, CVE-2025-21894, CVE-2025-21904, CVE-2025-21915, CVE-2025-21889, CVE-2025-21912, CVE-2025-21909, CVE-2025-21888, CVE-2025-21935, CVE-2025-22008, CVE-2025-37889, CVE-2025-21878, CVE-2025-21926, CVE-2025-22011, CVE-2025-21962, CVE-2025-22007, CVE-2025-21941, CVE-2025-21898, CVE-2025-21956, CVE-2025-22015, CVE-2025-21961, CVE-2025-21872, CVE-2025-21891, CVE-2025-21947, CVE-2025-21955, CVE-2025-21877, CVE-2025-21996, CVE-2025-21977, CVE-2025-21945, CVE-2025-21914, CVE-2025-21975, CVE-2024-58090, CVE-2025-21959, CVE-2025-22014, CVE-2025-21951, CVE-2025-21928, CVE-2025-21999)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• x86 architecture;
• Compute Acceleration Framework;
• Bus devices;
• AMD CDX bus driver;
• DPLL subsystem;
• EFI core;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Network drivers;
• Mellanox network drivers;
• NVME drivers;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• UFS subsystem;
• USB DSL drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• Network file system (NFS) client;
• Proc file system;
• SMB network file system;
• Memory Management;
• Scheduler infrastructure;
• SoC audio core drivers;
• Perf events;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Network traffic control;
• Switch device API;
• Wireless networking;
• eXpress Data Path; (CVE-2025-21964, CVE-2025-21890, CVE-2025-21934, CVE-2025-21929, CVE-2025-21922, CVE-2025-21970, CVE-2025-21913, CVE-2025-21937, CVE-2025-21872, CVE-2025-21972, CVE-2025-21892, CVE-2025-21991, CVE-2025-21967, CVE-2025-21894, CVE-2025-21881, CVE-2025-21885, CVE-2025-21999, CVE-2025-21978, CVE-2025-22001, CVE-2025-21979, CVE-2025-21951, CVE-2025-22003, CVE-2025-21963, CVE-2025-21936, CVE-2025-21891, CVE-2025-21941, CVE-2025-21895, CVE-2025-21982, CVE-2025-21919, CVE-2025-21961, CVE-2025-21946, CVE-2025-21889, CVE-2025-21899, CVE-2025-21873, CVE-2025-37889, CVE-2025-22008, CVE-2025-21969, CVE-2025-21957, CVE-2025-21925, CVE-2025-21945, CVE-2025-21927, CVE-2025-21878, CVE-2025-21995, CVE-2025-21981, CVE-2025-21956, CVE-2025-21909, CVE-2025-21955, CVE-2025-21918, CVE-2025-21960, CVE-2025-21915, CVE-2025-21992, CVE-2025-21914, CVE-2025-21877, CVE-2025-21875, CVE-2025-21928, CVE-2025-22013, CVE-2025-22014, CVE-2025-21950, CVE-2025-21948, CVE-2025-21912, CVE-2025-21944, CVE-2025-22004, CVE-2025-22009, CVE-2025-21968, CVE-2025-21888, CVE-2025-21980, CVE-2025-21911, CVE-2025-22017, CVE-2025-21975, CVE-2025-21930, CVE-2025-21947, CVE-2025-21908, CVE-2025-21994, CVE-2024-58090, CVE-2025-21910, CVE-2025-21959, CVE-2025-21977, CVE-2025-21903, CVE-2025-22016, CVE-2025-21976, CVE-2025-21898, CVE-2025-21986, CVE-2025-22011, CVE-2025-21905, CVE-2025-22015, CVE-2025-21996, CVE-2025-21966, CVE-2025-21883, CVE-2025-22010, CVE-2025-21904, CVE-2025-21916, CVE-2025-21935, CVE-2025-21924, CVE-2025-22005, CVE-2025-21962, CVE-2025-21917, CVE-2025-21920, CVE-2025-21997, CVE-2025-21880, CVE-2025-21926, CVE-2025-22007)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• x86 architecture;
• Compute Acceleration Framework;
• Bus devices;
• AMD CDX bus driver;
• DPLL subsystem;
• EFI core;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Network drivers;
• Mellanox network drivers;
• NVME drivers;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• UFS subsystem;
• USB DSL drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• Network file system (NFS) client;
• Overlay file system;
• Proc file system;
• SMB network file system;
• Memory Management;
• Scheduler infrastructure;
• SoC audio core drivers;
• Perf events;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Network traffic control;
• Switch device API;
• Wireless networking;
• eXpress Data Path; (CVE-2025-22017, CVE-2025-22003, CVE-2025-22009, CVE-2025-22015, CVE-2025-21934, CVE-2025-21908, CVE-2025-21885, CVE-2025-21979, CVE-2025-21887, CVE-2025-21922, CVE-2025-21944, CVE-2025-21905, CVE-2025-21969, CVE-2025-21904, CVE-2025-21926, CVE-2025-21951, CVE-2025-21997, CVE-2025-21920, CVE-2025-21994, CVE-2025-21977, CVE-2025-21976, CVE-2025-21975, CVE-2025-21972, CVE-2025-22013, CVE-2025-21894, CVE-2025-21963, CVE-2025-21978, CVE-2025-38569, CVE-2025-21936, CVE-2025-21873, CVE-2025-22010, CVE-2025-21981, CVE-2025-22005, CVE-2025-21959, CVE-2025-21929, CVE-2025-21927, CVE-2025-21966, CVE-2025-22008, CVE-2025-21957, CVE-2025-21970, CVE-2025-21968, CVE-2025-21889, CVE-2025-22047, CVE-2025-21881, CVE-2025-21956, CVE-2025-22011, CVE-2025-21986, CVE-2025-21892, CVE-2025-21964, CVE-2025-21899, CVE-2025-21877, CVE-2025-21875, CVE-2025-21912, CVE-2025-22001, CVE-2025-38350, CVE-2025-21991, CVE-2025-21930, CVE-2025-21962, CVE-2025-21880, CVE-2024-57996, CVE-2025-21914, CVE-2025-22014, CVE-2025-21888, CVE-2025-21955, CVE-2025-21937, CVE-2025-21924, CVE-2025-21895, CVE-2025-21947, CVE-2025-21946, CVE-2025-21878, CVE-2025-21918, CVE-2025-21913, CVE-2025-21945, CVE-2025-37752, CVE-2025-21935, CVE-2025-21950, CVE-2025-21960, CVE-2024-58090, CVE-2025-21992, CVE-2025-21961, CVE-2025-21948, CVE-2025-21982, CVE-2025-21910, CVE-2025-21909, CVE-2025-21925, CVE-2025-37889, CVE-2025-21967, CVE-2025-21898, CVE-2025-22007, CVE-2025-21995, CVE-2025-22016, CVE-2025-21891, CVE-2025-21911, CVE-2025-21890, CVE-2025-21999, CVE-2025-22004, CVE-2025-21915, CVE-2025-21996, CVE-2025-21980, CVE-2025-21903, CVE-2025-21916, CVE-2025-21941, CVE-2025-21928, CVE-2025-21919, CVE-2025-21883, CVE-2025-21872, CVE-2025-21917)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• x86 architecture;
• Compute Acceleration Framework;
• Bus devices;
• AMD CDX bus driver;
• DPLL subsystem;
• EFI core;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Network drivers;
• Mellanox network drivers;
• NVME drivers;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• UFS subsystem;
• USB DSL drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• Network file system (NFS) client;
• Proc file system;
• SMB network file system;
• Memory Management;
• Scheduler infrastructure;
• SoC audio core drivers;
• Perf events;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Network traffic control;
• Switch device API;
• Wireless networking;
• eXpress Data Path; (CVE-2025-21944, CVE-2025-21927, CVE-2025-21996, CVE-2025-21928, CVE-2025-21888, CVE-2025-21995, CVE-2025-21929, CVE-2025-21873, CVE-2025-21875, CVE-2025-21894, CVE-2025-21878, CVE-2025-21977, CVE-2024-58090, CVE-2025-21872, CVE-2025-21905, CVE-2025-21963, CVE-2025-21991, CVE-2025-21947, CVE-2025-21924, CVE-2025-21899, CVE-2025-21992, CVE-2025-21909, CVE-2025-21920, CVE-2025-21917, CVE-2025-21972, CVE-2025-21997, CVE-2025-21999, CVE-2025-21895, CVE-2025-22013, CVE-2025-21936, CVE-2025-21881, CVE-2025-21956, CVE-2025-22010, CVE-2025-22015, CVE-2025-21959, CVE-2025-21980, CVE-2025-22017, CVE-2025-22005, CVE-2025-21935, CVE-2025-21911, CVE-2025-21914, CVE-2025-22001, CVE-2025-21913, CVE-2025-22007, CVE-2025-21966, CVE-2025-21962, CVE-2025-21908, CVE-2025-21910, CVE-2025-22014, CVE-2025-22016, CVE-2025-21957, CVE-2025-21968, CVE-2025-21986, CVE-2025-21981, CVE-2025-21880, CVE-2025-21950, CVE-2025-21982, CVE-2025-21976, CVE-2025-21979, CVE-2025-21912, CVE-2025-21951, CVE-2025-21994, CVE-2025-21946, CVE-2025-21955, CVE-2025-21898, CVE-2025-21960, CVE-2025-21883, CVE-2025-21970, CVE-2025-21891, CVE-2025-21919, CVE-2025-21964, CVE-2025-21926, CVE-2025-21877, CVE-2025-21903, CVE-2025-21978, CVE-2025-21885, CVE-2025-21948, CVE-2025-21930, CVE-2025-22009, CVE-2025-21918, CVE-2025-21890, CVE-2025-21925, CVE-2025-22003, CVE-2025-22008, CVE-2025-21934, CVE-2025-21961, CVE-2025-22004, CVE-2025-21941, CVE-2025-21915, CVE-2025-21967, CVE-2025-21904, CVE-2025-21916, CVE-2025-37889, CVE-2025-21922, CVE-2025-21892, CVE-2025-21975, CVE-2025-21945, CVE-2025-21889, CVE-2025-21937, CVE-2025-21969)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• x86 architecture;
• Compute Acceleration Framework;
• Bus devices;
• AMD CDX bus driver;
• DPLL subsystem;
• EFI core;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Network drivers;
• Mellanox network drivers;
• NVME drivers;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• UFS subsystem;
• USB DSL drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• Ext4 file system;
• Network file system (NFS) client;
• Proc file system;
• SMB network file system;
• Memory Management;
• Scheduler infrastructure;
• SoC audio core drivers;
• Perf events;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Packet sockets;
• Network traffic control;
• Switch device API;
• TLS protocol;
• VMware vSockets driver;
• Wireless networking;
• eXpress Data Path;
• XFRM subsystem; (CVE-2025-38617, CVE-2025-21898, CVE-2025-21996, CVE-2025-21903, CVE-2025-21980, CVE-2025-22007, CVE-2025-22010, CVE-2025-37756, CVE-2025-21970, CVE-2025-21930, CVE-2025-37785, CVE-2025-22015, CVE-2025-21927, CVE-2025-21914, CVE-2025-21963, CVE-2025-22004, CVE-2025-21934, CVE-2025-21986, CVE-2025-22008, CVE-2025-21895, CVE-2025-21928, CVE-2025-21899, CVE-2025-21891, CVE-2025-21925, CVE-2025-21979, CVE-2025-21945, CVE-2025-22005, CVE-2025-21880, CVE-2025-21946, CVE-2025-21957, CVE-2025-21890, CVE-2025-21955, CVE-2025-21961, CVE-2025-21935, CVE-2025-21959, CVE-2025-37889, CVE-2025-21894, CVE-2024-58090, CVE-2025-22001, CVE-2025-21924, CVE-2025-21909, CVE-2025-22009, CVE-2025-21892, CVE-2025-21976, CVE-2025-21875, CVE-2025-21915, CVE-2025-21967, CVE-2025-38618, CVE-2025-21918, CVE-2025-21881, CVE-2025-21872, CVE-2025-21873, CVE-2025-21960, CVE-2025-22014, CVE-2025-21885, CVE-2025-21950, CVE-2025-21981, CVE-2025-21917, CVE-2025-21913, CVE-2025-21972, CVE-2025-21975, CVE-2025-21977, CVE-2025-21951, CVE-2025-21962, CVE-2025-38500, CVE-2025-21916, CVE-2025-21888, CVE-2025-21910, CVE-2025-21994, CVE-2025-21904, CVE-2025-21947, CVE-2025-21995, CVE-2025-22013, CVE-2025-21920, CVE-2025-21997, CVE-2025-21905, CVE-2025-21941, CVE-2025-21877, CVE-2025-21878, CVE-2025-21937, CVE-2025-21966, CVE-2025-21919, CVE-2025-21992, CVE-2025-21948, CVE-2025-21922, CVE-2025-21911, CVE-2025-21926, CVE-2025-21908, CVE-2025-21956, CVE-2025-22003, CVE-2025-21969, CVE-2025-21999, CVE-2025-38477, CVE-2025-21944, CVE-2025-21936, CVE-2025-21978, CVE-2025-21991, CVE-2025-21912, CVE-2025-21968, CVE-2025-22017, CVE-2025-21883, CVE-2025-21964, CVE-2025-21889, CVE-2025-21982, CVE-2025-22016, CVE-2025-21929)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• x86 architecture;
• Compute Acceleration Framework;
• Bus devices;
• AMD CDX bus driver;
• DPLL subsystem;
• EFI core;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Network drivers;
• Mellanox network drivers;
• NVME drivers;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• UFS subsystem;
• USB DSL drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• Ext4 file system;
• Network file system (NFS) client;
• Proc file system;
• SMB network file system;
• Memory Management;
• Scheduler infrastructure;
• SoC audio core drivers;
• Perf events;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Packet sockets;
• Network traffic control;
• Switch device API;
• TLS protocol;
• VMware vSockets driver;
• Wireless networking;
• eXpress Data Path;
• XFRM subsystem; (CVE-2025-21928, CVE-2025-21976, CVE-2025-21890, CVE-2025-21929, CVE-2025-21960, CVE-2025-21978, CVE-2025-21937, CVE-2025-21908, CVE-2025-21999, CVE-2025-22015, CVE-2025-21967, CVE-2025-21913, CVE-2025-21898, CVE-2025-37756, CVE-2025-38617, CVE-2025-21927, CVE-2025-21956, CVE-2025-21979, CVE-2025-21955, CVE-2025-21895, CVE-2025-21969, CVE-2025-21877, CVE-2025-21936, CVE-2025-22001, CVE-2025-37889, CVE-2025-21875, CVE-2025-21888, CVE-2025-21911, CVE-2025-21904, CVE-2025-21878, CVE-2025-21961, CVE-2025-22013, CVE-2025-21986, CVE-2025-21915, CVE-2025-21889, CVE-2025-21903, CVE-2025-21909, CVE-2025-21950, CVE-2025-21885, CVE-2025-21966, CVE-2025-21873, CVE-2025-21883, CVE-2025-21946, CVE-2025-22003, CVE-2025-22014, CVE-2024-58090, CVE-2025-21891, CVE-2025-21962, CVE-2025-21948, CVE-2025-21924, CVE-2025-22017, CVE-2025-21975, CVE-2025-21920, CVE-2025-21972, CVE-2025-21964, CVE-2025-21917, CVE-2025-21894, CVE-2025-21982, CVE-2025-21945, CVE-2025-21996, CVE-2025-21995, CVE-2025-21912, CVE-2025-21910, CVE-2025-21980, CVE-2025-21951, CVE-2025-21934, CVE-2025-21994, CVE-2025-37785, CVE-2025-22009, CVE-2025-38618, CVE-2025-21992, CVE-2025-21930, CVE-2025-21941, CVE-2025-21916, CVE-2025-22004, CVE-2025-21919, CVE-2025-21880, CVE-2025-21963, CVE-2025-21914, CVE-2025-21981, CVE-2025-38500, CVE-2025-22005, CVE-2025-21959, CVE-2025-21899, CVE-2025-21926, CVE-2025-21968, CVE-2025-21944, CVE-2025-22016, CVE-2025-38477, CVE-2025-22008, CVE-2025-21925, CVE-2025-21997, CVE-2025-21935, CVE-2025-21947, CVE-2025-22010, CVE-2025-21977, CVE-2025-21922, CVE-2025-21881, CVE-2025-21970, CVE-2025-22007, CVE-2025-21991, CVE-2025-21918, CVE-2025-21905, CVE-2025-22011, CVE-2025-21872, CVE-2025-21957, CVE-2025-21892)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• x86 architecture;
• Compute Acceleration Framework;
• Bus devices;
• AMD CDX bus driver;
• DPLL subsystem;
• EFI core;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Network drivers;
• Mellanox network drivers;
• NVME drivers;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• UFS subsystem;
• USB DSL drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• Ext4 file system;
• Network file system (NFS) client;
• Proc file system;
• SMB network file system;
• Memory Management;
• Scheduler infrastructure;
• SoC audio core drivers;
• Perf events;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Packet sockets;
• Network traffic control;
• Switch device API;
• TLS protocol;
• VMware vSockets driver;
• Wireless networking;
• eXpress Data Path;
• XFRM subsystem; (CVE-2025-21911, CVE-2025-21937, CVE-2025-21951, CVE-2025-21948, CVE-2025-22017, CVE-2025-21982, CVE-2025-21927, CVE-2025-21935, CVE-2025-21944, CVE-2025-21917, CVE-2025-21895, CVE-2025-21966, CVE-2025-21975, CVE-2025-21945, CVE-2025-21964, CVE-2025-22001, CVE-2025-21955, CVE-2025-21980, CVE-2025-21925, CVE-2025-21957, CVE-2025-22003, CVE-2025-21999, CVE-2025-21969, CVE-2025-21885, CVE-2025-21996, CVE-2025-21883, CVE-2025-21908, CVE-2025-21978, CVE-2025-21894, CVE-2025-21929, CVE-2025-21910, CVE-2025-21979, CVE-2025-21961, CVE-2025-21915, CVE-2025-21916, CVE-2025-22008, CVE-2025-37785, CVE-2025-21873, CVE-2025-21922, CVE-2025-21936, CVE-2025-22015, CVE-2025-22016, CVE-2025-21913, CVE-2025-22009, CVE-2025-21928, CVE-2025-21899, CVE-2025-22007, CVE-2025-21898, CVE-2025-21946, CVE-2025-21920, CVE-2025-22005, CVE-2025-21872, CVE-2025-21962, CVE-2025-21888, CVE-2025-21934, CVE-2025-38618, CVE-2025-22010, CVE-2025-22014, CVE-2024-58090, CVE-2025-21941, CVE-2025-21968, CVE-2025-21972, CVE-2025-21977, CVE-2025-22013, CVE-2025-21959, CVE-2025-21919, CVE-2025-21950, CVE-2025-21926, CVE-2025-21892, CVE-2025-21880, CVE-2025-21994, CVE-2025-21909, CVE-2025-21976, CVE-2025-21956, CVE-2025-21947, CVE-2025-21981, CVE-2025-21877, CVE-2025-21995, CVE-2025-21918, CVE-2025-38500, CVE-2025-22004, CVE-2025-37756, CVE-2025-21970, CVE-2025-21891, CVE-2025-21924, CVE-2025-38477, CVE-2025-21878, CVE-2025-21881, CVE-2025-21904, CVE-2025-21960, CVE-2025-21992, CVE-2025-37889, CVE-2025-21997, CVE-2025-38617, CVE-2025-21963, CVE-2025-21890, CVE-2025-21903, CVE-2025-21912, CVE-2025-22011, CVE-2025-21889, CVE-2025-21991, CVE-2025-21914, CVE-2025-21905, CVE-2025-21986, CVE-2025-21930, CVE-2025-21875, CVE-2025-21967)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• x86 architecture;
• Compute Acceleration Framework;
• Bus devices;
• AMD CDX bus driver;
• DPLL subsystem;
• EFI core;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Network drivers;
• Mellanox network drivers;
• NVME drivers;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• UFS subsystem;
• USB DSL drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• Ext4 file system;
• Network file system (NFS) client;
• Proc file system;
• SMB network file system;
• Memory Management;
• Scheduler infrastructure;
• SoC audio core drivers;
• Perf events;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Packet sockets;
• Network traffic control;
• Switch device API;
• TLS protocol;
• VMware vSockets driver;
• Wireless networking;
• eXpress Data Path;
• XFRM subsystem; (CVE-2025-21969, CVE-2025-21976, CVE-2025-21898, CVE-2025-21981, CVE-2025-21929, CVE-2025-21935, CVE-2025-22009, CVE-2025-21967, CVE-2025-21963, CVE-2025-21944, CVE-2025-21970, CVE-2025-21962, CVE-2025-21912, CVE-2025-38477, CVE-2025-21977, CVE-2025-21881, CVE-2025-21980, CVE-2025-22013, CVE-2025-21946, CVE-2025-22008, CVE-2025-21975, CVE-2025-21878, CVE-2025-21891, CVE-2025-22014, CVE-2025-21916, CVE-2025-21950, CVE-2024-58090, CVE-2025-21917, CVE-2025-21885, CVE-2025-21914, CVE-2025-21873, CVE-2025-21959, CVE-2025-21964, CVE-2025-22010, CVE-2025-21928, CVE-2025-21872, CVE-2025-21908, CVE-2025-22004, CVE-2025-21895, CVE-2025-21991, CVE-2025-21936, CVE-2025-21982, CVE-2025-21996, CVE-2025-21888, CVE-2025-21961, CVE-2025-21894, CVE-2025-21966, CVE-2025-21941, CVE-2025-21890, CVE-2025-21930, CVE-2025-21883, CVE-2025-21903, CVE-2025-21922, CVE-2025-21945, CVE-2025-22005, CVE-2025-22016, CVE-2025-21926, CVE-2025-21927, CVE-2025-21924, CVE-2025-21919, CVE-2025-21997, CVE-2025-21986, CVE-2025-21905, CVE-2025-21995, CVE-2025-38617, CVE-2025-21875, CVE-2025-21910, CVE-2025-21920, CVE-2025-21913, CVE-2025-21909, CVE-2025-21911, CVE-2025-22001, CVE-2025-21972, CVE-2025-37785, CVE-2025-21889, CVE-2025-21979, CVE-2025-21918, CVE-2025-22011, CVE-2025-37756, CVE-2025-21992, CVE-2025-38618, CVE-2025-21915, CVE-2025-38500, CVE-2025-21978, CVE-2025-21947, CVE-2025-21951, CVE-2025-21994, CVE-2025-21999, CVE-2025-21960, CVE-2025-37889, CVE-2025-21892, CVE-2025-21934, CVE-2025-21877, CVE-2025-22007, CVE-2025-22003, CVE-2025-22017, CVE-2025-21925, CVE-2025-21880, CVE-2025-21957, CVE-2025-21899, CVE-2025-21956, CVE-2025-21948, CVE-2025-21955, CVE-2025-21937, CVE-2025-21968, CVE-2025-21904, CVE-2025-22015)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• x86 architecture;
• Compute Acceleration Framework;
• Bus devices;
• AMD CDX bus driver;
• DPLL subsystem;
• EFI core;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Network drivers;
• Mellanox network drivers;
• NVME drivers;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• UFS subsystem;
• USB DSL drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• Network file system (NFS) client;
• Overlay file system;
• Proc file system;
• SMB network file system;
• Memory Management;
• Scheduler infrastructure;
• SoC audio core drivers;
• Perf events;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Network traffic control;
• Switch device API;
• Wireless networking;
• eXpress Data Path; (CVE-2025-21935, CVE-2025-21967, CVE-2025-21908, CVE-2025-22004, CVE-2025-21926, CVE-2025-21927, CVE-2025-21995, CVE-2025-21895, CVE-2025-21936, CVE-2025-21948, CVE-2025-21969, CVE-2025-21972, CVE-2025-21951, CVE-2025-22017, CVE-2025-21962, CVE-2025-21917, CVE-2025-22013, CVE-2025-21991, CVE-2025-22009, CVE-2025-22016, CVE-2024-57996, CVE-2025-21966, CVE-2025-21947, CVE-2025-21928, CVE-2025-21959, CVE-2025-21910, CVE-2025-21957, CVE-2025-21978, CVE-2025-21887, CVE-2025-37954, CVE-2025-21996, CVE-2025-21979, CVE-2025-37889, CVE-2025-21930, CVE-2025-21980, CVE-2025-21878, CVE-2025-21918, CVE-2025-21889, CVE-2024-58090, CVE-2025-22011, CVE-2025-21955, CVE-2025-21904, CVE-2025-21894, CVE-2025-21892, CVE-2025-21945, CVE-2025-21994, CVE-2025-21986, CVE-2025-21912, CVE-2025-21968, CVE-2025-21976, CVE-2025-21898, CVE-2025-21875, CVE-2025-21964, CVE-2025-21963, CVE-2025-21960, CVE-2025-21999, CVE-2025-21997, CVE-2025-21916, CVE-2025-21891, CVE-2025-21920, CVE-2025-21909, CVE-2025-21944, CVE-2025-21883, CVE-2025-22005, CVE-2025-22007, CVE-2025-21911, CVE-2025-21992, CVE-2025-21919, CVE-2025-22003, CVE-2025-21915, CVE-2025-21970, CVE-2025-21903, CVE-2025-21899, CVE-2025-21880, CVE-2025-21956, CVE-2025-21934, CVE-2025-21925, CVE-2025-21941, CVE-2025-21977, CVE-2025-21975, CVE-2025-21913, CVE-2025-21981, CVE-2025-21872, CVE-2025-37752, CVE-2025-22008, CVE-2025-21905, CVE-2025-21888, CVE-2025-38350, CVE-2025-21922, CVE-2025-21937, CVE-2025-21950, CVE-2025-21924, CVE-2025-22014, CVE-2025-22001, CVE-2025-21885, CVE-2025-21881, CVE-2025-21929, CVE-2025-21914, CVE-2025-21877, CVE-2025-22015, CVE-2025-21961, CVE-2025-22010, CVE-2025-21982, CVE-2025-21890, CVE-2025-21946, CVE-2025-21873)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• x86 architecture;
• Compute Acceleration Framework;
• Bus devices;
• AMD CDX bus driver;
• DPLL subsystem;
• EFI core;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Network drivers;
• Mellanox network drivers;
• NVME drivers;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• UFS subsystem;
• USB DSL drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• Ext4 file system;
• Network file system (NFS) client;
• Overlay file system;
• Proc file system;
• SMB network file system;
• Memory Management;
• Scheduler infrastructure;
• SoC audio core drivers;
• Perf events;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Packet sockets;
• Network traffic control;
• Switch device API;
• TLS protocol;
• VMware vSockets driver;
• Wireless networking;
• eXpress Data Path;
• XFRM subsystem; (CVE-2025-21976, CVE-2025-21890, CVE-2025-38617, CVE-2025-21945, CVE-2025-21878, CVE-2025-21925, CVE-2025-21927, CVE-2025-21997, CVE-2025-21919, CVE-2025-21979, CVE-2025-21899, CVE-2025-21955, CVE-2025-21967, CVE-2024-57996, CVE-2025-22014, CVE-2025-21956, CVE-2025-21887, CVE-2025-37785, CVE-2025-21935, CVE-2024-58090, CVE-2025-21975, CVE-2025-21969, CVE-2025-21914, CVE-2025-21963, CVE-2025-21934, CVE-2025-21872, CVE-2025-21961, CVE-2025-38244, CVE-2025-21908, CVE-2025-21920, CVE-2025-21980, CVE-2025-21904, CVE-2025-22008, CVE-2025-21911, CVE-2025-21880, CVE-2025-21928, CVE-2025-21885, CVE-2025-21913, CVE-2025-37752, CVE-2025-22015, CVE-2025-38500, CVE-2025-22013, CVE-2025-21970, CVE-2025-21877, CVE-2025-21916, CVE-2025-21889, CVE-2025-21982, CVE-2025-22001, CVE-2025-22007, CVE-2025-22016, CVE-2025-21981, CVE-2025-37756, CVE-2025-21962, CVE-2025-21891, CVE-2025-21968, CVE-2025-21936, CVE-2025-21995, CVE-2025-21922, CVE-2025-21930, CVE-2025-21894, CVE-2025-38477, CVE-2025-22011, CVE-2025-21991, CVE-2025-38618, CVE-2025-22003, CVE-2025-21903, CVE-2025-21986, CVE-2025-21941, CVE-2025-21951, CVE-2025-22004, CVE-2025-21929, CVE-2025-21917, CVE-2025-21915, CVE-2025-21977, CVE-2025-21875, CVE-2025-21959, CVE-2025-22017, CVE-2025-21881, CVE-2025-21937, CVE-2025-22009, CVE-2025-38350, CVE-2025-21944, CVE-2025-21918, CVE-2025-21947, CVE-2025-21883, CVE-2025-21892, CVE-2025-21966, CVE-2025-21950, CVE-2025-21926, CVE-2025-37954, CVE-2025-21999, CVE-2025-21992, CVE-2025-21948, CVE-2025-21960, CVE-2025-21924, CVE-2025-21873, CVE-2025-21895, CVE-2025-21946, CVE-2025-37889, CVE-2025-21978, CVE-2025-21905, CVE-2025-22010, CVE-2025-38683, CVE-2025-21898, CVE-2025-21910, CVE-2025-21994, CVE-2025-21996, CVE-2025-21972, CVE-2025-21912, CVE-2025-22005, CVE-2025-21909, CVE-2025-21957, CVE-2025-21964)