CVE-2025-21981

In the Linux kernel, the following vulnerability has been resolved:

ice: fix memory leak in aRFS after reset

Fix aRFS (accelerated Receive Flow Steering) structures memory leak by adding a checker to verify if aRFS memory is already allocated while configuring VSI. aRFS objects are allocated in two cases:

• as part of VSI initialization (at probe), and
• as part of reset handling

However, VSI reconfiguration executed during reset involves memory allocation one more time, without prior releasing already allocated resources. This led to the memory leak with the following signature:

[root@os-delivery ~]# cat /sys/kernel/debug/kmemleak unreferenced object 0xff3c1ca7252e6000 (size 8192): comm "kworker/0:0", pid 8, jiffies 4296833052 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 0): [<ffffffff991ec485>] __kmalloc_cache_noprof+0x275/0x340 [<ffffffffc0a6e06a>] ice_init_arfs+0x3a/0xe0 [ice] [<ffffffffc09f1027>] ice_vsi_cfg_def+0x607/0x850 [ice] [<ffffffffc09f244b>] ice_vsi_setup+0x5b/0x130 [ice] [<ffffffffc09c2131>] ice_init+0x1c1/0x460 [ice] [<ffffffffc09c64af>] ice_probe+0x2af/0x520 [ice] [<ffffffff994fbcd3>] local_pci_probe+0x43/0xa0 [<ffffffff98f07103>] work_for_cpu_fn+0x13/0x20 [<ffffffff98f0b6d9>] process_one_work+0x179/0x390 [<ffffffff98f0c1e9>] worker_thread+0x239/0x340 [<ffffffff98f14abc>] kthread+0xcc/0x100 [<ffffffff98e45a6d>] ret_from_fork+0x2d/0x50 [<ffffffff98e083ba>] ret_from_fork_asm+0x1a/0x30 ...

In the Linux kernel, the following vulnerability has been resolved: ice: fix memory leak in aRFS after reset Fix aRFS (accelerated Receive Flow Steering) structures memory leak by adding a checker to verify if aRFS memory is already allocated while configuring VSI. aRFS objects are allocated in two cases: - as part of VSI initialization (at probe), and - as part of reset handling However, VSI reconfiguration executed during reset involves memory allocation one more time, without prior releasing already allocated resources. This led to the memory leak with the following signature: [root@os-delivery ~]# cat /sys/kernel/debug/kmemleak unreferenced object 0xff3c1ca7252e6000 (size 8192): comm "kworker/0:0", pid 8, jiffies 4296833052 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 0): [<ffffffff991ec485>] __kmalloc_cache_noprof+0x275/0x340 [<ffffffffc0a6e06a>] ice_init_arfs+0x3a/0xe0 [ice] [<ffffffffc09f1027>] ice_vsi_cfg_def+0x607/0x850 [ice] [<ffffffffc09f244b>] ice_vsi_setup+0x5b/0x130 [ice] [<ffffffffc09c2131>] ice_init+0x1c1/0x460 [ice] [<ffffffffc09c64af>] ice_probe+0x2af/0x520 [ice] [<ffffffff994fbcd3>] local_pci_probe+0x43/0xa0 [<ffffffff98f07103>] work_for_cpu_fn+0x13/0x20 [<ffffffff98f0b6d9>] process_one_work+0x179/0x390 [<ffffffff98f0c1e9>] worker_thread+0x239/0x340 [<ffffffff98f14abc>] kthread+0xcc/0x100 [<ffffffff98e45a6d>] ret_from_fork+0x2d/0x50 [<ffffffff98e083ba>] ret_from_fork_asm+0x1a/0x30 ...

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:kernel/resource: fix kfree() of bootmem memory againSince commit ebff7d8f270d ( mem hotunplug: fix kfree() of bootmemmemory ), we could get a resource allocated during boot viaalloc_resource(). And it s required to release the resource usingfree_resource(). Howerver, many people use kfree directly which willresult in kernel BUG. In order to fix this without fixing every callsite, just leak a couple of bytes in such corner case.(CVE-2022-49190)

In the Linux kernel, the following vulnerability has been resolved:drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback()There is a deadlock in rtw_surveydone_event_callback(),which is shown below: (Thread 1) | (Thread 2) | _set_timer()rtw_surveydone_event_callback()| mod_timer() spin_lock_bh() //(1) | (wait a time) ... | rtw_scan_timeout_handler() del_timer_sync() | spin_lock_bh() //(2) (wait timer to stop) | ...We hold pmlmepriv->lock in position (1) of thread 1 and usedel_timer_sync() to wait timer to stop, but timer handleralso need pmlmepriv->lock in position (2) of thread 2.As a result, rtw_surveydone_event_callback() will block forever.This patch extracts del_timer_sync() from the protection ofspin_lock_bh(), which could let timer handler to obtainthe needed lock. What`s more, we change spin_lock_bh() inrtw_scan_timeout_handler() to spin_lock_irq(). Otherwise,spin_lock_bh() will also cause deadlock() in timer handler.(CVE-2022-49309)

In the Linux kernel, the following vulnerability has been resolved:

drm/scheduler: fix fence ref counting

We leaked dependency fences when processes were beeing killed.

Additional to that grab a reference to the last scheduled fence.(CVE-2022-49829)

In the Linux kernel, the following vulnerability has been resolved:

usb: cdns3: fix random warning message when driver load

Warning log: [ 4.141392] Unexpected gfp: 0x4 (GFP_DMA32). Fixing up to gfp: 0xa20 (GFP_ATOMIC). Fix your code! [ 4.150340] CPU: 1 PID: 175 Comm: 1-0050 Not tainted 5.15.5-00039-g2fd9ae1b568c #20 [ 4.158010] Hardware name: Freescale i.MX8QXP MEK (DT) [ 4.163155] Call trace: [ 4.165600] dump_backtrace+0x0/0x1b0 [ 4.169286] show_stack+0x18/0x68 [ 4.172611] dump_stack_lvl+0x68/0x84 [ 4.176286] dump_stack+0x18/0x34 [ 4.179613] kmalloc_fix_flags+0x60/0x88 [ 4.183550] new_slab+0x334/0x370 [ 4.186878] ___slab_alloc.part.108+0x4d4/0x748 [ 4.191419] __slab_alloc.isra.109+0x30/0x78 [ 4.195702] kmem_cache_alloc+0x40c/0x420 [ 4.199725] dma_pool_alloc+0xac/0x1f8 [ 4.203486] cdns3_allocate_trb_pool+0xb4/0xd0

pool_alloc_page(struct dma_pool *pool, gfp_t mem_flags) { ... page = kmalloc(sizeof(*page), mem_flags); page->vaddr = dma_alloc_coherent(pool->dev, pool->allocation, &page->dma, mem_flags); ... }

kmalloc was called with mem_flags, which is passed down in cdns3_allocate_trb_pool() and have GFP_DMA32 flags. kmall_fix_flags() report warning.

GFP_DMA32 is not useful at all. dma_alloc_coherent() will handle DMA memory region correctly by pool->dev. GFP_DMA32 can be removed safely.(CVE-2022-50151)

In the Linux kernel, the following vulnerability has been resolved:

of: check previous kernel's ima-kexec-buffer against memory bounds

Presently ima_get_kexec_buffer() doesn't check if the previous kernel's ima-kexec-buffer lies outside the addressable memory range. This can result in a kernel panic if the new kernel is booted with 'mem=X' arg and the ima-kexec-buffer was allocated beyond that range by the previous kernel. The panic is usually of the form below:

$ sudo kexec --initrd initrd vmlinux --append='mem=16G'

<snip> BUG: Unable to handle kernel data access on read at…

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MMWe currently assume that there is at least one VMA in a MM, which isn ttrue.So we might end up having find_vma() return NULL, to then de-referenceNULL. So properly handle find_vma() returning NULL.This fixes the report:Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTIKASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]CPU: 1 UID: 0 PID: 6021 Comm: syz-executor284 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024RIP: 0010:migrate_to_node mm/mempolicy.c:1090 [inline]RIP: 0010:do_migrate_pages+0x403/0x6f0 mm/mempolicy.c:1194Code: ...RSP: 0018:ffffc9000375fd08 EFLAGS: 00010246RAX: 0000000000000000 RBX: ffffc9000375fd78 RCX: 0000000000000000RDX: ffff88807e171300 RSI: dffffc0000000000 RDI: ffff88803390c044RBP: ffff88807e171428 R08: 0000000000000014 R09: fffffbfff2039ef1R10: ffffffff901cf78f R11: 0000000000000000 R12: 0000000000000003R13: ffffc9000375fe90 R14: ffffc9000375fe98 R15: ffffc9000375fdf8FS: 00005555919e1380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033CR2: 00005555919e1ca8 CR3: 000000007f12a000 CR4: 00000000003526f0DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400Call Trace: <TASK> kernel_migrate_pages+0x5b2/0x750 mm/mempolicy.c:1709 __do_sys_migrate_pages mm/mempolicy.c:1727 [inline] __se_sys_migrate_pages mm/mempolicy.c:1723 [inline] __x64_sys_migrate_pages+0x96/0x100 mm/mempolicy.c:1723 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/[email protected]: add unlikely()

In the Linux kernel, the following vulnerability has been resolved:

PCI/MSI: Handle lack of irqdomain gracefully

Alexandre observed a warning emitted from pci_msi_setup_msi_irqs() on a RISCV platform which does not provide PCI/MSI support:

WARNING: CPU: 1 PID: 1 at drivers/pci/msi/msi.h:121 pci_msi_setup_msi_irqs+0x2c/0x32 __pci_enable_msix_range+0x30c/0x596 pci_msi_setup_msi_irqs+0x2c/0x32 pci_alloc_irq_vectors_affinity+0xb8/0xe2

RISCV uses hierarchical interrupt domains and correctly does not implement the legacy fallback. The warning triggers from the legacy fallback stub.

That warning is bogus as the PCI/MSI layer knows whether a PCI/MSI parent domain is associated with the device or not. There is a check for MSI-X, which has a legacy assumption. But that legacy fallback assumption is only valid when legacy support is enabled, but otherwise the check should simply return -ENOTSUPP.

Loongarch tripped over the same problem and blindly enabled legacy support without implementing the legacy fallbacks. There are weak implementations which return an error, so the problem was papered over.

Correct pci_msi_domain_supports() to evaluate the legacy mode and add the missing supported check into the MSI enable path to complete it.(CVE-2024-56760)

In the Linux kernel, the following vulnerability has been resolved:

NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback

Add PF_KCOMPACTD flag and current_is_kcompactd() helper to check for it so nfs_release_folio() can skip calling nfs_wb_folio() from kcompactd.

Otherwise NFS can deadlock waiting for kcompactd enduced writeback which recurses back to NFS (which triggers writeback to NFSD via NFS loopback mount on the same host, NFSD blocks waiting for XFS's call to __filemap_get_folio):

6070.550357] INFO: task kcompactd0:58 blocked for more than 4435 seconds.

{--- [58] "kcompactd0" [<0>]…

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MMWe currently assume that there is at least one VMA in a MM, which isn ttrue.So we might end up having find_vma() return NULL, to then de-referenceNULL. So properly handle find_vma() returning NULL.This fixes the report:Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTIKASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]CPU: 1 UID: 0 PID: 6021 Comm: syz-executor284 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024RIP: 0010:migrate_to_node mm/mempolicy.c:1090 [inline]RIP: 0010:do_migrate_pages+0x403/0x6f0 mm/mempolicy.c:1194Code: ...RSP: 0018:ffffc9000375fd08 EFLAGS: 00010246RAX: 0000000000000000 RBX: ffffc9000375fd78 RCX: 0000000000000000RDX: ffff88807e171300 RSI: dffffc0000000000 RDI: ffff88803390c044RBP: ffff88807e171428 R08: 0000000000000014 R09: fffffbfff2039ef1R10: ffffffff901cf78f R11: 0000000000000000 R12: 0000000000000003R13: ffffc9000375fe90 R14: ffffc9000375fe98 R15: ffffc9000375fdf8FS: 00005555919e1380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033CR2: 00005555919e1ca8 CR3: 000000007f12a000 CR4: 00000000003526f0DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400Call Trace: <TASK> kernel_migrate_pages+0x5b2/0x750 mm/mempolicy.c:1709 __do_sys_migrate_pages mm/mempolicy.c:1727 [inline] __se_sys_migrate_pages mm/mempolicy.c:1723 [inline] __x64_sys_migrate_pages+0x96/0x100 mm/mempolicy.c:1723 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/[email protected]: add unlikely()

In the Linux kernel, the following vulnerability has been resolved:

PCI/MSI: Handle lack of irqdomain gracefully

Alexandre observed a warning emitted from pci_msi_setup_msi_irqs() on a RISCV platform which does not provide PCI/MSI support:

WARNING: CPU: 1 PID: 1 at drivers/pci/msi/msi.h:121 pci_msi_setup_msi_irqs+0x2c/0x32 __pci_enable_msix_range+0x30c/0x596 pci_msi_setup_msi_irqs+0x2c/0x32 pci_alloc_irq_vectors_affinity+0xb8/0xe2

RISCV uses hierarchical interrupt domains and correctly does not implement the legacy fallback. The warning triggers from the legacy fallback stub.

That warning is bogus as the PCI/MSI layer knows whether a PCI/MSI parent domain is associated with the device or not. There is a check for MSI-X, which has a legacy assumption. But that legacy fallback assumption is only valid when legacy support is enabled, but otherwise the check should simply return -ENOTSUPP.

Loongarch tripped over the same problem and blindly enabled legacy support without implementing the legacy fallbacks. There are weak implementations which return an error, so the problem was papered over.

Correct pci_msi_domain_supports() to evaluate the legacy mode and add the missing supported check into the MSI enable path to complete it.(CVE-2024-56760)

In the Linux kernel, the following vulnerability has been resolved:

NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback

Add PF_KCOMPACTD flag and current_is_kcompactd() helper to check for it so nfs_release_folio() can skip calling nfs_wb_folio() from kcompactd.

Otherwise NFS can deadlock waiting for kcompactd enduced writeback which recurses back to NFS (which triggers writeback to NFSD via NFS loopback mount on the same host, NFSD blocks waiting for XFS's call to __filemap_get_folio):

6070.550357] INFO: task kcompactd0:58 blocked for more than 4435 seconds.

{--- [58] "kcompactd0" [<0>]…

Root has patched CVE-2025-21981 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

In the Linux kernel, the following vulnerability has been resolved: ice: fix memory leak in aRFS after reset Fix aRFS (accelerated Receive Flow Steering) structures memory leak by adding a checker to verify if aRFS memory is already allocated while configuring VSI. aRFS objects are allocated in two cases: - as part of VSI initialization (at probe), and - as part of reset handling However, VSI reconfiguration executed during reset involves memory allocation one more time, without prior releasing already allocated resources. This led to the memory leak with the following signature: [root@os-delivery ~]# cat /sys/kernel/debug/kmemleak unreferenced object 0xff3c1ca7252e6000 (size 8192): comm "kworker/0:0", pid 8, jiffies 4296833052 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 0): [<ffffffff991ec485>] __kmalloc_cache_noprof+0x275/0x340 [<ffffffffc0a6e06a>] ice_init_arfs+0x3a/0xe0 [ice] [<ffffffffc09f1027>] ice_vsi_cfg_def+0x607/0x850 [ice] [<ffffffffc09f244b>] ice_vsi_setup+0x5b/0x130 [ice] [<ffffffffc09c2131>] ice_init+0x1c1/0x460 [ice] [<ffffffffc09c64af>] ice_probe+0x2af/0x520 [ice] [<ffffffff994fbcd3>] local_pci_probe+0x43/0xa0 [<ffffffff98f07103>] work_for_cpu_fn+0x13/0x20 [<ffffffff98f0b6d9>] process_one_work+0x179/0x390 [<ffffffff98f0c1e9>] worker_thread+0x239/0x340 [<ffffffff98f14abc>] kthread+0xcc/0x100 [<ffffffff98e45a6d>] ret_from_fork+0x2d/0x50 [<ffffffff98e083ba>] ret_from_fork_asm+0x1a/0x30 ...

• net: skbuff: propagate shared-frag marker through pskb_copy()
• mptcp: always handle address removal under msk socket lock {CVE-2025-21875}
• uprobes: Reject the shared zeropage in uprobe_write_opcode() {CVE-2025-21881}
• net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error {CVE-2025-21924}
• wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() {CVE-2025-21744}
• mptcp: fix NULL pointer in can_accept_new_subflow {CVE-2025-23145}
• bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock {CVE-2025-21951}
• blk-cgroup: Fix class @block_class's subsystem refcount leakage {CVE-2025-21745}
• net/mlx5: handle errors in mlx5_chains_create_table() {CVE-2025-21975}
• USB: hub: Ignore non-compliant devices with too many configs or interfaces {CVE-2025-21776}
• wifi: iwlwifi: don't warn when if there is a FW error {CVE-2025-38096}
• ice: fix memory leak in aRFS after reset {CVE-2025-21981}
• KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel {CVE-2025-21779}
• Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken {CVE-2025-38099}
• regulator: check that dummy regulator has been probed before using it {CVE-2025-22008}
• acpi: nfit: fix narrowing conversion in acpi_nfit_ctl {CVE-2025-22044}
• drm/scheduler: signal scheduled fence when kill job {CVE-2025-38436}
• nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request {CVE-2025-38430}
• net: decrease cached dst counters in dst_release {CVE-2025-22057}
• bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT {CVE-2025-38439}
• net: fix NULL pointer dereference in l3mdev_l3_rcv {CVE-2025-22103}
• dlm: prevent NPD when writing a positive value to event_done {CVE-2025-23131}
• drm/amd/display: fix a Null pointer dereference vulnerability {CVE-2025-39705}
• net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree {CVE-2025-38468}
• drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params {CVE-2025-21941}
• drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities {CVE-2025-39707}
• HID: appleir: Fix potential NULL dereference at raw event handle {CVE-2025-21948}
• usb: net: sierra: check for no status endpoint {CVE-2025-38474}
• drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() {CVE-2025-21996}
• wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() {CVE-2025-38643}
• netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets {CVE-2025-22063}
• vxlan: Fix NPD when refreshing an FDB entry with a nexthop object {CVE-2025-39851}
• thermal: int340x: Add NULL check for adev {CVE-2025-23136}
• Bluetooth: l2cap: Check encryption key size on incoming connection {CVE-2025-39889}
• dm thin: make get_first_thin use rcu-safe list first function {CVE-2025-21664}
• tracing: Add down_write(trace_event_sem) when adding trace event {CVE-2025-38539}
• usbnet: Fix using smp_processor_id() in preemptible code warnings {CVE-2025-40164}
• bpf: Send signals asynchronously if !preemptible {CVE-2025-21728}
• ima: Fix a potential integer overflow in ima_appraise_measurement {CVE-2022-49643}
• dm-stripe: fix a possible integer overflow {CVE-2025-39940}
• usbnet: gl620a: fix endpoint checking in genelink_bind() {CVE-2025-21877}
• fs: dlm: fix use after free in midcomms commit {CVE-2023-53629}
• usbnet: fix memory leak in error case {CVE-2022-49657}
• wifi: nl80211: reject cooked mode if it is set along with other flags {CVE-2025-21909}
• can: j1939: j1939_send_one(): fix missing CAN header initialization {CVE-2022-49845}
• ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494}
• posix-clock: Fix missing timespec64 check in pc_clock_settime() {CVE-2024-50195}
• net_sched: Prevent creation of classes with TC_H_ROOT {CVE-2025-21971}
• mm/slub: avoid accessing metadata when pointer is invalid in object_err() {CVE-2025-39902}
• RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow…

• net/sched: fix pedit partial COW leading to page cache corruption {CVE-2026-46331}
• unshare: fix unshare_fs() handling {CVE-2026-43472}
• net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() {CVE-2026-31423}
• net/sched: cls_flow: fix NULL pointer dereference on shared blocks {CVE-2026-31422}
• net/sched: cls_fw: fix NULL pointer dereference on shared blocks {CVE-2026-31421}
• dm: fix queue start/stop imbalance under suspend/load/resume races {CVE-2025-40134}
• ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() {CVE-2024-26773}
• ext4: fix i_data_sem unlock order in ext4_ind_migrate() {CVE-2024-50006}
• xen: Fix the issue of resource not being properly released in xenbus_dev_probe() {CVE-2024-53198}
• HID: pidff: Fix null pointer dereference in pidff_find_fields {CVE-2025-37862}
• crypto: af_alg - Set merge to zero early in af_alg_sendmsg {CVE-2025-39931}
• x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper {CVE-2025-39681}
• can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak {CVE-2026-23061}
• bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change {CVE-2023-53103}
• NFS: Fix a potential data corruption {CVE-2023-53711}
• NFS: Fix a use after free in nfs_direct_join_group() {CVE-2023-53711}
• hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47386}
• scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload {CVE-2024-36919}
• x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type {CVE-2023-52659}
• Input: uinput - reject requests with unreasonable number of slots {CVE-2024-46745}
• afs: Fix the maximum cell name length {CVE-2025-21646}
• drm/i915: Avoid potential vm use-after-free {CVE-2023-52931}
• interconnect: fix mem leak when freeing nodes {CVE-2023-53096}
• drm/vkms: Fix memory leak in vkms_init() {CVE-2022-50269}
• USB: dwc3: fix memory leak with using debugfs_lookup() {CVE-2023-53415}
• mm/uffd: fix pte marker when fork() without fork event {CVE-2022-49744}
• scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() {CVE-2023-53696}
• ipmi_si: fix a memleak in try_smi_init() {CVE-2023-53611}
• KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() {CVE-2024-58083}
• scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() {CVE-2024-36924}
• firmware: cs_dsp: Validate payload length before processing block {CVE-2024-42237}
• hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47385}
• ftrace: Avoid potential division by zero in function_stat_show() {CVE-2025-21898}
• IB/core: Implement a limit on UMAD receive List {CVE-2024-42145}
• vfio/pci: Disable auto-enable of exclusive INTx IRQ {CVE-2024-27437}
• netfilter: nf_tables: reject duplicate device on updates {CVE-2025-38678}
• PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type {CVE-2025-23161}
• net: nexthop: Initialize all fields in dumped nexthops {CVE-2024-42283}
• tracing: Make sure trace_printk() can output as soon as it can be used {CVE-2023-53007}
• net: tls: explicitly disallow disconnect {CVE-2025-37756}
• KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel {CVE-2025-21779}
• ext4: turn quotas off if mount failed after enabling quotas {CVE-2023-54153}
• NFC: digital: Bounds check NFC-A cascade depth in SDD response handler {CVE-2026-31622}
• block: fix overflow in blk_ioctl_discard() {CVE-2024-36917}
• usb: xhci: Check endpoint is valid before dereferencing it {CVE-2023-52901}
• iio: core: fix memleak in iio_device_register_sysfs {CVE-2023-52643}
• platform/x86/amd/pmc: Detect when STB is not available {CVE-2024-53072}
• mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() {CVE-2023-52939}
• dm thin: make get_first_thin use rcu-safe list first function {CVE-2025-21664}
• bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock {CVE-2025-21951}
• bonding: provide a net pointer to…

Upstream kernel version 6.6.87 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kernel. For information about the vulnerabilities see the links.

Vanilla upstream kernel version 6.6.88 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
• CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
• CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
• CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
• CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
• CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
• CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
• CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510).
• CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
• CVE-2025-21696: mm: clear uffd-wp PTE/PMD state on mremap() (bsc#1237111).
• CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
• CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
• CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
• CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
• CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
• CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
• CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
• CVE-2025-21808: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742).
• CVE-2025-21812: ax25: rcu protect dev->ax25_ptr (bsc#1238471).
• CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (bsc#1239108).
• CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
• CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
• CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
• CVE-2025-21867: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181).
• CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
• CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
• CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
• CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
• CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
• CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
• CVE-2025-21894: net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC (bsc#1240581).
• CVE-2025-21895: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (bsc#1240585).
• CVE-2025-21904: caif_virtio: fix wrong pointer check in cfv_probe() (bsc#1240576).
• CVE-2025-21906: wifi: iwlwifi: mvm: clean up ROC on failure (bsc#1240587).
• CVE-2025-21908: NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (bsc#1240600).
• CVE-2025-21913: x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (bsc#1240591).
• CVE-2025-21922: ppp: Fix KMSAN uninit-value warning with bpf (bsc#1240639).
• CVE-2025-21924: net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error (bsc#1240720). -…

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-27415: netfilter: bridge: confirm multicast packets before passing them up the stack (bsc#1224757).
• CVE-2024-28956: Intel CPU: Indirect Target Selection (ITS) (bsc#1242006).
• CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
• CVE-2024-46763: fou: Fix null-ptr-deref in GRO (bsc#1230764).
• CVE-2024-50038: netfilter: xtables: avoid NFPROTO_UNSPEC where needed (bsc#1231910).
• CVE-2024-50162: bpf: devmap: provide rxq after redirect (bsc#1233075).
• CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
• CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
• CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
• CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
• CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
• CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510).
• CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
• CVE-2025-21696: mm: clear uffd-wp PTE/PMD state on mremap() (bsc#1237111).
• CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
• CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
• CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
• CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
• CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
• CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
• CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
• CVE-2025-21808: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742).
• CVE-2025-21812: ax25: rcu protect dev->ax25_ptr (bsc#1238471).
• CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (bsc#1239108).
• CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
• CVE-2025-21854: sockmap, vsock: For connectible sockets allow only connected (bsc#1239470).
• CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
• CVE-2025-21867: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181).
• CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
• CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
• CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
• CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
• CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
• CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
• CVE-2025-21894: net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC (bsc#1240581).
• CVE-2025-21895: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (bsc#1240585).
• CVE-2025-21904: caif_virtio: fix wrong pointer check in cfv_probe() (bsc#1240576).
• CVE-2025-21906: wifi: iwlwifi: mvm: clean up ROC on failure (bsc#1240587).
• CVE-2025-21908: NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (bsc#1240600).
• CVE-2025-21913: x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (bsc#1240591).
• CVE-2025-21922: ppp: Fix KMSAN uninit-value warning with bpf (bsc#1240639).…

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
• CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
• CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-43869: perf: Fix hang while freeing sigtrap event (bsc#1229491).
• CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
• CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
• CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
• CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
• CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
• CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
• CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
• CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
• CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
• CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
• CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086). -…

The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
• CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
• CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49570: drm/xe/tracing: Fix a potential TP_printk UAF (bsc#1238782).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
• CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
• CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
• CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
• CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
• CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
• CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
• CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
• CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
• CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
• CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
• CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
• CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
• CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
• CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
• CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
• CVE-2024-58074: drm/i915: Grab intel_display from the encoder to avoid potential (bsc#1238972).
• CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
• CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510). -…

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
• CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
• CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
• CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
• CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
• CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
• CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
• CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
• CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
• CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
• CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510).
• CVE-2025-21648: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (bsc#1236142).
• CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
• CVE-2025-21696: mm: clear uffd-wp PTE/PMD state on mremap() (bsc#1237111).
• CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
• CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
• CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
• CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
• CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
• CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
• CVE-2025-21787: team: better TEAM_OPTION_TYPE_STRING validation (bsc#1238774).
• CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
• CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
• CVE-2025-21808: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742).
• CVE-2025-21812: ax25: rcu protect dev->ax25_ptr (bsc#1238471).
• CVE-2025-21814: ptp: Ensure info->enable callback is always set (bsc#1238473).
• CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (bsc#1239108).
• CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
• CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
• CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
• CVE-2025-21867: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181).
• CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
• CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
• CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
• CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
• CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
• CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
• CVE-2025-21894: net: enetc: VFs do not…

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
• CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
• CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49570: drm/xe/tracing: Fix a potential TP_printk UAF (bsc#1238782).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
• CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
• CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
• CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
• CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
• CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
• CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
• CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
• CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
• CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
• CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
• CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
• CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
• CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
• CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
• CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
• CVE-2024-58074: drm/i915: Grab intel_display from the encoder to avoid potential (bsc#1238972).
• CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
• CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510). -…

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
• CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
• CVE-2024-35910: kABI fix for tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
• CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
• CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
• CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
• CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
• CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
• CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
• CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free…

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
• CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
• CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
• CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
• CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
• CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
• CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
• CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
• CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
• CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
• CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
• CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
• CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
• CVE-2025-21894: net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC (bsc#1240581).
• CVE-2025-21895: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (bsc#1240585).
• CVE-2025-21906: wifi: iwlwifi: mvm: clean up ROC on failure (bsc#1240587).
• CVE-2025-21908: NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (bsc#1240600).
• CVE-2025-21913: x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (bsc#1240591).
• CVE-2025-21922: ppp: Fix KMSAN uninit-value warning with bpf (bsc#1240639).
• CVE-2025-21924: net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error (bsc#1240720).
• CVE-2025-21957: scsi: qla1280: Fix kernel oops when debug level > 2 (bsc#1240742).
• CVE-2025-21960: eth: bnxt: do not update checksum in bnxt_xdp_build_skb() (bsc#1240815).
• CVE-2025-21961: eth: bnxt: fix truesize for mb-xdp-pass case (bsc#1240816).
• CVE-2025-21969: kABI workaround for l2cap_conn changes (bsc#1240784).
• CVE-2025-21970: net/mlx5: Bridge, fix the crash caused by LAG state check (bsc#1240819).
• CVE-2025-21972: net: mctp: unshare packets when reassembling (bsc#1240813).
• CVE-2025-21975: net/mlx5: handle errors in mlx5_chains_create_table() (bsc#1240812).
• CVE-2025-21981: ice: fix memory leak in aRFS after reset (bsc#1240612).
• CVE-2025-21991: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (bsc#1240795).
• CVE-2025-21993: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (bsc#1240797).
• CVE-2025-2312: CIFS: New mount option for cifs.upcall namespace resolution (bsc#1239684).

The following non-security bugs were fixed:

• ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP (stable-fixes).
• ACPI: x86: Extend Lenovo Yoga Tab 3 quirk with skip GPIO event-handlers (git-fixes).
• ALSA: hda/realtek: Fix built-in mic breakage on ASUS VivoBook X515JA (git-fixes).
• ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model (git-fixes).
• ASoC: imx-card: Add NULL check in imx_card_probe() (git-fixes).
• ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns (git-fixes).
• ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment (git-fixes).
• ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path (git-fixes).
• HID:…

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
• CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
• CVE-2024-35910: kABI fix for tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
• CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
• CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
• CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
• CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
• CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
• CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
• CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free…

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
• CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
• CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
• CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
• CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
• CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
• CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
• CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
• CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
• CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
• CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
• CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
• CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
• CVE-2025-21894: net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC (bsc#1240581).
• CVE-2025-21895: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (bsc#1240585).
• CVE-2025-21906: wifi: iwlwifi: mvm: clean up ROC on failure (bsc#1240587).
• CVE-2025-21908: NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (bsc#1240600).
• CVE-2025-21913: x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (bsc#1240591).
• CVE-2025-21922: ppp: Fix KMSAN uninit-value warning with bpf (bsc#1240639).
• CVE-2025-21924: net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error (bsc#1240720).
• CVE-2025-21957: scsi: qla1280: Fix kernel oops when debug level > 2 (bsc#1240742).
• CVE-2025-21960: eth: bnxt: do not update checksum in bnxt_xdp_build_skb() (bsc#1240815).
• CVE-2025-21961: eth: bnxt: fix truesize for mb-xdp-pass case (bsc#1240816).
• CVE-2025-21969: kABI workaround for l2cap_conn changes (bsc#1240784).
• CVE-2025-21970: net/mlx5: Bridge, fix the crash caused by LAG state check (bsc#1240819).
• CVE-2025-21972: net: mctp: unshare packets when reassembling (bsc#1240813).
• CVE-2025-21975: net/mlx5: handle errors in mlx5_chains_create_table() (bsc#1240812).
• CVE-2025-21981: ice: fix memory leak in aRFS after reset (bsc#1240612).
• CVE-2025-21991: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (bsc#1240795).
• CVE-2025-21993: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (bsc#1240797).
• CVE-2025-2312: CIFS: New mount option for cifs.upcall namespace resolution (bsc#1239684).

The following non-security bugs were fixed:

• ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP (stable-fixes).
• ACPI: x86: Extend Lenovo Yoga Tab 3 quirk with skip GPIO event-handlers (git-fixes).
• ALSA: hda/realtek: Fix built-in mic breakage on ASUS VivoBook X515JA (git-fixes).
• ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model (git-fixes).
• ASoC: imx-card: Add NULL check in imx_card_probe() (git-fixes).
• ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns (git-fixes).
• ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment (git-fixes).
• ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path (git-fixes).
• HID:…

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PowerPC architecture;
• x86 architecture;
• ACPI drivers;
• Clock framework and drivers;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• PCI subsystem;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• QCOM SoC drivers;
• Thermal drivers;
• BTRFS file system;
• Ext4 file system;
• JFS file system;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• File systems infrastructure;
• Proc file system;
• SMB network file system;
• IPv6 networking;
• RDMA verbs API;
• SoC audio core drivers;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• Netfilter;
• Network traffic control;
• SMC sockets;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-23138, CVE-2025-21956, CVE-2025-21970, CVE-2025-22025, CVE-2024-46753, CVE-2025-21962, CVE-2025-37889, CVE-2025-21992, CVE-2025-39728, CVE-2025-22054, CVE-2025-21959, CVE-2024-53144, CVE-2022-49728, CVE-2024-58093, CVE-2025-38637, CVE-2025-21981, CVE-2025-21963, CVE-2025-21968, CVE-2025-22014, CVE-2024-46812, CVE-2025-22005, CVE-2025-21994, CVE-2025-22071, CVE-2025-22008, CVE-2022-49636, CVE-2025-22007, CVE-2023-53034, CVE-2025-22035, CVE-2025-22010, CVE-2025-22081, CVE-2025-22021, CVE-2024-46821, CVE-2025-21999, CVE-2025-38575, CVE-2025-22073, CVE-2025-22004, CVE-2024-42230, CVE-2025-21941, CVE-2024-56664, CVE-2025-22044, CVE-2025-39735, CVE-2025-22060, CVE-2025-22055, CVE-2025-21957, CVE-2025-21975, CVE-2025-22075, CVE-2025-22089, CVE-2025-37937, CVE-2025-38152, CVE-2025-22020, CVE-2025-22066, CVE-2025-22056, CVE-2025-22050, CVE-2025-21964, CVE-2025-21996, CVE-2025-22079, CVE-2025-23136, CVE-2025-22063, CVE-2024-36945, CVE-2025-22097, CVE-2025-37785, CVE-2025-21991, CVE-2025-22086, CVE-2025-22045, CVE-2025-22018)

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PowerPC architecture;
• x86 architecture;
• ACPI drivers;
• Clock framework and drivers;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• PCI subsystem;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• QCOM SoC drivers;
• Thermal drivers;
• BTRFS file system;
• Ext4 file system;
• JFS file system;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• File systems infrastructure;
• Proc file system;
• SMB network file system;
• IPv6 networking;
• RDMA verbs API;
• SoC audio core drivers;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• Netfilter;
• Network traffic control;
• SMC sockets;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-23138, CVE-2025-21956, CVE-2025-21970, CVE-2025-22025, CVE-2024-46753, CVE-2025-21962, CVE-2025-37889, CVE-2025-21992, CVE-2025-39728, CVE-2025-22054, CVE-2025-21959, CVE-2024-53144, CVE-2022-49728, CVE-2024-58093, CVE-2025-38637, CVE-2025-21981, CVE-2025-21963, CVE-2025-21968, CVE-2025-22014, CVE-2024-46812, CVE-2025-22005, CVE-2025-21994, CVE-2025-22071, CVE-2025-22008, CVE-2022-49636, CVE-2025-22007, CVE-2023-53034, CVE-2025-22035, CVE-2025-22010, CVE-2025-22081, CVE-2025-22021, CVE-2024-46821, CVE-2025-21999, CVE-2025-38575, CVE-2025-22073, CVE-2025-22004, CVE-2024-42230, CVE-2025-21941, CVE-2024-56664, CVE-2025-22044, CVE-2025-39735, CVE-2025-22060, CVE-2025-22055, CVE-2025-21957, CVE-2025-21975, CVE-2025-22075, CVE-2025-22089, CVE-2025-37937, CVE-2025-38152, CVE-2025-22020, CVE-2025-22066, CVE-2025-22056, CVE-2025-22050, CVE-2025-21964, CVE-2025-21996, CVE-2025-22079, CVE-2025-23136, CVE-2025-22063, CVE-2024-36945, CVE-2025-22097, CVE-2025-37785, CVE-2025-21991, CVE-2025-22086, CVE-2025-22045, CVE-2025-22018)

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PowerPC architecture;
• x86 architecture;
• ACPI drivers;
• Clock framework and drivers;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• PCI subsystem;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• QCOM SoC drivers;
• Thermal drivers;
• BTRFS file system;
• Ext4 file system;
• JFS file system;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• File systems infrastructure;
• Proc file system;
• SMB network file system;
• IPv6 networking;
• RDMA verbs API;
• SoC audio core drivers;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• Netfilter;
• Network traffic control;
• SMC sockets;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-23138, CVE-2025-21956, CVE-2025-21970, CVE-2025-22025, CVE-2024-46753, CVE-2025-21962, CVE-2025-37889, CVE-2025-21992, CVE-2025-39728, CVE-2025-22054, CVE-2025-21959, CVE-2024-53144, CVE-2022-49728, CVE-2024-58093, CVE-2025-38637, CVE-2025-21981, CVE-2025-21963, CVE-2025-21968, CVE-2025-22014, CVE-2024-46812, CVE-2025-22005, CVE-2025-21994, CVE-2025-22071, CVE-2025-22008, CVE-2022-49636, CVE-2025-22007, CVE-2023-53034, CVE-2025-22035, CVE-2025-22010, CVE-2025-22081, CVE-2025-22021, CVE-2024-46821, CVE-2025-21999, CVE-2025-38575, CVE-2025-22073, CVE-2025-22004, CVE-2024-42230, CVE-2025-21941, CVE-2024-56664, CVE-2025-22044, CVE-2025-39735, CVE-2025-22060, CVE-2025-22055, CVE-2025-21957, CVE-2025-21975, CVE-2025-22075, CVE-2025-22089, CVE-2025-37937, CVE-2025-38152, CVE-2025-22020, CVE-2025-22066, CVE-2025-22056, CVE-2025-22050, CVE-2025-21964, CVE-2025-21996, CVE-2025-22079, CVE-2025-23136, CVE-2025-22063, CVE-2024-36945, CVE-2025-22097, CVE-2025-37785, CVE-2025-21991, CVE-2025-22086, CVE-2025-22045, CVE-2025-22018)

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PowerPC architecture;
• x86 architecture;
• ACPI drivers;
• Clock framework and drivers;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• PCI subsystem;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• QCOM SoC drivers;
• Thermal drivers;
• BTRFS file system;
• Ext4 file system;
• JFS file system;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• File systems infrastructure;
• Proc file system;
• SMB network file system;
• IPv6 networking;
• RDMA verbs API;
• SoC audio core drivers;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• Netfilter;
• Network traffic control;
• SMC sockets;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-23138, CVE-2025-21956, CVE-2025-21970, CVE-2025-22025, CVE-2024-46753, CVE-2025-21962, CVE-2025-37889, CVE-2025-21992, CVE-2025-39728, CVE-2025-22054, CVE-2025-21959, CVE-2024-53144, CVE-2022-49728, CVE-2024-58093, CVE-2025-38637, CVE-2025-21981, CVE-2025-21963, CVE-2025-21968, CVE-2025-22014, CVE-2024-46812, CVE-2025-22005, CVE-2025-21994, CVE-2025-22071, CVE-2025-22008, CVE-2022-49636, CVE-2025-22007, CVE-2023-53034, CVE-2025-22035, CVE-2025-22010, CVE-2025-22081, CVE-2025-22021, CVE-2024-46821, CVE-2025-21999, CVE-2025-38575, CVE-2025-22073, CVE-2025-22004, CVE-2024-42230, CVE-2025-21941, CVE-2024-56664, CVE-2025-22044, CVE-2025-39735, CVE-2025-22060, CVE-2025-22055, CVE-2025-21957, CVE-2025-21975, CVE-2025-22075, CVE-2025-22089, CVE-2025-37937, CVE-2025-38152, CVE-2025-22020, CVE-2025-22066, CVE-2025-22056, CVE-2025-22050, CVE-2025-21964, CVE-2025-21996, CVE-2025-22079, CVE-2025-23136, CVE-2025-22063, CVE-2024-36945, CVE-2025-22097, CVE-2025-37785, CVE-2025-21991, CVE-2025-22086, CVE-2025-22045, CVE-2025-22018)

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PowerPC architecture;
• x86 architecture;
• ACPI drivers;
• Clock framework and drivers;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• PCI subsystem;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• QCOM SoC drivers;
• Thermal drivers;
• BTRFS file system;
• Ext4 file system;
• JFS file system;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• File systems infrastructure;
• Proc file system;
• SMB network file system;
• IPv6 networking;
• RDMA verbs API;
• SoC audio core drivers;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• Netfilter;
• Network traffic control;
• SMC sockets;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-23138, CVE-2025-21956, CVE-2025-21970, CVE-2025-22025, CVE-2024-46753, CVE-2025-21962, CVE-2025-37889, CVE-2025-21992, CVE-2025-39728, CVE-2025-22054, CVE-2025-21959, CVE-2024-53144, CVE-2022-49728, CVE-2024-58093, CVE-2025-38637, CVE-2025-21981, CVE-2025-21963, CVE-2025-21968, CVE-2025-22014, CVE-2024-46812, CVE-2025-22005, CVE-2025-21994, CVE-2025-22071, CVE-2025-22008, CVE-2022-49636, CVE-2025-22007, CVE-2023-53034, CVE-2025-22035, CVE-2025-22010, CVE-2025-22081, CVE-2025-22021, CVE-2024-46821, CVE-2025-21999, CVE-2025-38575, CVE-2025-22073, CVE-2025-22004, CVE-2024-42230, CVE-2025-21941, CVE-2024-56664, CVE-2025-22044, CVE-2025-39735, CVE-2025-22060, CVE-2025-22055, CVE-2025-21957, CVE-2025-21975, CVE-2025-22075, CVE-2025-22089, CVE-2025-37937, CVE-2025-38152, CVE-2025-22020, CVE-2025-22066, CVE-2025-22056, CVE-2025-22050, CVE-2025-21964, CVE-2025-21996, CVE-2025-22079, CVE-2025-23136, CVE-2025-22063, CVE-2024-36945, CVE-2025-22097, CVE-2025-37785, CVE-2025-21991, CVE-2025-22086, CVE-2025-22045, CVE-2025-22018)

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PowerPC architecture;
• x86 architecture;
• ACPI drivers;
• Clock framework and drivers;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• PCI subsystem;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• QCOM SoC drivers;
• Thermal drivers;
• BTRFS file system;
• Ext4 file system;
• JFS file system;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• File systems infrastructure;
• Proc file system;
• SMB network file system;
• IPv6 networking;
• RDMA verbs API;
• SoC audio core drivers;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• Netfilter;
• Network traffic control;
• SMC sockets;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-23138, CVE-2025-21956, CVE-2025-21970, CVE-2025-22025, CVE-2024-46753, CVE-2025-21962, CVE-2025-37889, CVE-2025-21992, CVE-2025-39728, CVE-2025-22054, CVE-2025-21959, CVE-2024-53144, CVE-2022-49728, CVE-2024-58093, CVE-2025-38637, CVE-2025-21981, CVE-2025-21963, CVE-2025-21968, CVE-2025-22014, CVE-2024-46812, CVE-2025-22005, CVE-2025-21994, CVE-2025-22071, CVE-2025-22008, CVE-2022-49636, CVE-2025-22007, CVE-2023-53034, CVE-2025-22035, CVE-2025-22010, CVE-2025-22081, CVE-2025-22021, CVE-2024-46821, CVE-2025-21999, CVE-2025-38575, CVE-2025-22073, CVE-2025-22004, CVE-2024-42230, CVE-2025-21941, CVE-2024-56664, CVE-2025-22044, CVE-2025-39735, CVE-2025-22060, CVE-2025-22055, CVE-2025-21957, CVE-2025-21975, CVE-2025-22075, CVE-2025-22089, CVE-2025-37937, CVE-2025-38152, CVE-2025-22020, CVE-2025-22066, CVE-2025-22056, CVE-2025-22050, CVE-2025-21964, CVE-2025-21996, CVE-2025-22079, CVE-2025-23136, CVE-2025-22063, CVE-2024-36945, CVE-2025-22097, CVE-2025-37785, CVE-2025-21991, CVE-2025-22086, CVE-2025-22045, CVE-2025-22018)

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PowerPC architecture;
• x86 architecture;
• ACPI drivers;
• Clock framework and drivers;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• PCI subsystem;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• QCOM SoC drivers;
• Thermal drivers;
• BTRFS file system;
• Ext4 file system;
• JFS file system;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• File systems infrastructure;
• Proc file system;
• SMB network file system;
• IPv6 networking;
• RDMA verbs API;
• SoC audio core drivers;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• Netfilter;
• Network traffic control;
• SMC sockets;
• Sun RPC protocol;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-22089, CVE-2025-22073, CVE-2025-23138, CVE-2025-21970, CVE-2025-21981, CVE-2025-22025, CVE-2025-39735, CVE-2025-22018, CVE-2025-21956, CVE-2025-39728, CVE-2024-46753, CVE-2024-58093, CVE-2025-37889, CVE-2025-22005, CVE-2025-22004, CVE-2025-21963, CVE-2025-21991, CVE-2024-56664, CVE-2025-22054, CVE-2024-46821, CVE-2023-53034, CVE-2022-49728, CVE-2025-22075, CVE-2025-21968, CVE-2025-22071, CVE-2025-22066, CVE-2025-22060, CVE-2024-46812, CVE-2025-22056, CVE-2025-22086, CVE-2022-49636, CVE-2025-21962, CVE-2025-38637, CVE-2025-22081, CVE-2025-21992, CVE-2024-42230, CVE-2025-21959, CVE-2024-53168, CVE-2025-38152, CVE-2025-22035, CVE-2025-21941, CVE-2025-22050, CVE-2025-21964, CVE-2025-22097, CVE-2025-22044, CVE-2025-22007, CVE-2025-21994, CVE-2025-22079, CVE-2024-56608, CVE-2025-37785, CVE-2025-22045, CVE-2025-22010, CVE-2024-36945, CVE-2025-21996, CVE-2025-22014, CVE-2025-21999, CVE-2025-21975, CVE-2025-22055, CVE-2025-21957, CVE-2025-37937, CVE-2025-38575, CVE-2025-22020, CVE-2025-22021, CVE-2024-53144, CVE-2025-22008, CVE-2025-22063, CVE-2024-56551, CVE-2025-23136)

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• ACPI drivers;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• Thermal drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• Ext4 file system;
• F2FS file system;
• JFS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• NTFS3 file system;
• Overlay file system;
• Proc file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• IPv6 networking;
• L3 Master device support module;
• RDMA verbs API;
• SoC audio core drivers;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Watch queue notification mechanism;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• SMC sockets;
• Sun RPC protocol;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module;
• SoC Audio for Freescale CPUs drivers; (CVE-2024-46821, CVE-2025-21992, CVE-2025-21811, CVE-2025-21806, CVE-2022-49728, CVE-2025-21959, CVE-2025-21745, CVE-2025-21708, CVE-2024-58071, CVE-2025-21941, CVE-2025-22008, CVE-2025-21865, CVE-2024-58052, CVE-2025-22097, CVE-2024-42230, CVE-2025-21765, CVE-2025-21859, CVE-2024-57981, CVE-2025-21761, CVE-2025-22007, CVE-2025-21726, CVE-2025-21956, CVE-2025-21704, CVE-2025-21910, CVE-2024-58072, CVE-2025-21934, CVE-2025-39728, CVE-2025-21948, CVE-2025-22021, CVE-2024-58007, CVE-2025-21866, CVE-2025-22089, CVE-2025-21779, CVE-2025-22086, CVE-2025-21887, CVE-2025-22056, CVE-2025-21735, CVE-2024-58093, CVE-2025-21728, CVE-2024-56721, CVE-2024-58076, CVE-2024-53144, CVE-2025-22055, CVE-2025-21772, CVE-2025-21721, CVE-2025-37785, CVE-2025-21943, CVE-2025-21920, CVE-2025-21762, CVE-2024-56608, CVE-2025-21758, CVE-2025-21718, CVE-2025-21971, CVE-2024-58083, CVE-2025-21711, CVE-2025-22079, CVE-2025-21802, CVE-2024-58051, CVE-2025-22073, CVE-2024-57973, CVE-2025-21926, CVE-2025-21823, CVE-2025-21647, CVE-2025-21731, CVE-2024-53168, CVE-2025-21791,…

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PowerPC architecture;
• x86 architecture;
• ACPI drivers;
• Clock framework and drivers;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• PCI subsystem;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• QCOM SoC drivers;
• Thermal drivers;
• BTRFS file system;
• Ext4 file system;
• JFS file system;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• File systems infrastructure;
• Proc file system;
• SMB network file system;
• IPv6 networking;
• RDMA verbs API;
• SoC audio core drivers;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• Netfilter;
• Network traffic control;
• SMC sockets;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-21994, CVE-2025-37937, CVE-2025-21964, CVE-2025-22086, CVE-2025-22073, CVE-2025-39735, CVE-2025-22025, CVE-2025-22004, CVE-2025-22055, CVE-2025-22007, CVE-2024-53144, CVE-2025-22044, CVE-2025-22014, CVE-2025-37785, CVE-2025-21959, CVE-2022-49636, CVE-2025-21968, CVE-2025-22018, CVE-2025-22035, CVE-2024-56664, CVE-2025-21975, CVE-2025-39728, CVE-2025-22045, CVE-2022-49728, CVE-2025-21962, CVE-2025-22089, CVE-2025-21963, CVE-2025-21956, CVE-2024-36945, CVE-2025-21992, CVE-2025-22010, CVE-2025-21991, CVE-2024-46812, CVE-2024-42230, CVE-2025-21941, CVE-2025-22071, CVE-2025-22020, CVE-2025-22097, CVE-2025-21999, CVE-2025-21957, CVE-2025-22063, CVE-2024-58093, CVE-2025-21970, CVE-2025-22005, CVE-2025-22021, CVE-2025-22075, CVE-2025-22050, CVE-2025-21981, CVE-2025-22054, CVE-2025-38152, CVE-2025-38575, CVE-2025-38637, CVE-2023-53034, CVE-2025-22056, CVE-2025-22008, CVE-2024-46821, CVE-2025-23138, CVE-2024-46753, CVE-2025-37889, CVE-2025-22081, CVE-2025-21996, CVE-2025-22066, CVE-2025-22060, CVE-2025-23136, CVE-2025-22079)

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PowerPC architecture;
• x86 architecture;
• ACPI drivers;
• Clock framework and drivers;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• PCI subsystem;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• QCOM SoC drivers;
• Thermal drivers;
• BTRFS file system;
• Ext4 file system;
• JFS file system;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• File systems infrastructure;
• Proc file system;
• SMB network file system;
• IPv6 networking;
• RDMA verbs API;
• SoC audio core drivers;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• Netfilter;
• Network traffic control;
• SMC sockets;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-21994, CVE-2025-37937, CVE-2025-21964, CVE-2025-22086, CVE-2025-22073, CVE-2025-39735, CVE-2025-22025, CVE-2025-22004, CVE-2025-22055, CVE-2025-22007, CVE-2024-53144, CVE-2025-22044, CVE-2025-22014, CVE-2025-37785, CVE-2025-21959, CVE-2022-49636, CVE-2025-21968, CVE-2025-22018, CVE-2025-22035, CVE-2024-56664, CVE-2025-21975, CVE-2025-39728, CVE-2025-22045, CVE-2022-49728, CVE-2025-21962, CVE-2025-22089, CVE-2025-21963, CVE-2025-21956, CVE-2024-36945, CVE-2025-21992, CVE-2025-22010, CVE-2025-21991, CVE-2024-46812, CVE-2024-42230, CVE-2025-21941, CVE-2025-22071, CVE-2025-22020, CVE-2025-22097, CVE-2025-21999, CVE-2025-21957, CVE-2025-22063, CVE-2024-58093, CVE-2025-21970, CVE-2025-22005, CVE-2025-22021, CVE-2025-22075, CVE-2025-22050, CVE-2025-21981, CVE-2025-22054, CVE-2025-38152, CVE-2025-38575, CVE-2025-38637, CVE-2023-53034, CVE-2025-22056, CVE-2025-22008, CVE-2024-46821, CVE-2025-23138, CVE-2024-46753, CVE-2025-37889, CVE-2025-22081, CVE-2025-21996, CVE-2025-22066, CVE-2025-22060, CVE-2025-23136, CVE-2025-22079)

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PowerPC architecture;
• x86 architecture;
• ACPI drivers;
• Clock framework and drivers;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• PCI subsystem;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• QCOM SoC drivers;
• Thermal drivers;
• BTRFS file system;
• Ext4 file system;
• JFS file system;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• File systems infrastructure;
• Proc file system;
• SMB network file system;
• IPv6 networking;
• RDMA verbs API;
• SoC audio core drivers;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• Netfilter;
• Network traffic control;
• SMC sockets;
• Sun RPC protocol;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-21959, CVE-2025-21996, CVE-2024-46821, CVE-2025-38575, CVE-2025-22045, CVE-2025-21970, CVE-2025-21956, CVE-2025-21994, CVE-2025-23136, CVE-2025-39735, CVE-2025-23138, CVE-2025-22020, CVE-2025-21957, CVE-2025-22063, CVE-2025-21975, CVE-2025-22050, CVE-2024-53144, CVE-2025-21991, CVE-2025-22035, CVE-2024-42230, CVE-2025-22007, CVE-2025-22071, CVE-2025-22060, CVE-2025-22079, CVE-2025-21999, CVE-2025-22081, CVE-2025-22021, CVE-2025-21964, CVE-2024-56664, CVE-2024-56608, CVE-2025-38152, CVE-2025-21992, CVE-2024-56551, CVE-2025-22089, CVE-2025-22075, CVE-2024-53168, CVE-2022-49728, CVE-2022-49636, CVE-2025-22010, CVE-2025-38637, CVE-2025-22004, CVE-2025-21963, CVE-2025-22086, CVE-2025-22097, CVE-2025-21962, CVE-2025-22014, CVE-2024-46753, CVE-2025-22073, CVE-2025-22018, CVE-2025-22044, CVE-2025-21941, CVE-2025-39728, CVE-2025-22055, CVE-2025-37785, CVE-2025-22025, CVE-2025-22066, CVE-2023-53034, CVE-2025-22008, CVE-2025-22054, CVE-2025-37937, CVE-2025-37889, CVE-2025-22005, CVE-2025-21968, CVE-2024-58093, CVE-2024-36945, CVE-2025-21981, CVE-2025-22056, CVE-2024-46812)

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• ACPI drivers;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• Thermal drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• Ext4 file system;
• F2FS file system;
• JFS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• NTFS3 file system;
• Overlay file system;
• Proc file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• IPv6 networking;
• L3 Master device support module;
• Netfilter;
• RDMA verbs API;
• SoC audio core drivers;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Watch queue notification mechanism;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• Logical Link layer;
• Multipath TCP;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• SMC sockets;
• Sun RPC protocol;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-21647, CVE-2025-21925, CVE-2024-58034, CVE-2024-46812, CVE-2024-56721, CVE-2025-21811, CVE-2025-21719, CVE-2025-21859, CVE-2025-21745, CVE-2023-53034, CVE-2025-21924, CVE-2024-58052, CVE-2024-58090, CVE-2025-21950, CVE-2025-21753, CVE-2024-57977, CVE-2025-21910, CVE-2025-21806, CVE-2024-58063, CVE-2025-21835, CVE-2024-58001, CVE-2025-21804, CVE-2025-21887, CVE-2024-53144, CVE-2025-38152, CVE-2024-56599, CVE-2025-22035, CVE-2025-22045, CVE-2025-21926, CVE-2024-58069, CVE-2025-21749, CVE-2023-52664, CVE-2025-21779, CVE-2025-21957, CVE-2025-21877, CVE-2025-22008, CVE-2025-21760, CVE-2025-22071, CVE-2025-22079, CVE-2024-56664, CVE-2024-42230, CVE-2025-21748, CVE-2025-21744, CVE-2025-21758, CVE-2025-21767, CVE-2025-21999, CVE-2025-21970, CVE-2025-21826, CVE-2025-38637, CVE-2025-21846, CVE-2025-22073, CVE-2025-23138, CVE-2025-22097, CVE-2025-22056, CVE-2024-58093, CVE-2025-21935, CVE-2025-21785, CVE-2025-22010, CVE-2025-22075, CVE-2025-21948, CVE-2025-21862, CVE-2025-38575, CVE-2025-22004, CVE-2025-22063, CVE-2025-21905, CVE-2025-21962,…

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Compute Acceleration Framework;
• ACPI drivers;
• Ublk userspace block driver;
• Compressed RAM block device driver;
• Bus devices;
• AMD CDX bus driver;
• Clock framework and drivers;
• DMA engine subsystem;
• DPLL subsystem;
• Qualcomm firmware drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• IIO subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• NVME drivers;
• PCI subsystem;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• VideoCore services drivers;
• Thermal drivers;
• USB DSL drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Virtio Host (VHOST) subsystem;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• W1 Dallas's 1-wire bus driver;
• 9P distributed file system;
• File systems infrastructure;
• Ext4 file system;
• JFS file system;
• Network file systems library;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• Proc file system;
• SMB network file system;
• Memory Management;
• Key Management;
• Memory management;
• Scheduler infrastructure;
• UProbes tracing;
• RDMA verbs API;
• SoC audio core drivers;
• BPF subsystem;
• Perf events;
• Kernel fork() syscall;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Netfilter;
• Network traffic control;
• SCTP protocol;
• Switch device API;
• Wireless networking;
• eXpress Data Path;
• Key management;
• ALSA framework;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-21913, CVE-2025-22070, CVE-2025-21918, CVE-2025-21916, CVE-2025-22090, CVE-2025-22040, CVE-2025-21972, CVE-2025-21920, CVE-2025-22071, CVE-2025-21989, CVE-2025-22037, CVE-2025-22068, CVE-2025-38049, CVE-2025-21980, CVE-2025-21956, CVE-2025-21962, CVE-2025-21929, CVE-2025-37785, CVE-2025-37889, CVE-2025-21990, CVE-2025-21966, CVE-2025-38240, CVE-2025-22058, CVE-2025-22072, CVE-2025-22056, CVE-2025-21963, CVE-2025-23134, CVE-2025-22075, CVE-2025-22054, CVE-2025-22064, CVE-2025-22027, CVE-2025-21927, CVE-2025-21943, CVE-2025-22081, CVE-2025-21975, CVE-2025-39735, CVE-2025-22088, CVE-2025-21996, CVE-2025-22009, CVE-2025-22000, CVE-2025-21912, CVE-2025-21967, CVE-2025-21995, CVE-2025-21973, CVE-2025-21908, CVE-2025-22047, CVE-2025-21930, CVE-2025-22078, CVE-2025-21957, CVE-2025-22021, CVE-2025-22019, CVE-2025-21935, CVE-2025-21951, CVE-2025-37937, CVE-2025-22043, CVE-2025-22057, CVE-2025-21922, CVE-2025-22003, CVE-2025-21978, CVE-2025-22010, CVE-2025-39989, CVE-2025-22034, CVE-2025-21986, CVE-2025-22016, CVE-2025-21960, CVE-2025-22038, CVE-2025-21924, CVE-2025-22015, CVE-2025-38152, CVE-2025-21939, CVE-2025-21917, CVE-2025-21974, CVE-2025-22001, CVE-2025-22025, CVE-2025-22062, CVE-2025-21979, CVE-2025-21911, CVE-2025-22045, CVE-2025-21914, CVE-2025-21937, CVE-2025-22095, CVE-2025-21981, CVE-2025-22014,…

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Compute Acceleration Framework;
• ACPI drivers;
• Ublk userspace block driver;
• Compressed RAM block device driver;
• Bus devices;
• AMD CDX bus driver;
• Clock framework and drivers;
• DMA engine subsystem;
• DPLL subsystem;
• Qualcomm firmware drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• IIO subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• NVME drivers;
• PCI subsystem;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• VideoCore services drivers;
• Thermal drivers;
• USB DSL drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Virtio Host (VHOST) subsystem;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• W1 Dallas's 1-wire bus driver;
• 9P distributed file system;
• File systems infrastructure;
• Ext4 file system;
• JFS file system;
• Network file systems library;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• Proc file system;
• SMB network file system;
• Memory Management;
• Key Management;
• Memory management;
• Scheduler infrastructure;
• UProbes tracing;
• RDMA verbs API;
• SoC audio core drivers;
• BPF subsystem;
• Perf events;
• Kernel fork() syscall;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Netfilter;
• Network traffic control;
• SCTP protocol;
• Switch device API;
• Wireless networking;
• eXpress Data Path;
• Key management;
• ALSA framework;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-21913, CVE-2025-22070, CVE-2025-21918, CVE-2025-21916, CVE-2025-22090, CVE-2025-22040, CVE-2025-21972, CVE-2025-21920, CVE-2025-22071, CVE-2025-21989, CVE-2025-22037, CVE-2025-22068, CVE-2025-38049, CVE-2025-21980, CVE-2025-21956, CVE-2025-21962, CVE-2025-21929, CVE-2025-37785, CVE-2025-37889, CVE-2025-21990, CVE-2025-21966, CVE-2025-38240, CVE-2025-22058, CVE-2025-22072, CVE-2025-22056, CVE-2025-21963, CVE-2025-23134, CVE-2025-22075, CVE-2025-22054, CVE-2025-22064, CVE-2025-22027, CVE-2025-21927, CVE-2025-21943, CVE-2025-22081, CVE-2025-21975, CVE-2025-39735, CVE-2025-22088, CVE-2025-21996, CVE-2025-22009, CVE-2025-22000, CVE-2025-21912, CVE-2025-21967, CVE-2025-21995, CVE-2025-21973, CVE-2025-21908, CVE-2025-22047, CVE-2025-21930, CVE-2025-22078, CVE-2025-21957, CVE-2025-22021, CVE-2025-22019, CVE-2025-21935, CVE-2025-21951, CVE-2025-37937, CVE-2025-22043, CVE-2025-22057, CVE-2025-21922, CVE-2025-22003, CVE-2025-21978, CVE-2025-22010, CVE-2025-39989, CVE-2025-22034, CVE-2025-21986, CVE-2025-22016, CVE-2025-21960, CVE-2025-22038, CVE-2025-21924, CVE-2025-22015, CVE-2025-38152, CVE-2025-21939, CVE-2025-21917, CVE-2025-21974, CVE-2025-22001, CVE-2025-22025, CVE-2025-22062, CVE-2025-21979, CVE-2025-21911, CVE-2025-22045, CVE-2025-21914, CVE-2025-21937, CVE-2025-22095, CVE-2025-21981, CVE-2025-22014,…

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Compute Acceleration Framework;
• ACPI drivers;
• Ublk userspace block driver;
• Compressed RAM block device driver;
• Bus devices;
• AMD CDX bus driver;
• Clock framework and drivers;
• DMA engine subsystem;
• DPLL subsystem;
• Qualcomm firmware drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• IIO subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• NVME drivers;
• PCI subsystem;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• VideoCore services drivers;
• Thermal drivers;
• USB DSL drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Virtio Host (VHOST) subsystem;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• W1 Dallas's 1-wire bus driver;
• 9P distributed file system;
• File systems infrastructure;
• Ext4 file system;
• JFS file system;
• Network file systems library;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• Proc file system;
• SMB network file system;
• Memory Management;
• Key Management;
• Memory management;
• Scheduler infrastructure;
• UProbes tracing;
• RDMA verbs API;
• SoC audio core drivers;
• BPF subsystem;
• Perf events;
• Kernel fork() syscall;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Netfilter;
• Network traffic control;
• SCTP protocol;
• Switch device API;
• Wireless networking;
• eXpress Data Path;
• Key management;
• ALSA framework;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-22072, CVE-2025-22039, CVE-2025-22078, CVE-2025-21972, CVE-2025-21989, CVE-2025-21919, CVE-2025-22030, CVE-2025-22084, CVE-2025-22086, CVE-2025-21956, CVE-2025-21924, CVE-2025-22016, CVE-2025-23138, CVE-2025-22059, CVE-2025-21928, CVE-2025-21906, CVE-2025-21947, CVE-2025-21936, CVE-2025-21982, CVE-2025-38152, CVE-2025-38049, CVE-2025-21974, CVE-2025-21962, CVE-2025-22075, CVE-2025-21959, CVE-2025-22002, CVE-2025-22014, CVE-2025-21905, CVE-2025-22044, CVE-2025-22000, CVE-2025-21925, CVE-2025-21944, CVE-2025-21926, CVE-2025-21904, CVE-2024-58092, CVE-2025-21964, CVE-2025-22009, CVE-2025-22083, CVE-2025-21992, CVE-2025-39778, CVE-2025-22021, CVE-2025-22090, CVE-2025-21934, CVE-2025-22043, CVE-2025-22027, CVE-2025-21951, CVE-2025-22019, CVE-2025-21908, CVE-2025-22062, CVE-2025-22071, CVE-2025-21914, CVE-2025-21966, CVE-2025-21984, CVE-2025-39735, CVE-2025-21912, CVE-2025-21979, CVE-2025-22063, CVE-2025-37785, CVE-2025-22081, CVE-2025-22024, CVE-2025-38637, CVE-2025-22070, CVE-2025-21911, CVE-2025-21935, CVE-2024-58093, CVE-2025-21960, CVE-2025-21913, CVE-2025-21927, CVE-2025-21977, CVE-2025-37843, CVE-2025-22055, CVE-2025-22035, CVE-2025-21998, CVE-2025-22041, CVE-2025-21945, CVE-2025-22080, CVE-2025-21963, CVE-2025-21994, CVE-2025-21957, CVE-2025-22079, CVE-2025-22034, CVE-2025-21946, CVE-2025-22053,…

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Compute Acceleration Framework;
• ACPI drivers;
• Ublk userspace block driver;
• Compressed RAM block device driver;
• Bus devices;
• AMD CDX bus driver;
• Clock framework and drivers;
• DMA engine subsystem;
• DPLL subsystem;
• Qualcomm firmware drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• IIO subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• NVME drivers;
• PCI subsystem;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• VideoCore services drivers;
• Thermal drivers;
• USB DSL drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Virtio Host (VHOST) subsystem;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• W1 Dallas's 1-wire bus driver;
• 9P distributed file system;
• File systems infrastructure;
• Ext4 file system;
• JFS file system;
• Network file systems library;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• Proc file system;
• SMB network file system;
• Memory Management;
• Key Management;
• Memory management;
• Scheduler infrastructure;
• UProbes tracing;
• RDMA verbs API;
• SoC audio core drivers;
• BPF subsystem;
• Perf events;
• Kernel fork() syscall;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Netfilter;
• Network traffic control;
• SCTP protocol;
• Switch device API;
• Wireless networking;
• eXpress Data Path;
• Key management;
• ALSA framework;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-39728, CVE-2025-22059, CVE-2025-22008, CVE-2025-37932, CVE-2025-22033, CVE-2025-21984, CVE-2025-22063, CVE-2025-22065, CVE-2025-21991, CVE-2025-38479, CVE-2025-21948, CVE-2025-21936, CVE-2025-22038, CVE-2025-21951, CVE-2025-21906, CVE-2025-21924, CVE-2025-21966, CVE-2025-22073, CVE-2025-22020, CVE-2025-21974, CVE-2025-22043, CVE-2025-22088, CVE-2025-21959, CVE-2025-38575, CVE-2025-22035, CVE-2025-23134, CVE-2025-22009, CVE-2025-22010, CVE-2025-21941, CVE-2025-21914, CVE-2025-22066, CVE-2025-22017, CVE-2025-21911, CVE-2025-21928, CVE-2025-21998, CVE-2025-21920, CVE-2025-21961, CVE-2025-21992, CVE-2025-21995, CVE-2025-21997, CVE-2025-22084, CVE-2025-22011, CVE-2025-22039, CVE-2025-21977, CVE-2025-21963, CVE-2025-21981, CVE-2024-53222, CVE-2025-22037, CVE-2025-22070, CVE-2025-21950, CVE-2025-21980, CVE-2025-22023, CVE-2025-38049, CVE-2025-22018, CVE-2025-22072, CVE-2025-22021, CVE-2025-21986, CVE-2025-22019, CVE-2025-22045, CVE-2025-21990, CVE-2025-21926, CVE-2025-39989, CVE-2025-21902, CVE-2025-21946, CVE-2025-21908, CVE-2025-22081, CVE-2025-22042, CVE-2024-58092, CVE-2025-21939, CVE-2025-22086, CVE-2025-21996, CVE-2025-21929, CVE-2025-21947, CVE-2025-21919, CVE-2025-21922, CVE-2023-53034, CVE-2025-22013, CVE-2025-21979, CVE-2025-21968, CVE-2025-22056, CVE-2025-37937, CVE-2025-22047, CVE-2025-21956,…

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PA-RISC architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• ACPI drivers;
• Serial ATA and Parallel ATA drivers;
• Bluetooth drivers;
• Bus devices;
• Clock framework and drivers;
• CPU frequency scaling framework;
• Buffer Sharing and Synchronization framework;
• DMA engine subsystem;
• ARM SCMI message protocol;
• GPU drivers;
• HID subsystem;
• HSI subsystem;
• I2C subsystem;
• I3C subsystem;
• IIO subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• IRQ chip drivers;
• MCB driver;
• Multiple devices driver;
• Media drivers;
• MemoryStick subsystem;
• Multifunction device drivers;
• PCI Endpoint Test driver;
• MTD block device drivers;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• Device tree and open firmware driver;
• PCI subsystem;
• TI SCI PM domains driver;
• PWM drivers;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• S/390 drivers;
• SCSI subsystem;
• QCOM SoC drivers;
• Samsung SoC drivers;
• TCM subsystem;
• Thermal drivers;
• UFS subsystem;
• Cadence USB3 driver;
• ChipIdea USB driver;
• USB Device Class drivers;
• DesignWare USB3 driver;
• USB Gadget drivers;
• USB Type-C support driver;
• USB Type-C Connector System Software Interface driver;
• Backlight driver;
• Framebuffer layer;
• Xen hypervisor drivers;
• BTRFS file system;
• Ext4 file system;
• F2FS file system;
• File systems infrastructure;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• Proc file system;
• SMB network file system;
• Kernel stack handling interfaces;
• Bluetooth subsystem;
• IPv6 networking;
• Network traffic control;
• SCTP protocol;
• RDMA verbs API;
• SoC audio core drivers;
• BPF subsystem;
• Kernel command line parsing driver;
• Tracing infrastructure;
• Watch queue notification mechanism;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Networking core;
• IPv4 networking;
• MAC80211 subsystem;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Open vSwitch;
• Phonet protocol;
• SMC sockets;
• Sun RPC protocol;
• TIPC protocol;
• TLS protocol;
• SoC Audio for Freescale CPUs drivers;
• Virtio sound driver;
• CPU Power monitoring subsystem; (CVE-2025-37989, CVE-2025-22071, CVE-2025-37808, CVE-2025-37983, CVE-2025-38001, CVE-2024-46816, CVE-2024-50125, CVE-2025-38575, CVE-2025-37766, CVE-2022-49168, CVE-2025-22025, CVE-2025-22035, CVE-2025-37923, CVE-2024-49989, CVE-2025-23148, CVE-2024-53051, CVE-2025-39728, CVE-2025-21956, CVE-2025-37741, CVE-2025-37970, CVE-2025-37798, CVE-2025-23157, CVE-2025-38177, CVE-2022-49535, CVE-2025-22027, CVE-2025-37756, CVE-2025-38023, CVE-2025-22066, CVE-2025-37780, CVE-2025-37995, CVE-2025-37739, CVE-2025-37932, CVE-2025-37982, CVE-2025-37812, CVE-2025-23156, CVE-2025-38005, CVE-2025-21839, CVE-2025-37892, CVE-2025-22073, CVE-2024-35866, CVE-2023-52757, CVE-2025-37785, CVE-2025-23150, CVE-2024-58093, CVE-2025-21992, CVE-2025-37905, CVE-2025-37836, CVE-2025-21964, CVE-2025-23140, CVE-2025-22056, CVE-2025-37915, CVE-2025-22054,…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• x86 architecture;
• Compute Acceleration Framework;
• Bus devices;
• AMD CDX bus driver;
• DPLL subsystem;
• EFI core;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Network drivers;
• Mellanox network drivers;
• NVME drivers;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• UFS subsystem;
• USB DSL drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• Network file system (NFS) client;
• Proc file system;
• SMB network file system;
• Memory Management;
• Scheduler infrastructure;
• SoC audio core drivers;
• Perf events;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Network traffic control;
• Switch device API;
• Wireless networking;
• eXpress Data Path; (CVE-2025-22008, CVE-2025-21872, CVE-2025-21945, CVE-2025-37889, CVE-2025-21997, CVE-2025-21935, CVE-2025-21986, CVE-2025-21890, CVE-2025-21925, CVE-2024-58090, CVE-2025-38569, CVE-2025-21911, CVE-2025-21957, CVE-2025-21891, CVE-2025-21924, CVE-2025-21956, CVE-2025-21994, CVE-2025-22013, CVE-2025-21964, CVE-2025-21909, CVE-2025-21888, CVE-2025-21918, CVE-2025-21981, CVE-2025-21966, CVE-2025-22011, CVE-2025-21877, CVE-2025-21913, CVE-2025-21895, CVE-2025-21929, CVE-2025-22010, CVE-2025-21992, CVE-2025-21930, CVE-2025-21982, CVE-2025-21894, CVE-2025-21934, CVE-2025-21873, CVE-2025-21914, CVE-2025-21941, CVE-2025-21962, CVE-2025-22014, CVE-2025-21905, CVE-2025-21908, CVE-2025-21898, CVE-2025-21878, CVE-2025-22009, CVE-2025-21961, CVE-2025-22015, CVE-2025-21883, CVE-2025-21916, CVE-2025-22016, CVE-2025-21936, CVE-2025-21947, CVE-2025-21927, CVE-2025-22004, CVE-2025-21926, CVE-2025-21969, CVE-2025-21976, CVE-2025-21912, CVE-2025-21920, CVE-2025-21951, CVE-2025-22005, CVE-2025-21978, CVE-2025-21975, CVE-2025-22007, CVE-2025-21928, CVE-2025-21968, CVE-2025-21963, CVE-2025-21977, CVE-2025-21915, CVE-2025-21980, CVE-2025-22047, CVE-2025-21972, CVE-2025-21892, CVE-2025-22003, CVE-2025-21979, CVE-2025-21944, CVE-2025-21880, CVE-2025-21899, CVE-2025-21995, CVE-2025-22017, CVE-2025-21946, CVE-2025-22001, CVE-2025-21904, CVE-2025-21881, CVE-2025-21917, CVE-2025-21970, CVE-2025-21889, CVE-2025-21922, CVE-2025-21875, CVE-2025-21919, CVE-2025-21991, CVE-2025-21967, CVE-2025-21960, CVE-2025-21959, CVE-2025-21955, CVE-2025-21996, CVE-2025-21950, CVE-2025-21937, CVE-2025-21948, CVE-2025-21903, CVE-2025-21885, CVE-2025-21999, CVE-2025-21910)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• x86 architecture;
• Compute Acceleration Framework;
• Bus devices;
• AMD CDX bus driver;
• DPLL subsystem;
• EFI core;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Network drivers;
• Mellanox network drivers;
• NVME drivers;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• UFS subsystem;
• USB DSL drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• Network file system (NFS) client;
• Proc file system;
• SMB network file system;
• Memory Management;
• Scheduler infrastructure;
• SoC audio core drivers;
• Perf events;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Network traffic control;
• Switch device API;
• Wireless networking;
• eXpress Data Path; (CVE-2025-21945, CVE-2025-21991, CVE-2025-22008, CVE-2025-21996, CVE-2025-21924, CVE-2025-21986, CVE-2025-21872, CVE-2025-21962, CVE-2025-22007, CVE-2025-37889, CVE-2025-21889, CVE-2025-21968, CVE-2025-21903, CVE-2025-21955, CVE-2025-21982, CVE-2025-21929, CVE-2025-21944, CVE-2025-22004, CVE-2025-21997, CVE-2025-21941, CVE-2025-22047, CVE-2025-21915, CVE-2025-21995, CVE-2025-22011, CVE-2025-21891, CVE-2025-22009, CVE-2025-22015, CVE-2024-58090, CVE-2025-21947, CVE-2025-21976, CVE-2025-21964, CVE-2025-21904, CVE-2025-21880, CVE-2025-21918, CVE-2025-21950, CVE-2025-21948, CVE-2025-21888, CVE-2025-22014, CVE-2025-21963, CVE-2025-21875, CVE-2025-21967, CVE-2025-21972, CVE-2025-21895, CVE-2025-21961, CVE-2025-21926, CVE-2025-21892, CVE-2025-21916, CVE-2025-21894, CVE-2025-21930, CVE-2025-21927, CVE-2025-21911, CVE-2025-21936, CVE-2025-21881, CVE-2025-38569, CVE-2025-21873, CVE-2025-21951, CVE-2025-22003, CVE-2025-21877, CVE-2025-21908, CVE-2025-21956, CVE-2025-21977, CVE-2025-21917, CVE-2025-21922, CVE-2025-21959, CVE-2025-22005, CVE-2025-22017, CVE-2025-22016, CVE-2025-21878, CVE-2025-21970, CVE-2025-21905, CVE-2025-21978, CVE-2025-21981, CVE-2025-21980, CVE-2025-21910, CVE-2025-21925, CVE-2025-21885, CVE-2025-21946, CVE-2025-21937, CVE-2025-21919, CVE-2025-22013, CVE-2025-21883, CVE-2025-21957, CVE-2025-21914, CVE-2025-21909, CVE-2025-21934, CVE-2025-21975, CVE-2025-21912, CVE-2025-21969, CVE-2025-21898, CVE-2025-21890, CVE-2025-21899, CVE-2025-22001, CVE-2025-21979, CVE-2025-21966, CVE-2025-21935, CVE-2025-21920, CVE-2025-21913, CVE-2025-22010, CVE-2025-21992, CVE-2025-21960, CVE-2025-21994, CVE-2025-21999, CVE-2025-21928)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• x86 architecture;
• Compute Acceleration Framework;
• Bus devices;
• AMD CDX bus driver;
• DPLL subsystem;
• EFI core;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Network drivers;
• Mellanox network drivers;
• NVME drivers;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• UFS subsystem;
• USB DSL drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• Network file system (NFS) client;
• Proc file system;
• SMB network file system;
• Memory Management;
• Scheduler infrastructure;
• SoC audio core drivers;
• Perf events;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Network traffic control;
• Switch device API;
• Wireless networking;
• eXpress Data Path; (CVE-2025-21980, CVE-2025-21999, CVE-2025-21991, CVE-2025-21937, CVE-2025-22016, CVE-2025-21920, CVE-2025-21979, CVE-2025-21919, CVE-2025-21969, CVE-2025-21872, CVE-2025-21996, CVE-2025-21927, CVE-2025-21904, CVE-2025-22013, CVE-2025-21928, CVE-2025-21891, CVE-2025-21889, CVE-2025-21972, CVE-2025-21981, CVE-2025-38569, CVE-2025-21910, CVE-2025-21945, CVE-2025-22011, CVE-2025-21916, CVE-2025-21924, CVE-2025-21922, CVE-2025-21975, CVE-2025-21880, CVE-2025-21995, CVE-2025-21977, CVE-2025-21947, CVE-2025-21914, CVE-2025-21905, CVE-2025-22009, CVE-2025-21892, CVE-2025-22005, CVE-2024-58090, CVE-2025-21926, CVE-2025-37889, CVE-2025-21966, CVE-2025-21955, CVE-2025-22007, CVE-2025-21894, CVE-2025-21909, CVE-2025-21883, CVE-2025-21992, CVE-2025-21976, CVE-2025-21890, CVE-2025-21898, CVE-2025-21982, CVE-2025-21877, CVE-2025-21925, CVE-2025-21970, CVE-2025-21930, CVE-2025-21946, CVE-2025-22017, CVE-2025-21908, CVE-2025-21944, CVE-2025-21885, CVE-2025-22010, CVE-2025-21917, CVE-2025-21918, CVE-2025-21934, CVE-2025-21950, CVE-2025-21963, CVE-2025-22003, CVE-2025-21961, CVE-2025-21967, CVE-2025-21878, CVE-2025-21895, CVE-2025-21913, CVE-2025-21875, CVE-2025-21959, CVE-2025-22008, CVE-2025-21968, CVE-2025-21936, CVE-2025-21956, CVE-2025-21903, CVE-2025-22004, CVE-2025-21986, CVE-2025-21915, CVE-2025-21964, CVE-2025-22014, CVE-2025-21994, CVE-2025-21912, CVE-2025-21873, CVE-2025-21957, CVE-2025-22015, CVE-2025-21997, CVE-2025-21948, CVE-2025-21951, CVE-2025-21962, CVE-2025-22001, CVE-2025-21978, CVE-2025-21960, CVE-2025-22047, CVE-2025-21935, CVE-2025-21899, CVE-2025-21911, CVE-2025-21881, CVE-2025-21929, CVE-2025-21941)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• x86 architecture;
• Compute Acceleration Framework;
• Bus devices;
• AMD CDX bus driver;
• DPLL subsystem;
• EFI core;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Network drivers;
• Mellanox network drivers;
• NVME drivers;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• UFS subsystem;
• USB DSL drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• Network file system (NFS) client;
• Proc file system;
• SMB network file system;
• Memory Management;
• Scheduler infrastructure;
• SoC audio core drivers;
• Perf events;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Network traffic control;
• Switch device API;
• Wireless networking;
• eXpress Data Path; (CVE-2025-21961, CVE-2025-21895, CVE-2025-21934, CVE-2025-21898, CVE-2024-58090, CVE-2025-21999, CVE-2025-22004, CVE-2025-21966, CVE-2025-21922, CVE-2025-21920, CVE-2025-21911, CVE-2025-21885, CVE-2025-21912, CVE-2025-21996, CVE-2025-21924, CVE-2025-21914, CVE-2025-21936, CVE-2025-21944, CVE-2025-21877, CVE-2025-21909, CVE-2025-21986, CVE-2025-21890, CVE-2025-22009, CVE-2025-21905, CVE-2025-21969, CVE-2025-21935, CVE-2025-21917, CVE-2025-22008, CVE-2025-21994, CVE-2025-21980, CVE-2025-22014, CVE-2025-21915, CVE-2025-21991, CVE-2025-22015, CVE-2025-21875, CVE-2025-21975, CVE-2025-21878, CVE-2025-21930, CVE-2025-21967, CVE-2025-21908, CVE-2025-22007, CVE-2025-21899, CVE-2025-21950, CVE-2025-21959, CVE-2025-21937, CVE-2025-22010, CVE-2025-21945, CVE-2025-21997, CVE-2025-21992, CVE-2025-22003, CVE-2025-22013, CVE-2025-21963, CVE-2025-22001, CVE-2025-21927, CVE-2025-21894, CVE-2025-21960, CVE-2025-21956, CVE-2025-21948, CVE-2025-21929, CVE-2025-21919, CVE-2025-21972, CVE-2025-21883, CVE-2025-21880, CVE-2025-21976, CVE-2025-22005, CVE-2025-22016, CVE-2025-21978, CVE-2025-21873, CVE-2025-21925, CVE-2025-21904, CVE-2025-21928, CVE-2025-21892, CVE-2025-21891, CVE-2025-21995, CVE-2025-21968, CVE-2025-21982, CVE-2025-21918, CVE-2025-21889, CVE-2025-21970, CVE-2025-21910, CVE-2025-21913, CVE-2025-21926, CVE-2025-21955, CVE-2025-21947, CVE-2025-21979, CVE-2025-21981, CVE-2025-22011, CVE-2025-21888, CVE-2025-37889, CVE-2025-21957, CVE-2025-21977, CVE-2025-21903, CVE-2025-21946, CVE-2025-21941, CVE-2025-21964, CVE-2025-21951, CVE-2025-21962, CVE-2025-22017, CVE-2025-21872, CVE-2025-21881, CVE-2025-21916)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• x86 architecture;
• Compute Acceleration Framework;
• Bus devices;
• AMD CDX bus driver;
• DPLL subsystem;
• EFI core;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Network drivers;
• Mellanox network drivers;
• NVME drivers;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• UFS subsystem;
• USB DSL drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• Network file system (NFS) client;
• Proc file system;
• SMB network file system;
• Memory Management;
• Scheduler infrastructure;
• SoC audio core drivers;
• Perf events;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Network traffic control;
• Switch device API;
• Wireless networking;
• eXpress Data Path; (CVE-2025-21966, CVE-2025-21895, CVE-2025-21944, CVE-2025-21986, CVE-2025-21918, CVE-2025-21873, CVE-2025-21963, CVE-2025-21929, CVE-2025-21995, CVE-2025-22017, CVE-2025-21991, CVE-2025-21960, CVE-2025-21946, CVE-2025-21976, CVE-2025-21922, CVE-2025-21925, CVE-2025-21903, CVE-2025-21978, CVE-2025-21979, CVE-2025-22016, CVE-2025-21936, CVE-2025-21997, CVE-2025-21992, CVE-2025-21920, CVE-2025-21875, CVE-2025-21934, CVE-2025-21919, CVE-2025-21972, CVE-2025-22001, CVE-2025-21981, CVE-2025-21910, CVE-2025-21969, CVE-2025-22010, CVE-2025-21908, CVE-2025-21957, CVE-2025-22009, CVE-2025-21927, CVE-2025-21930, CVE-2025-21994, CVE-2025-21980, CVE-2025-21885, CVE-2025-21967, CVE-2025-21899, CVE-2025-21890, CVE-2025-21948, CVE-2025-21964, CVE-2025-21911, CVE-2025-21982, CVE-2025-21883, CVE-2025-21913, CVE-2025-21917, CVE-2025-21905, CVE-2025-21968, CVE-2025-22013, CVE-2025-22005, CVE-2025-21916, CVE-2025-21880, CVE-2025-21881, CVE-2025-22003, CVE-2025-21892, CVE-2025-21937, CVE-2025-21970, CVE-2025-22004, CVE-2025-21950, CVE-2025-21924, CVE-2025-21894, CVE-2025-21904, CVE-2025-21915, CVE-2025-21889, CVE-2025-21912, CVE-2025-21909, CVE-2025-21888, CVE-2025-21935, CVE-2025-22008, CVE-2025-37889, CVE-2025-21878, CVE-2025-21926, CVE-2025-22011, CVE-2025-21962, CVE-2025-22007, CVE-2025-21941, CVE-2025-21898, CVE-2025-21956, CVE-2025-22015, CVE-2025-21961, CVE-2025-21872, CVE-2025-21891, CVE-2025-21947, CVE-2025-21955, CVE-2025-21877, CVE-2025-21996, CVE-2025-21977, CVE-2025-21945, CVE-2025-21914, CVE-2025-21975, CVE-2024-58090, CVE-2025-21959, CVE-2025-22014, CVE-2025-21951, CVE-2025-21928, CVE-2025-21999)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• x86 architecture;
• Compute Acceleration Framework;
• Bus devices;
• AMD CDX bus driver;
• DPLL subsystem;
• EFI core;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Network drivers;
• Mellanox network drivers;
• NVME drivers;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• UFS subsystem;
• USB DSL drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• Network file system (NFS) client;
• Proc file system;
• SMB network file system;
• Memory Management;
• Scheduler infrastructure;
• SoC audio core drivers;
• Perf events;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Network traffic control;
• Switch device API;
• Wireless networking;
• eXpress Data Path; (CVE-2025-21964, CVE-2025-21890, CVE-2025-21934, CVE-2025-21929, CVE-2025-21922, CVE-2025-21970, CVE-2025-21913, CVE-2025-21937, CVE-2025-21872, CVE-2025-21972, CVE-2025-21892, CVE-2025-21991, CVE-2025-21967, CVE-2025-21894, CVE-2025-21881, CVE-2025-21885, CVE-2025-21999, CVE-2025-21978, CVE-2025-22001, CVE-2025-21979, CVE-2025-21951, CVE-2025-22003, CVE-2025-21963, CVE-2025-21936, CVE-2025-21891, CVE-2025-21941, CVE-2025-21895, CVE-2025-21982, CVE-2025-21919, CVE-2025-21961, CVE-2025-21946, CVE-2025-21889, CVE-2025-21899, CVE-2025-21873, CVE-2025-37889, CVE-2025-22008, CVE-2025-21969, CVE-2025-21957, CVE-2025-21925, CVE-2025-21945, CVE-2025-21927, CVE-2025-21878, CVE-2025-21995, CVE-2025-21981, CVE-2025-21956, CVE-2025-21909, CVE-2025-21955, CVE-2025-21918, CVE-2025-21960, CVE-2025-21915, CVE-2025-21992, CVE-2025-21914, CVE-2025-21877, CVE-2025-21875, CVE-2025-21928, CVE-2025-22013, CVE-2025-22014, CVE-2025-21950, CVE-2025-21948, CVE-2025-21912, CVE-2025-21944, CVE-2025-22004, CVE-2025-22009, CVE-2025-21968, CVE-2025-21888, CVE-2025-21980, CVE-2025-21911, CVE-2025-22017, CVE-2025-21975, CVE-2025-21930, CVE-2025-21947, CVE-2025-21908, CVE-2025-21994, CVE-2024-58090, CVE-2025-21910, CVE-2025-21959, CVE-2025-21977, CVE-2025-21903, CVE-2025-22016, CVE-2025-21976, CVE-2025-21898, CVE-2025-21986, CVE-2025-22011, CVE-2025-21905, CVE-2025-22015, CVE-2025-21996, CVE-2025-21966, CVE-2025-21883, CVE-2025-22010, CVE-2025-21904, CVE-2025-21916, CVE-2025-21935, CVE-2025-21924, CVE-2025-22005, CVE-2025-21962, CVE-2025-21917, CVE-2025-21920, CVE-2025-21997, CVE-2025-21880, CVE-2025-21926, CVE-2025-22007)