CVE-2025-22010

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix soft lockup during bt pages loop Driver runs a for-loop when allocating bt pages and mapping them with buffer pages. When a large buffer (e.g. MR over 100GB) is being allocated, it may require a considerable loop count. This will lead to soft lockup: watchdog: BUG: soft lockup - CPU#27 stuck for 22s! ... Call trace: hem_list_alloc_mid_bt+0x124/0x394 [hns_roce_hw_v2] hns_roce_hem_list_request+0xf8/0x160 [hns_roce_hw_v2] hns_roce_mtr_create+0x2e4/0x360 [hns_roce_hw_v2] alloc_mr_pbl+0xd4/0x17c [hns_roce_hw_v2] hns_roce_reg_user_mr+0xf8/0x190 [hns_roce_hw_v2] ib_uverbs_reg_mr+0x118/0x290 watchdog: BUG: soft lockup - CPU#35 stuck for 23s! ... Call trace: hns_roce_hem_list_find_mtt+0x7c/0xb0 [hns_roce_hw_v2] mtr_map_bufs+0xc4/0x204 [hns_roce_hw_v2] hns_roce_mtr_create+0x31c/0x3c4 [hns_roce_hw_v2] alloc_mr_pbl+0xb0/0x160 [hns_roce_hw_v2] hns_roce_reg_user_mr+0x108/0x1c0 [hns_roce_hw_v2] ib_uverbs_reg_mr+0x120/0x2bc Add a cond_resched() to fix soft lockup during these loops. In order not to affect the allocation performance of normal-size buffer, set the loop count of a 100GB MR as the threshold to call cond_resched().

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

PCI/ASPM: Fix link state exit during switch upstream function removal

Before 456d8aa37d0f ("PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free"), we would free the ASPM link only after the last function on the bus pertaining to the given link was removed.

That was too late. If function 0 is removed before sibling function, link->downstream would point to free'd memory after.

After above change, we freed the ASPM parent link state upon any function removal on the bus pertaining to a given link.

That is too early. If the link is to a PCIe switch with MFD on the upstream port, then removing functions other than 0 first would free a link which still remains parent_link to the remaining downstream ports.

The resulting GPFs are especially frequent during hot-unplug, because pciehp removes devices on the link bus in reverse order.

On that switch, function 0 is the virtual P2P bridge to the internal bus. Free exactly when function 0 is removed -- before the parent link is obsolete, but after all subordinate links are gone.

kwilczynski: commit log

In the Linux kernel, the following vulnerability has been resolved:

jfs: add check read-only before truncation in jfs_truncate_nolock()

Added a check for "read-only" mode in the jfs_truncate_nolock function to avoid errors related to writing to a read-only filesystem.

Call stack:

block_write_begin() { jfs_write_failed() { jfs_truncate() { jfs_truncate_nolock() { txEnd() { ... log = JFS_SBI(tblk->sb)->log; // (log == NULL)

If the isReadOnly(ip) condition is triggered in jfs_truncate_nolock, the function execution will stop, and no further data modification will occur. Instead, the xtTruncate function will be called with the "COMMIT_WMAP" flag, preventing modifications in "read-only" mode.(CVE-2024-58094)

In the Linux kernel, the following vulnerability has been resolved:

vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame

Andrew and Nikolay reported connectivity issues with Cilium's service load-balancing in case of vmxnet3.

If a BPF program for native XDP adds an encapsulation header such as IPIP and transmits the packet out the same interface, then in case of vmxnet3 a corrupted packet is being sent and subsequently dropped on the path.

vmxnet3_xdp_xmit_frame() which is called e.g. via vmxnet3_run_xdp() through vmxnet3_xdp_xmit_back() calculates an incorrect DMA address:

page = virt_to_page(xdpf->data); tbi->dma_addr = page_pool_get_dma_addr(page) + VMXNET3_XDP_HEADROOM; dma_sync_single_for_device(&adapter->pdev->dev, tbi->dma_addr, buf_size, DMA_TO_DEVICE);

The above assumes a fixed offset (VMXNET3_XDP_HEADROOM), but the XDP BPF program could have moved xdp->data. While the passed buf_size is correct (xdpf->len), the dma_addr needs to have a dynamic offset which can be calculated as xdpf->data - (void *)xdpf, that is, xdp->data - xdp->data_hard_start.(CVE-2024-58099)

In the Linux kernel, the following vulnerability has been resolved:

rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy

As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons:

• Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns.

• current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2).

The per-netns structure can be obtained from the table->data using container_of(), then the 'net' one…

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

PCI/ASPM: Fix link state exit during switch upstream function removal

Before 456d8aa37d0f ("PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free"), we would free the ASPM link only after the last function on the bus pertaining to the given link was removed.

That was too late. If function 0 is removed before sibling function, link->downstream would point to free'd memory after.

After above change, we freed the ASPM parent link state upon any function removal on the bus pertaining to a given link.

That is too early. If the link is to a PCIe switch with MFD on the upstream port, then removing functions other than 0 first would free a link which still remains parent_link to the remaining downstream ports.

The resulting GPFs are especially frequent during hot-unplug, because pciehp removes devices on the link bus in reverse order.

On that switch, function 0 is the virtual P2P bridge to the internal bus. Free exactly when function 0 is removed -- before the parent link is obsolete, but after all subordinate links are gone.

kwilczynski: commit log

In the Linux kernel, the following vulnerability has been resolved:

jfs: add check read-only before truncation in jfs_truncate_nolock()

Added a check for "read-only" mode in the jfs_truncate_nolock function to avoid errors related to writing to a read-only filesystem.

Call stack:

block_write_begin() { jfs_write_failed() { jfs_truncate() { jfs_truncate_nolock() { txEnd() { ... log = JFS_SBI(tblk->sb)->log; // (log == NULL)

If the isReadOnly(ip) condition is triggered in jfs_truncate_nolock, the function execution will stop, and no further data modification will occur. Instead, the xtTruncate function will be called with the "COMMIT_WMAP" flag, preventing modifications in "read-only" mode.(CVE-2024-58094)

In the Linux kernel, the following vulnerability has been resolved:

rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy

As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons:

• Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns.

• current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2).

The per-netns structure can be obtained from the table->data using container_of(), then the 'net' one can be retrieved from the listen socket (if available).(CVE-2025-21635)

In the Linux kernel, the following vulnerability has been resolved:

HID: appleir: Fix potential NULL dereference at raw event handle

Syzkaller reports a NULL pointer dereference issue in input_event().

BUG: KASAN: null-ptr-deref in instrument_atomic_read include/linux/instrumented.h:68 [inline] BUG: KASAN: null-ptr-deref in _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline] BUG: KASAN: null-ptr-deref in is_event_supported drivers/input/input.c:67 [inline] BUG: KASAN: null-ptr-deref in input_event+0x42/0xa0 drivers/input/input.c:395 Read of size 8 at addr 0000000000000028 by task syz-executor199/2949

CPU: 0 UID: 0 PID: 2949 Comm: syz-executor199 Not tainted 6.13.0-rc4-syzkaller-00076-gf097a36ef88d #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Call Trace: <IRQ> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 kasan_report+0xd9/0x110 mm/kasan/report.c:602 check_region_inline mm/kasan/generic.c:183 [inline] kasan_check_range+0xef/0x1a0 mm/kasan/generic.c:189 instrument_atomic_read…

Root has patched CVE-2025-22010 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix soft lockup during bt pages loop Driver runs a for-loop when allocating bt pages and mapping them with buffer pages. When a large buffer (e.g. MR over 100GB) is being allocated, it may require a considerable loop count. This will lead to soft lockup: watchdog: BUG: soft lockup - CPU#27 stuck for 22s! ... Call trace: hem_list_alloc_mid_bt+0x124/0x394 [hns_roce_hw_v2] hns_roce_hem_list_request+0xf8/0x160 [hns_roce_hw_v2] hns_roce_mtr_create+0x2e4/0x360 [hns_roce_hw_v2] alloc_mr_pbl+0xd4/0x17c [hns_roce_hw_v2] hns_roce_reg_user_mr+0xf8/0x190 [hns_roce_hw_v2] ib_uverbs_reg_mr+0x118/0x290 watchdog: BUG: soft lockup - CPU#35 stuck for 23s! ... Call trace: hns_roce_hem_list_find_mtt+0x7c/0xb0 [hns_roce_hw_v2] mtr_map_bufs+0xc4/0x204 [hns_roce_hw_v2] hns_roce_mtr_create+0x31c/0x3c4 [hns_roce_hw_v2] alloc_mr_pbl+0xb0/0x160 [hns_roce_hw_v2] hns_roce_reg_user_mr+0x108/0x1c0 [hns_roce_hw_v2] ib_uverbs_reg_mr+0x120/0x2bc Add a cond_resched() to fix soft lockup during these loops. In order not to affect the allocation performance of normal-size buffer, set the loop count of a 100GB MR as the threshold to call cond_resched().

In the Linux kernel, the following vulnerability has been resolved:

RDMA/hns: Fix soft lockup during bt pages loop

Driver runs a for-loop when allocating bt pages and mapping them with buffer pages. When a large buffer (e.g. MR over 100GB) is being allocated, it may require a considerable loop count. This will lead to soft lockup:

    watchdog: BUG: soft lockup - CPU#27 stuck for 22s!
    ...
    Call trace:
     hem_list_alloc_mid_bt+0x124/0x394 [hns_roce_hw_v2]
     hns_roce_hem_list_request+0xf8/0x160 [hns_roce_hw_v2]
     hns_roce_mtr_create+0x2e4/0x360 [hns_roce_hw_v2]
     alloc_mr_pbl+0xd4/0x17c [hns_roce_hw_v2]
     hns_roce_reg_user_mr+0xf8/0x190 [hns_roce_hw_v2]
     ib_uverbs_reg_mr+0x118/0x290

    watchdog: BUG: soft lockup - CPU#35 stuck for 23s!
    ...
    Call trace:
     hns_roce_hem_list_find_mtt+0x7c/0xb0 [hns_roce_hw_v2]
     mtr_map_bufs+0xc4/0x204 [hns_roce_hw_v2]
     hns_roce_mtr_create+0x31c/0x3c4 [hns_roce_hw_v2]
     alloc_mr_pbl+0xb0/0x160 [hns_roce_hw_v2]
     hns_roce_reg_user_mr+0x108/0x1c0 [hns_roce_hw_v2]
     ib_uverbs_reg_mr+0x120/0x2bc

Add a cond_resched() to fix soft lockup during these loops. In order not to affect the allocation performance of normal-size buffer, set the loop count of a 100GB MR as the threshold to call cond_resched().

Upstream kernel version 6.6.87 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kernel. For information about the vulnerabilities see the links.

Vanilla upstream kernel version 6.6.88 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2021-47659: drm/plane: Move range check for format_count earlier (bsc#1237839).
• CVE-2022-49044: dm integrity: fix memory corruption when tag_size is less than digest size (bsc#1237840).
• CVE-2022-49055: drm/amdkfd: Check for potential null return of kmalloc_array() (bsc#1237868).
• CVE-2022-49060: net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() (bsc#1237845).
• CVE-2022-49086: net: openvswitch: fix leak of nested actions (bsc#1238037).
• CVE-2022-49111: Bluetooth: Fix use after free in hci_send_acl (bsc#1237984).
• CVE-2022-49118: scsi: hisi_sas: Free irq vectors in order for v3 HW (bsc#1237979).
• CVE-2022-49121: scsi: pm8001: Fix tag leaks on error (bsc#1237926).
• CVE-2022-49137: drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj (bsc#1238155).
• CVE-2022-49175: PM: core: keep irq flags in device_pm_check_callbacks() (bsc#1238099).
• CVE-2022-49176: bfq: fix use-after-free in bfq_dispatch_request (bsc#1238097).
• CVE-2022-49179: block, bfq: do not move oom_bfqq (bsc#1238092).
• CVE-2022-49188: remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region (bsc#1238138).
• CVE-2022-49197: af_netlink: Fix shift out of bounds in group mask calculation (bsc#1238455).
• CVE-2022-49205: bpf, sockmap: Fix double uncharge the mem of sk_msg (bsc#1238335).
• CVE-2022-49232: drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() (bsc#1238139).
• CVE-2022-49290: mac80211: fix potential double free on mesh join (bsc#1238156).
• CVE-2022-49305: drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop() (bsc#1238645).
• CVE-2022-49325: tcp: add accessors to read/set tp->snd_cwnd (bsc#1238398).
• CVE-2022-49335: drm/amdgpu/cs: make commands with 0 chunks illegal behaviour (bsc#1238377).
• CVE-2022-49351: net: altera: Fix refcount leak in altera_tse_mdio_create (bsc#1237939).
• CVE-2022-49385: driver: base: fix UAF when driver_attach failed (bsc#1237951).
• CVE-2022-49390: macsec: fix UAF bug for real_dev (bsc#1238233).
• CVE-2022-49411: bfq: Make sure bfqg for which we are queueing requests is online (bsc#1238307).
• CVE-2022-49442: drivers/base/node.c: fix compaction sysfs file leak (bsc#1238243).
• CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238919).
• CVE-2022-49478: media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init (bsc#1238000).
• CVE-2022-49489: drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume (bsc#1238244).
• CVE-2022-49504: scsi: lpfc: Inhibit aborts if external loopback plug is inserted (bsc#1238835).
• CVE-2022-49521: scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp() (bsc#1238938).
• CVE-2022-49525: media: cx25821: Fix the warning when removing the module (bsc#1238022).
• CVE-2022-49534: scsi: lpfc: Protect memory leak for NPIV ports sending PLOGI_RJT (bsc#1238893).
• CVE-2022-49535: scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI (bsc#1238937).
• CVE-2022-49536: scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock (bsc#1238838).
• CVE-2022-49537: scsi: lpfc: Fix call trace observed during I/O with CMF enabled (bsc#1238930).
• CVE-2022-49542: scsi: lpfc: Move cfg_log_verbose check before calling lpfc_dmp_dbg() (bsc#1238722).
• CVE-2022-49561: netfilter: conntrack: re-fetch conntrack after insertion (bsc#1238537).
• CVE-2022-49590: igmp: Fix data-races around sysctl_igmp_llm_reports (bsc#1238844).
• CVE-2022-49658: bpf, selftests: Add verifier test case for imm=0,umin=0,umax=1 scalar (bsc#1238803).
• CVE-2022-49668: PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events (bsc#1237957).
• CVE-2022-49693: drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf (bsc#1237954).
• CVE-2022-49725: i40e: Fix call trace in setup_tx_descriptors…

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
• CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
• CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
• CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
• CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
• CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
• CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
• CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510).
• CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
• CVE-2025-21696: mm: clear uffd-wp PTE/PMD state on mremap() (bsc#1237111).
• CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
• CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
• CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
• CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
• CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
• CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
• CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
• CVE-2025-21808: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742).
• CVE-2025-21812: ax25: rcu protect dev->ax25_ptr (bsc#1238471).
• CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (bsc#1239108).
• CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
• CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
• CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
• CVE-2025-21867: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181).
• CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
• CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
• CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
• CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
• CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
• CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
• CVE-2025-21894: net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC (bsc#1240581).
• CVE-2025-21895: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (bsc#1240585).
• CVE-2025-21904: caif_virtio: fix wrong pointer check in cfv_probe() (bsc#1240576).
• CVE-2025-21906: wifi: iwlwifi: mvm: clean up ROC on failure (bsc#1240587).
• CVE-2025-21908: NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (bsc#1240600).
• CVE-2025-21913: x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (bsc#1240591).
• CVE-2025-21922: ppp: Fix KMSAN uninit-value warning with bpf (bsc#1240639).
• CVE-2025-21924: net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error (bsc#1240720). -…

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-27415: netfilter: bridge: confirm multicast packets before passing them up the stack (bsc#1224757).
• CVE-2024-28956: Intel CPU: Indirect Target Selection (ITS) (bsc#1242006).
• CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
• CVE-2024-46763: fou: Fix null-ptr-deref in GRO (bsc#1230764).
• CVE-2024-50038: netfilter: xtables: avoid NFPROTO_UNSPEC where needed (bsc#1231910).
• CVE-2024-50162: bpf: devmap: provide rxq after redirect (bsc#1233075).
• CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
• CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
• CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
• CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
• CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
• CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510).
• CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
• CVE-2025-21696: mm: clear uffd-wp PTE/PMD state on mremap() (bsc#1237111).
• CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
• CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
• CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
• CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
• CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
• CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
• CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
• CVE-2025-21808: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742).
• CVE-2025-21812: ax25: rcu protect dev->ax25_ptr (bsc#1238471).
• CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (bsc#1239108).
• CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
• CVE-2025-21854: sockmap, vsock: For connectible sockets allow only connected (bsc#1239470).
• CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
• CVE-2025-21867: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181).
• CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
• CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
• CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
• CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
• CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
• CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
• CVE-2025-21894: net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC (bsc#1240581).
• CVE-2025-21895: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (bsc#1240585).
• CVE-2025-21904: caif_virtio: fix wrong pointer check in cfv_probe() (bsc#1240576).
• CVE-2025-21906: wifi: iwlwifi: mvm: clean up ROC on failure (bsc#1240587).
• CVE-2025-21908: NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (bsc#1240600).
• CVE-2025-21913: x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (bsc#1240591).
• CVE-2025-21922: ppp: Fix KMSAN uninit-value warning with bpf (bsc#1240639).…

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
• CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
• CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-43869: perf: Fix hang while freeing sigtrap event (bsc#1229491).
• CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
• CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
• CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
• CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
• CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
• CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
• CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
• CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
• CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
• CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
• CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086). -…

The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
• CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
• CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49570: drm/xe/tracing: Fix a potential TP_printk UAF (bsc#1238782).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
• CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
• CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
• CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
• CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
• CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
• CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
• CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
• CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
• CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
• CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
• CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
• CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
• CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
• CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
• CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
• CVE-2024-58074: drm/i915: Grab intel_display from the encoder to avoid potential (bsc#1238972).
• CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
• CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510). -…

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
• CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
• CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
• CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
• CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
• CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
• CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
• CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
• CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
• CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
• CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510).
• CVE-2025-21648: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (bsc#1236142).
• CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
• CVE-2025-21696: mm: clear uffd-wp PTE/PMD state on mremap() (bsc#1237111).
• CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
• CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
• CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
• CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
• CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
• CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
• CVE-2025-21787: team: better TEAM_OPTION_TYPE_STRING validation (bsc#1238774).
• CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
• CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
• CVE-2025-21808: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742).
• CVE-2025-21812: ax25: rcu protect dev->ax25_ptr (bsc#1238471).
• CVE-2025-21814: ptp: Ensure info->enable callback is always set (bsc#1238473).
• CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (bsc#1239108).
• CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
• CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
• CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
• CVE-2025-21867: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181).
• CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
• CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
• CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
• CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
• CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
• CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
• CVE-2025-21894: net: enetc: VFs do not…

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
• CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
• CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49570: drm/xe/tracing: Fix a potential TP_printk UAF (bsc#1238782).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
• CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
• CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
• CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
• CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
• CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
• CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
• CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
• CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
• CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
• CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
• CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
• CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
• CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
• CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
• CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
• CVE-2024-58074: drm/i915: Grab intel_display from the encoder to avoid potential (bsc#1238972).
• CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
• CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510). -…

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
• CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
• CVE-2024-35910: kABI fix for tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
• CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
• CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
• CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
• CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
• CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
• CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
• CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free…

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
• CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
• CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
• CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
• CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
• CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
• CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
• CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
• CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
• CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
• CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
• CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
• CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
• CVE-2025-21894: net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC (bsc#1240581).
• CVE-2025-21895: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (bsc#1240585).
• CVE-2025-21906: wifi: iwlwifi: mvm: clean up ROC on failure (bsc#1240587).
• CVE-2025-21908: NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (bsc#1240600).
• CVE-2025-21913: x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (bsc#1240591).
• CVE-2025-21922: ppp: Fix KMSAN uninit-value warning with bpf (bsc#1240639).
• CVE-2025-21924: net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error (bsc#1240720).
• CVE-2025-21957: scsi: qla1280: Fix kernel oops when debug level > 2 (bsc#1240742).
• CVE-2025-21960: eth: bnxt: do not update checksum in bnxt_xdp_build_skb() (bsc#1240815).
• CVE-2025-21961: eth: bnxt: fix truesize for mb-xdp-pass case (bsc#1240816).
• CVE-2025-21969: kABI workaround for l2cap_conn changes (bsc#1240784).
• CVE-2025-21970: net/mlx5: Bridge, fix the crash caused by LAG state check (bsc#1240819).
• CVE-2025-21972: net: mctp: unshare packets when reassembling (bsc#1240813).
• CVE-2025-21975: net/mlx5: handle errors in mlx5_chains_create_table() (bsc#1240812).
• CVE-2025-21981: ice: fix memory leak in aRFS after reset (bsc#1240612).
• CVE-2025-21991: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (bsc#1240795).
• CVE-2025-21993: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (bsc#1240797).
• CVE-2025-2312: CIFS: New mount option for cifs.upcall namespace resolution (bsc#1239684).

The following non-security bugs were fixed:

• ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP (stable-fixes).
• ACPI: x86: Extend Lenovo Yoga Tab 3 quirk with skip GPIO event-handlers (git-fixes).
• ALSA: hda/realtek: Fix built-in mic breakage on ASUS VivoBook X515JA (git-fixes).
• ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model (git-fixes).
• ASoC: imx-card: Add NULL check in imx_card_probe() (git-fixes).
• ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns (git-fixes).
• ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment (git-fixes).
• ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path (git-fixes).
• HID:…

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
• CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
• CVE-2024-35910: kABI fix for tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
• CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
• CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
• CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
• CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
• CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
• CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
• CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free…

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
• CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
• CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
• CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
• CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
• CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
• CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
• CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
• CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
• CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
• CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
• CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
• CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
• CVE-2025-21894: net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC (bsc#1240581).
• CVE-2025-21895: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (bsc#1240585).
• CVE-2025-21906: wifi: iwlwifi: mvm: clean up ROC on failure (bsc#1240587).
• CVE-2025-21908: NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (bsc#1240600).
• CVE-2025-21913: x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (bsc#1240591).
• CVE-2025-21922: ppp: Fix KMSAN uninit-value warning with bpf (bsc#1240639).
• CVE-2025-21924: net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error (bsc#1240720).
• CVE-2025-21957: scsi: qla1280: Fix kernel oops when debug level > 2 (bsc#1240742).
• CVE-2025-21960: eth: bnxt: do not update checksum in bnxt_xdp_build_skb() (bsc#1240815).
• CVE-2025-21961: eth: bnxt: fix truesize for mb-xdp-pass case (bsc#1240816).
• CVE-2025-21969: kABI workaround for l2cap_conn changes (bsc#1240784).
• CVE-2025-21970: net/mlx5: Bridge, fix the crash caused by LAG state check (bsc#1240819).
• CVE-2025-21972: net: mctp: unshare packets when reassembling (bsc#1240813).
• CVE-2025-21975: net/mlx5: handle errors in mlx5_chains_create_table() (bsc#1240812).
• CVE-2025-21981: ice: fix memory leak in aRFS after reset (bsc#1240612).
• CVE-2025-21991: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (bsc#1240795).
• CVE-2025-21993: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (bsc#1240797).
• CVE-2025-2312: CIFS: New mount option for cifs.upcall namespace resolution (bsc#1239684).

The following non-security bugs were fixed:

• ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP (stable-fixes).
• ACPI: x86: Extend Lenovo Yoga Tab 3 quirk with skip GPIO event-handlers (git-fixes).
• ALSA: hda/realtek: Fix built-in mic breakage on ASUS VivoBook X515JA (git-fixes).
• ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model (git-fixes).
• ASoC: imx-card: Add NULL check in imx_card_probe() (git-fixes).
• ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns (git-fixes).
• ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment (git-fixes).
• ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path (git-fixes).
• HID:…

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PowerPC architecture;
• x86 architecture;
• ACPI drivers;
• Clock framework and drivers;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• PCI subsystem;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• QCOM SoC drivers;
• Thermal drivers;
• BTRFS file system;
• Ext4 file system;
• JFS file system;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• File systems infrastructure;
• Proc file system;
• SMB network file system;
• IPv6 networking;
• RDMA verbs API;
• SoC audio core drivers;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• Netfilter;
• Network traffic control;
• SMC sockets;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-23138, CVE-2025-21956, CVE-2025-21970, CVE-2025-22025, CVE-2024-46753, CVE-2025-21962, CVE-2025-37889, CVE-2025-21992, CVE-2025-39728, CVE-2025-22054, CVE-2025-21959, CVE-2024-53144, CVE-2022-49728, CVE-2024-58093, CVE-2025-38637, CVE-2025-21981, CVE-2025-21963, CVE-2025-21968, CVE-2025-22014, CVE-2024-46812, CVE-2025-22005, CVE-2025-21994, CVE-2025-22071, CVE-2025-22008, CVE-2022-49636, CVE-2025-22007, CVE-2023-53034, CVE-2025-22035, CVE-2025-22010, CVE-2025-22081, CVE-2025-22021, CVE-2024-46821, CVE-2025-21999, CVE-2025-38575, CVE-2025-22073, CVE-2025-22004, CVE-2024-42230, CVE-2025-21941, CVE-2024-56664, CVE-2025-22044, CVE-2025-39735, CVE-2025-22060, CVE-2025-22055, CVE-2025-21957, CVE-2025-21975, CVE-2025-22075, CVE-2025-22089, CVE-2025-37937, CVE-2025-38152, CVE-2025-22020, CVE-2025-22066, CVE-2025-22056, CVE-2025-22050, CVE-2025-21964, CVE-2025-21996, CVE-2025-22079, CVE-2025-23136, CVE-2025-22063, CVE-2024-36945, CVE-2025-22097, CVE-2025-37785, CVE-2025-21991, CVE-2025-22086, CVE-2025-22045, CVE-2025-22018)

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PowerPC architecture;
• x86 architecture;
• ACPI drivers;
• Clock framework and drivers;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• PCI subsystem;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• QCOM SoC drivers;
• Thermal drivers;
• BTRFS file system;
• Ext4 file system;
• JFS file system;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• File systems infrastructure;
• Proc file system;
• SMB network file system;
• IPv6 networking;
• RDMA verbs API;
• SoC audio core drivers;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• Netfilter;
• Network traffic control;
• SMC sockets;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-23138, CVE-2025-21956, CVE-2025-21970, CVE-2025-22025, CVE-2024-46753, CVE-2025-21962, CVE-2025-37889, CVE-2025-21992, CVE-2025-39728, CVE-2025-22054, CVE-2025-21959, CVE-2024-53144, CVE-2022-49728, CVE-2024-58093, CVE-2025-38637, CVE-2025-21981, CVE-2025-21963, CVE-2025-21968, CVE-2025-22014, CVE-2024-46812, CVE-2025-22005, CVE-2025-21994, CVE-2025-22071, CVE-2025-22008, CVE-2022-49636, CVE-2025-22007, CVE-2023-53034, CVE-2025-22035, CVE-2025-22010, CVE-2025-22081, CVE-2025-22021, CVE-2024-46821, CVE-2025-21999, CVE-2025-38575, CVE-2025-22073, CVE-2025-22004, CVE-2024-42230, CVE-2025-21941, CVE-2024-56664, CVE-2025-22044, CVE-2025-39735, CVE-2025-22060, CVE-2025-22055, CVE-2025-21957, CVE-2025-21975, CVE-2025-22075, CVE-2025-22089, CVE-2025-37937, CVE-2025-38152, CVE-2025-22020, CVE-2025-22066, CVE-2025-22056, CVE-2025-22050, CVE-2025-21964, CVE-2025-21996, CVE-2025-22079, CVE-2025-23136, CVE-2025-22063, CVE-2024-36945, CVE-2025-22097, CVE-2025-37785, CVE-2025-21991, CVE-2025-22086, CVE-2025-22045, CVE-2025-22018)

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PowerPC architecture;
• x86 architecture;
• ACPI drivers;
• Clock framework and drivers;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• PCI subsystem;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• QCOM SoC drivers;
• Thermal drivers;
• BTRFS file system;
• Ext4 file system;
• JFS file system;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• File systems infrastructure;
• Proc file system;
• SMB network file system;
• IPv6 networking;
• RDMA verbs API;
• SoC audio core drivers;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• Netfilter;
• Network traffic control;
• SMC sockets;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-23138, CVE-2025-21956, CVE-2025-21970, CVE-2025-22025, CVE-2024-46753, CVE-2025-21962, CVE-2025-37889, CVE-2025-21992, CVE-2025-39728, CVE-2025-22054, CVE-2025-21959, CVE-2024-53144, CVE-2022-49728, CVE-2024-58093, CVE-2025-38637, CVE-2025-21981, CVE-2025-21963, CVE-2025-21968, CVE-2025-22014, CVE-2024-46812, CVE-2025-22005, CVE-2025-21994, CVE-2025-22071, CVE-2025-22008, CVE-2022-49636, CVE-2025-22007, CVE-2023-53034, CVE-2025-22035, CVE-2025-22010, CVE-2025-22081, CVE-2025-22021, CVE-2024-46821, CVE-2025-21999, CVE-2025-38575, CVE-2025-22073, CVE-2025-22004, CVE-2024-42230, CVE-2025-21941, CVE-2024-56664, CVE-2025-22044, CVE-2025-39735, CVE-2025-22060, CVE-2025-22055, CVE-2025-21957, CVE-2025-21975, CVE-2025-22075, CVE-2025-22089, CVE-2025-37937, CVE-2025-38152, CVE-2025-22020, CVE-2025-22066, CVE-2025-22056, CVE-2025-22050, CVE-2025-21964, CVE-2025-21996, CVE-2025-22079, CVE-2025-23136, CVE-2025-22063, CVE-2024-36945, CVE-2025-22097, CVE-2025-37785, CVE-2025-21991, CVE-2025-22086, CVE-2025-22045, CVE-2025-22018)

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PowerPC architecture;
• x86 architecture;
• ACPI drivers;
• Clock framework and drivers;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• PCI subsystem;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• QCOM SoC drivers;
• Thermal drivers;
• BTRFS file system;
• Ext4 file system;
• JFS file system;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• File systems infrastructure;
• Proc file system;
• SMB network file system;
• IPv6 networking;
• RDMA verbs API;
• SoC audio core drivers;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• Netfilter;
• Network traffic control;
• SMC sockets;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-23138, CVE-2025-21956, CVE-2025-21970, CVE-2025-22025, CVE-2024-46753, CVE-2025-21962, CVE-2025-37889, CVE-2025-21992, CVE-2025-39728, CVE-2025-22054, CVE-2025-21959, CVE-2024-53144, CVE-2022-49728, CVE-2024-58093, CVE-2025-38637, CVE-2025-21981, CVE-2025-21963, CVE-2025-21968, CVE-2025-22014, CVE-2024-46812, CVE-2025-22005, CVE-2025-21994, CVE-2025-22071, CVE-2025-22008, CVE-2022-49636, CVE-2025-22007, CVE-2023-53034, CVE-2025-22035, CVE-2025-22010, CVE-2025-22081, CVE-2025-22021, CVE-2024-46821, CVE-2025-21999, CVE-2025-38575, CVE-2025-22073, CVE-2025-22004, CVE-2024-42230, CVE-2025-21941, CVE-2024-56664, CVE-2025-22044, CVE-2025-39735, CVE-2025-22060, CVE-2025-22055, CVE-2025-21957, CVE-2025-21975, CVE-2025-22075, CVE-2025-22089, CVE-2025-37937, CVE-2025-38152, CVE-2025-22020, CVE-2025-22066, CVE-2025-22056, CVE-2025-22050, CVE-2025-21964, CVE-2025-21996, CVE-2025-22079, CVE-2025-23136, CVE-2025-22063, CVE-2024-36945, CVE-2025-22097, CVE-2025-37785, CVE-2025-21991, CVE-2025-22086, CVE-2025-22045, CVE-2025-22018)

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PowerPC architecture;
• x86 architecture;
• ACPI drivers;
• Clock framework and drivers;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• PCI subsystem;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• QCOM SoC drivers;
• Thermal drivers;
• BTRFS file system;
• Ext4 file system;
• JFS file system;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• File systems infrastructure;
• Proc file system;
• SMB network file system;
• IPv6 networking;
• RDMA verbs API;
• SoC audio core drivers;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• Netfilter;
• Network traffic control;
• SMC sockets;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-23138, CVE-2025-21956, CVE-2025-21970, CVE-2025-22025, CVE-2024-46753, CVE-2025-21962, CVE-2025-37889, CVE-2025-21992, CVE-2025-39728, CVE-2025-22054, CVE-2025-21959, CVE-2024-53144, CVE-2022-49728, CVE-2024-58093, CVE-2025-38637, CVE-2025-21981, CVE-2025-21963, CVE-2025-21968, CVE-2025-22014, CVE-2024-46812, CVE-2025-22005, CVE-2025-21994, CVE-2025-22071, CVE-2025-22008, CVE-2022-49636, CVE-2025-22007, CVE-2023-53034, CVE-2025-22035, CVE-2025-22010, CVE-2025-22081, CVE-2025-22021, CVE-2024-46821, CVE-2025-21999, CVE-2025-38575, CVE-2025-22073, CVE-2025-22004, CVE-2024-42230, CVE-2025-21941, CVE-2024-56664, CVE-2025-22044, CVE-2025-39735, CVE-2025-22060, CVE-2025-22055, CVE-2025-21957, CVE-2025-21975, CVE-2025-22075, CVE-2025-22089, CVE-2025-37937, CVE-2025-38152, CVE-2025-22020, CVE-2025-22066, CVE-2025-22056, CVE-2025-22050, CVE-2025-21964, CVE-2025-21996, CVE-2025-22079, CVE-2025-23136, CVE-2025-22063, CVE-2024-36945, CVE-2025-22097, CVE-2025-37785, CVE-2025-21991, CVE-2025-22086, CVE-2025-22045, CVE-2025-22018)

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PowerPC architecture;
• x86 architecture;
• ACPI drivers;
• Clock framework and drivers;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• PCI subsystem;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• QCOM SoC drivers;
• Thermal drivers;
• BTRFS file system;
• Ext4 file system;
• JFS file system;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• File systems infrastructure;
• Proc file system;
• SMB network file system;
• IPv6 networking;
• RDMA verbs API;
• SoC audio core drivers;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• Netfilter;
• Network traffic control;
• SMC sockets;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-23138, CVE-2025-21956, CVE-2025-21970, CVE-2025-22025, CVE-2024-46753, CVE-2025-21962, CVE-2025-37889, CVE-2025-21992, CVE-2025-39728, CVE-2025-22054, CVE-2025-21959, CVE-2024-53144, CVE-2022-49728, CVE-2024-58093, CVE-2025-38637, CVE-2025-21981, CVE-2025-21963, CVE-2025-21968, CVE-2025-22014, CVE-2024-46812, CVE-2025-22005, CVE-2025-21994, CVE-2025-22071, CVE-2025-22008, CVE-2022-49636, CVE-2025-22007, CVE-2023-53034, CVE-2025-22035, CVE-2025-22010, CVE-2025-22081, CVE-2025-22021, CVE-2024-46821, CVE-2025-21999, CVE-2025-38575, CVE-2025-22073, CVE-2025-22004, CVE-2024-42230, CVE-2025-21941, CVE-2024-56664, CVE-2025-22044, CVE-2025-39735, CVE-2025-22060, CVE-2025-22055, CVE-2025-21957, CVE-2025-21975, CVE-2025-22075, CVE-2025-22089, CVE-2025-37937, CVE-2025-38152, CVE-2025-22020, CVE-2025-22066, CVE-2025-22056, CVE-2025-22050, CVE-2025-21964, CVE-2025-21996, CVE-2025-22079, CVE-2025-23136, CVE-2025-22063, CVE-2024-36945, CVE-2025-22097, CVE-2025-37785, CVE-2025-21991, CVE-2025-22086, CVE-2025-22045, CVE-2025-22018)

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PowerPC architecture;
• x86 architecture;
• ACPI drivers;
• Clock framework and drivers;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• PCI subsystem;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• QCOM SoC drivers;
• Thermal drivers;
• BTRFS file system;
• Ext4 file system;
• JFS file system;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• File systems infrastructure;
• Proc file system;
• SMB network file system;
• IPv6 networking;
• RDMA verbs API;
• SoC audio core drivers;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• Netfilter;
• Network traffic control;
• SMC sockets;
• Sun RPC protocol;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-22089, CVE-2025-22073, CVE-2025-23138, CVE-2025-21970, CVE-2025-21981, CVE-2025-22025, CVE-2025-39735, CVE-2025-22018, CVE-2025-21956, CVE-2025-39728, CVE-2024-46753, CVE-2024-58093, CVE-2025-37889, CVE-2025-22005, CVE-2025-22004, CVE-2025-21963, CVE-2025-21991, CVE-2024-56664, CVE-2025-22054, CVE-2024-46821, CVE-2023-53034, CVE-2022-49728, CVE-2025-22075, CVE-2025-21968, CVE-2025-22071, CVE-2025-22066, CVE-2025-22060, CVE-2024-46812, CVE-2025-22056, CVE-2025-22086, CVE-2022-49636, CVE-2025-21962, CVE-2025-38637, CVE-2025-22081, CVE-2025-21992, CVE-2024-42230, CVE-2025-21959, CVE-2024-53168, CVE-2025-38152, CVE-2025-22035, CVE-2025-21941, CVE-2025-22050, CVE-2025-21964, CVE-2025-22097, CVE-2025-22044, CVE-2025-22007, CVE-2025-21994, CVE-2025-22079, CVE-2024-56608, CVE-2025-37785, CVE-2025-22045, CVE-2025-22010, CVE-2024-36945, CVE-2025-21996, CVE-2025-22014, CVE-2025-21999, CVE-2025-21975, CVE-2025-22055, CVE-2025-21957, CVE-2025-37937, CVE-2025-38575, CVE-2025-22020, CVE-2025-22021, CVE-2024-53144, CVE-2025-22008, CVE-2025-22063, CVE-2024-56551, CVE-2025-23136)

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• ACPI drivers;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• Thermal drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• Ext4 file system;
• F2FS file system;
• JFS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• NTFS3 file system;
• Overlay file system;
• Proc file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• IPv6 networking;
• L3 Master device support module;
• RDMA verbs API;
• SoC audio core drivers;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Watch queue notification mechanism;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• SMC sockets;
• Sun RPC protocol;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module;
• SoC Audio for Freescale CPUs drivers; (CVE-2024-46821, CVE-2025-21992, CVE-2025-21811, CVE-2025-21806, CVE-2022-49728, CVE-2025-21959, CVE-2025-21745, CVE-2025-21708, CVE-2024-58071, CVE-2025-21941, CVE-2025-22008, CVE-2025-21865, CVE-2024-58052, CVE-2025-22097, CVE-2024-42230, CVE-2025-21765, CVE-2025-21859, CVE-2024-57981, CVE-2025-21761, CVE-2025-22007, CVE-2025-21726, CVE-2025-21956, CVE-2025-21704, CVE-2025-21910, CVE-2024-58072, CVE-2025-21934, CVE-2025-39728, CVE-2025-21948, CVE-2025-22021, CVE-2024-58007, CVE-2025-21866, CVE-2025-22089, CVE-2025-21779, CVE-2025-22086, CVE-2025-21887, CVE-2025-22056, CVE-2025-21735, CVE-2024-58093, CVE-2025-21728, CVE-2024-56721, CVE-2024-58076, CVE-2024-53144, CVE-2025-22055, CVE-2025-21772, CVE-2025-21721, CVE-2025-37785, CVE-2025-21943, CVE-2025-21920, CVE-2025-21762, CVE-2024-56608, CVE-2025-21758, CVE-2025-21718, CVE-2025-21971, CVE-2024-58083, CVE-2025-21711, CVE-2025-22079, CVE-2025-21802, CVE-2024-58051, CVE-2025-22073, CVE-2024-57973, CVE-2025-21926, CVE-2025-21823, CVE-2025-21647, CVE-2025-21731, CVE-2024-53168, CVE-2025-21791,…

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PowerPC architecture;
• x86 architecture;
• ACPI drivers;
• Clock framework and drivers;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• PCI subsystem;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• QCOM SoC drivers;
• Thermal drivers;
• BTRFS file system;
• Ext4 file system;
• JFS file system;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• File systems infrastructure;
• Proc file system;
• SMB network file system;
• IPv6 networking;
• RDMA verbs API;
• SoC audio core drivers;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• Netfilter;
• Network traffic control;
• SMC sockets;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-21994, CVE-2025-37937, CVE-2025-21964, CVE-2025-22086, CVE-2025-22073, CVE-2025-39735, CVE-2025-22025, CVE-2025-22004, CVE-2025-22055, CVE-2025-22007, CVE-2024-53144, CVE-2025-22044, CVE-2025-22014, CVE-2025-37785, CVE-2025-21959, CVE-2022-49636, CVE-2025-21968, CVE-2025-22018, CVE-2025-22035, CVE-2024-56664, CVE-2025-21975, CVE-2025-39728, CVE-2025-22045, CVE-2022-49728, CVE-2025-21962, CVE-2025-22089, CVE-2025-21963, CVE-2025-21956, CVE-2024-36945, CVE-2025-21992, CVE-2025-22010, CVE-2025-21991, CVE-2024-46812, CVE-2024-42230, CVE-2025-21941, CVE-2025-22071, CVE-2025-22020, CVE-2025-22097, CVE-2025-21999, CVE-2025-21957, CVE-2025-22063, CVE-2024-58093, CVE-2025-21970, CVE-2025-22005, CVE-2025-22021, CVE-2025-22075, CVE-2025-22050, CVE-2025-21981, CVE-2025-22054, CVE-2025-38152, CVE-2025-38575, CVE-2025-38637, CVE-2023-53034, CVE-2025-22056, CVE-2025-22008, CVE-2024-46821, CVE-2025-23138, CVE-2024-46753, CVE-2025-37889, CVE-2025-22081, CVE-2025-21996, CVE-2025-22066, CVE-2025-22060, CVE-2025-23136, CVE-2025-22079)

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PowerPC architecture;
• x86 architecture;
• ACPI drivers;
• Clock framework and drivers;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• PCI subsystem;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• QCOM SoC drivers;
• Thermal drivers;
• BTRFS file system;
• Ext4 file system;
• JFS file system;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• File systems infrastructure;
• Proc file system;
• SMB network file system;
• IPv6 networking;
• RDMA verbs API;
• SoC audio core drivers;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• Netfilter;
• Network traffic control;
• SMC sockets;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-21994, CVE-2025-37937, CVE-2025-21964, CVE-2025-22086, CVE-2025-22073, CVE-2025-39735, CVE-2025-22025, CVE-2025-22004, CVE-2025-22055, CVE-2025-22007, CVE-2024-53144, CVE-2025-22044, CVE-2025-22014, CVE-2025-37785, CVE-2025-21959, CVE-2022-49636, CVE-2025-21968, CVE-2025-22018, CVE-2025-22035, CVE-2024-56664, CVE-2025-21975, CVE-2025-39728, CVE-2025-22045, CVE-2022-49728, CVE-2025-21962, CVE-2025-22089, CVE-2025-21963, CVE-2025-21956, CVE-2024-36945, CVE-2025-21992, CVE-2025-22010, CVE-2025-21991, CVE-2024-46812, CVE-2024-42230, CVE-2025-21941, CVE-2025-22071, CVE-2025-22020, CVE-2025-22097, CVE-2025-21999, CVE-2025-21957, CVE-2025-22063, CVE-2024-58093, CVE-2025-21970, CVE-2025-22005, CVE-2025-22021, CVE-2025-22075, CVE-2025-22050, CVE-2025-21981, CVE-2025-22054, CVE-2025-38152, CVE-2025-38575, CVE-2025-38637, CVE-2023-53034, CVE-2025-22056, CVE-2025-22008, CVE-2024-46821, CVE-2025-23138, CVE-2024-46753, CVE-2025-37889, CVE-2025-22081, CVE-2025-21996, CVE-2025-22066, CVE-2025-22060, CVE-2025-23136, CVE-2025-22079)

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PowerPC architecture;
• x86 architecture;
• ACPI drivers;
• Clock framework and drivers;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• PCI subsystem;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• QCOM SoC drivers;
• Thermal drivers;
• BTRFS file system;
• Ext4 file system;
• JFS file system;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• File systems infrastructure;
• Proc file system;
• SMB network file system;
• IPv6 networking;
• RDMA verbs API;
• SoC audio core drivers;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• Netfilter;
• Network traffic control;
• SMC sockets;
• Sun RPC protocol;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-21959, CVE-2025-21996, CVE-2024-46821, CVE-2025-38575, CVE-2025-22045, CVE-2025-21970, CVE-2025-21956, CVE-2025-21994, CVE-2025-23136, CVE-2025-39735, CVE-2025-23138, CVE-2025-22020, CVE-2025-21957, CVE-2025-22063, CVE-2025-21975, CVE-2025-22050, CVE-2024-53144, CVE-2025-21991, CVE-2025-22035, CVE-2024-42230, CVE-2025-22007, CVE-2025-22071, CVE-2025-22060, CVE-2025-22079, CVE-2025-21999, CVE-2025-22081, CVE-2025-22021, CVE-2025-21964, CVE-2024-56664, CVE-2024-56608, CVE-2025-38152, CVE-2025-21992, CVE-2024-56551, CVE-2025-22089, CVE-2025-22075, CVE-2024-53168, CVE-2022-49728, CVE-2022-49636, CVE-2025-22010, CVE-2025-38637, CVE-2025-22004, CVE-2025-21963, CVE-2025-22086, CVE-2025-22097, CVE-2025-21962, CVE-2025-22014, CVE-2024-46753, CVE-2025-22073, CVE-2025-22018, CVE-2025-22044, CVE-2025-21941, CVE-2025-39728, CVE-2025-22055, CVE-2025-37785, CVE-2025-22025, CVE-2025-22066, CVE-2023-53034, CVE-2025-22008, CVE-2025-22054, CVE-2025-37937, CVE-2025-37889, CVE-2025-22005, CVE-2025-21968, CVE-2024-58093, CVE-2024-36945, CVE-2025-21981, CVE-2025-22056, CVE-2024-46812)

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• ACPI drivers;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• Thermal drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• Ext4 file system;
• F2FS file system;
• JFS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• NTFS3 file system;
• Overlay file system;
• Proc file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• IPv6 networking;
• L3 Master device support module;
• Netfilter;
• RDMA verbs API;
• SoC audio core drivers;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Watch queue notification mechanism;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• Logical Link layer;
• Multipath TCP;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• SMC sockets;
• Sun RPC protocol;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-21647, CVE-2025-21925, CVE-2024-58034, CVE-2024-46812, CVE-2024-56721, CVE-2025-21811, CVE-2025-21719, CVE-2025-21859, CVE-2025-21745, CVE-2023-53034, CVE-2025-21924, CVE-2024-58052, CVE-2024-58090, CVE-2025-21950, CVE-2025-21753, CVE-2024-57977, CVE-2025-21910, CVE-2025-21806, CVE-2024-58063, CVE-2025-21835, CVE-2024-58001, CVE-2025-21804, CVE-2025-21887, CVE-2024-53144, CVE-2025-38152, CVE-2024-56599, CVE-2025-22035, CVE-2025-22045, CVE-2025-21926, CVE-2024-58069, CVE-2025-21749, CVE-2023-52664, CVE-2025-21779, CVE-2025-21957, CVE-2025-21877, CVE-2025-22008, CVE-2025-21760, CVE-2025-22071, CVE-2025-22079, CVE-2024-56664, CVE-2024-42230, CVE-2025-21748, CVE-2025-21744, CVE-2025-21758, CVE-2025-21767, CVE-2025-21999, CVE-2025-21970, CVE-2025-21826, CVE-2025-38637, CVE-2025-21846, CVE-2025-22073, CVE-2025-23138, CVE-2025-22097, CVE-2025-22056, CVE-2024-58093, CVE-2025-21935, CVE-2025-21785, CVE-2025-22010, CVE-2025-22075, CVE-2025-21948, CVE-2025-21862, CVE-2025-38575, CVE-2025-22004, CVE-2025-22063, CVE-2025-21905, CVE-2025-21962,…

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Compute Acceleration Framework;
• ACPI drivers;
• Ublk userspace block driver;
• Compressed RAM block device driver;
• Bus devices;
• AMD CDX bus driver;
• Clock framework and drivers;
• DMA engine subsystem;
• DPLL subsystem;
• Qualcomm firmware drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• IIO subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• NVME drivers;
• PCI subsystem;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• VideoCore services drivers;
• Thermal drivers;
• USB DSL drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Virtio Host (VHOST) subsystem;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• W1 Dallas's 1-wire bus driver;
• 9P distributed file system;
• File systems infrastructure;
• Ext4 file system;
• JFS file system;
• Network file systems library;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• Proc file system;
• SMB network file system;
• Memory Management;
• Key Management;
• Memory management;
• Scheduler infrastructure;
• UProbes tracing;
• RDMA verbs API;
• SoC audio core drivers;
• BPF subsystem;
• Perf events;
• Kernel fork() syscall;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Netfilter;
• Network traffic control;
• SCTP protocol;
• Switch device API;
• Wireless networking;
• eXpress Data Path;
• Key management;
• ALSA framework;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-21913, CVE-2025-22070, CVE-2025-21918, CVE-2025-21916, CVE-2025-22090, CVE-2025-22040, CVE-2025-21972, CVE-2025-21920, CVE-2025-22071, CVE-2025-21989, CVE-2025-22037, CVE-2025-22068, CVE-2025-38049, CVE-2025-21980, CVE-2025-21956, CVE-2025-21962, CVE-2025-21929, CVE-2025-37785, CVE-2025-37889, CVE-2025-21990, CVE-2025-21966, CVE-2025-38240, CVE-2025-22058, CVE-2025-22072, CVE-2025-22056, CVE-2025-21963, CVE-2025-23134, CVE-2025-22075, CVE-2025-22054, CVE-2025-22064, CVE-2025-22027, CVE-2025-21927, CVE-2025-21943, CVE-2025-22081, CVE-2025-21975, CVE-2025-39735, CVE-2025-22088, CVE-2025-21996, CVE-2025-22009, CVE-2025-22000, CVE-2025-21912, CVE-2025-21967, CVE-2025-21995, CVE-2025-21973, CVE-2025-21908, CVE-2025-22047, CVE-2025-21930, CVE-2025-22078, CVE-2025-21957, CVE-2025-22021, CVE-2025-22019, CVE-2025-21935, CVE-2025-21951, CVE-2025-37937, CVE-2025-22043, CVE-2025-22057, CVE-2025-21922, CVE-2025-22003, CVE-2025-21978, CVE-2025-22010, CVE-2025-39989, CVE-2025-22034, CVE-2025-21986, CVE-2025-22016, CVE-2025-21960, CVE-2025-22038, CVE-2025-21924, CVE-2025-22015, CVE-2025-38152, CVE-2025-21939, CVE-2025-21917, CVE-2025-21974, CVE-2025-22001, CVE-2025-22025, CVE-2025-22062, CVE-2025-21979, CVE-2025-21911, CVE-2025-22045, CVE-2025-21914, CVE-2025-21937, CVE-2025-22095, CVE-2025-21981, CVE-2025-22014,…

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Compute Acceleration Framework;
• ACPI drivers;
• Ublk userspace block driver;
• Compressed RAM block device driver;
• Bus devices;
• AMD CDX bus driver;
• Clock framework and drivers;
• DMA engine subsystem;
• DPLL subsystem;
• Qualcomm firmware drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• IIO subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• NVME drivers;
• PCI subsystem;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• VideoCore services drivers;
• Thermal drivers;
• USB DSL drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Virtio Host (VHOST) subsystem;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• W1 Dallas's 1-wire bus driver;
• 9P distributed file system;
• File systems infrastructure;
• Ext4 file system;
• JFS file system;
• Network file systems library;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• Proc file system;
• SMB network file system;
• Memory Management;
• Key Management;
• Memory management;
• Scheduler infrastructure;
• UProbes tracing;
• RDMA verbs API;
• SoC audio core drivers;
• BPF subsystem;
• Perf events;
• Kernel fork() syscall;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Netfilter;
• Network traffic control;
• SCTP protocol;
• Switch device API;
• Wireless networking;
• eXpress Data Path;
• Key management;
• ALSA framework;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-21913, CVE-2025-22070, CVE-2025-21918, CVE-2025-21916, CVE-2025-22090, CVE-2025-22040, CVE-2025-21972, CVE-2025-21920, CVE-2025-22071, CVE-2025-21989, CVE-2025-22037, CVE-2025-22068, CVE-2025-38049, CVE-2025-21980, CVE-2025-21956, CVE-2025-21962, CVE-2025-21929, CVE-2025-37785, CVE-2025-37889, CVE-2025-21990, CVE-2025-21966, CVE-2025-38240, CVE-2025-22058, CVE-2025-22072, CVE-2025-22056, CVE-2025-21963, CVE-2025-23134, CVE-2025-22075, CVE-2025-22054, CVE-2025-22064, CVE-2025-22027, CVE-2025-21927, CVE-2025-21943, CVE-2025-22081, CVE-2025-21975, CVE-2025-39735, CVE-2025-22088, CVE-2025-21996, CVE-2025-22009, CVE-2025-22000, CVE-2025-21912, CVE-2025-21967, CVE-2025-21995, CVE-2025-21973, CVE-2025-21908, CVE-2025-22047, CVE-2025-21930, CVE-2025-22078, CVE-2025-21957, CVE-2025-22021, CVE-2025-22019, CVE-2025-21935, CVE-2025-21951, CVE-2025-37937, CVE-2025-22043, CVE-2025-22057, CVE-2025-21922, CVE-2025-22003, CVE-2025-21978, CVE-2025-22010, CVE-2025-39989, CVE-2025-22034, CVE-2025-21986, CVE-2025-22016, CVE-2025-21960, CVE-2025-22038, CVE-2025-21924, CVE-2025-22015, CVE-2025-38152, CVE-2025-21939, CVE-2025-21917, CVE-2025-21974, CVE-2025-22001, CVE-2025-22025, CVE-2025-22062, CVE-2025-21979, CVE-2025-21911, CVE-2025-22045, CVE-2025-21914, CVE-2025-21937, CVE-2025-22095, CVE-2025-21981, CVE-2025-22014,…

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Compute Acceleration Framework;
• ACPI drivers;
• Ublk userspace block driver;
• Compressed RAM block device driver;
• Bus devices;
• AMD CDX bus driver;
• Clock framework and drivers;
• DMA engine subsystem;
• DPLL subsystem;
• Qualcomm firmware drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• IIO subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• NVME drivers;
• PCI subsystem;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• VideoCore services drivers;
• Thermal drivers;
• USB DSL drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Virtio Host (VHOST) subsystem;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• W1 Dallas's 1-wire bus driver;
• 9P distributed file system;
• File systems infrastructure;
• Ext4 file system;
• JFS file system;
• Network file systems library;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• Proc file system;
• SMB network file system;
• Memory Management;
• Key Management;
• Memory management;
• Scheduler infrastructure;
• UProbes tracing;
• RDMA verbs API;
• SoC audio core drivers;
• BPF subsystem;
• Perf events;
• Kernel fork() syscall;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Netfilter;
• Network traffic control;
• SCTP protocol;
• Switch device API;
• Wireless networking;
• eXpress Data Path;
• Key management;
• ALSA framework;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-22072, CVE-2025-22039, CVE-2025-22078, CVE-2025-21972, CVE-2025-21989, CVE-2025-21919, CVE-2025-22030, CVE-2025-22084, CVE-2025-22086, CVE-2025-21956, CVE-2025-21924, CVE-2025-22016, CVE-2025-23138, CVE-2025-22059, CVE-2025-21928, CVE-2025-21906, CVE-2025-21947, CVE-2025-21936, CVE-2025-21982, CVE-2025-38152, CVE-2025-38049, CVE-2025-21974, CVE-2025-21962, CVE-2025-22075, CVE-2025-21959, CVE-2025-22002, CVE-2025-22014, CVE-2025-21905, CVE-2025-22044, CVE-2025-22000, CVE-2025-21925, CVE-2025-21944, CVE-2025-21926, CVE-2025-21904, CVE-2024-58092, CVE-2025-21964, CVE-2025-22009, CVE-2025-22083, CVE-2025-21992, CVE-2025-39778, CVE-2025-22021, CVE-2025-22090, CVE-2025-21934, CVE-2025-22043, CVE-2025-22027, CVE-2025-21951, CVE-2025-22019, CVE-2025-21908, CVE-2025-22062, CVE-2025-22071, CVE-2025-21914, CVE-2025-21966, CVE-2025-21984, CVE-2025-39735, CVE-2025-21912, CVE-2025-21979, CVE-2025-22063, CVE-2025-37785, CVE-2025-22081, CVE-2025-22024, CVE-2025-38637, CVE-2025-22070, CVE-2025-21911, CVE-2025-21935, CVE-2024-58093, CVE-2025-21960, CVE-2025-21913, CVE-2025-21927, CVE-2025-21977, CVE-2025-37843, CVE-2025-22055, CVE-2025-22035, CVE-2025-21998, CVE-2025-22041, CVE-2025-21945, CVE-2025-22080, CVE-2025-21963, CVE-2025-21994, CVE-2025-21957, CVE-2025-22079, CVE-2025-22034, CVE-2025-21946, CVE-2025-22053,…

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Compute Acceleration Framework;
• ACPI drivers;
• Ublk userspace block driver;
• Compressed RAM block device driver;
• Bus devices;
• AMD CDX bus driver;
• Clock framework and drivers;
• DMA engine subsystem;
• DPLL subsystem;
• Qualcomm firmware drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• IIO subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Media drivers;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• NVME drivers;
• PCI subsystem;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• VideoCore services drivers;
• Thermal drivers;
• USB DSL drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Virtio Host (VHOST) subsystem;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• W1 Dallas's 1-wire bus driver;
• 9P distributed file system;
• File systems infrastructure;
• Ext4 file system;
• JFS file system;
• Network file systems library;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• Proc file system;
• SMB network file system;
• Memory Management;
• Key Management;
• Memory management;
• Scheduler infrastructure;
• UProbes tracing;
• RDMA verbs API;
• SoC audio core drivers;
• BPF subsystem;
• Perf events;
• Kernel fork() syscall;
• Tracing infrastructure;
• Watch queue notification mechanism;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Networking core;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Netfilter;
• Network traffic control;
• SCTP protocol;
• Switch device API;
• Wireless networking;
• eXpress Data Path;
• Key management;
• ALSA framework;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-39728, CVE-2025-22059, CVE-2025-22008, CVE-2025-37932, CVE-2025-22033, CVE-2025-21984, CVE-2025-22063, CVE-2025-22065, CVE-2025-21991, CVE-2025-38479, CVE-2025-21948, CVE-2025-21936, CVE-2025-22038, CVE-2025-21951, CVE-2025-21906, CVE-2025-21924, CVE-2025-21966, CVE-2025-22073, CVE-2025-22020, CVE-2025-21974, CVE-2025-22043, CVE-2025-22088, CVE-2025-21959, CVE-2025-38575, CVE-2025-22035, CVE-2025-23134, CVE-2025-22009, CVE-2025-22010, CVE-2025-21941, CVE-2025-21914, CVE-2025-22066, CVE-2025-22017, CVE-2025-21911, CVE-2025-21928, CVE-2025-21998, CVE-2025-21920, CVE-2025-21961, CVE-2025-21992, CVE-2025-21995, CVE-2025-21997, CVE-2025-22084, CVE-2025-22011, CVE-2025-22039, CVE-2025-21977, CVE-2025-21963, CVE-2025-21981, CVE-2024-53222, CVE-2025-22037, CVE-2025-22070, CVE-2025-21950, CVE-2025-21980, CVE-2025-22023, CVE-2025-38049, CVE-2025-22018, CVE-2025-22072, CVE-2025-22021, CVE-2025-21986, CVE-2025-22019, CVE-2025-22045, CVE-2025-21990, CVE-2025-21926, CVE-2025-39989, CVE-2025-21902, CVE-2025-21946, CVE-2025-21908, CVE-2025-22081, CVE-2025-22042, CVE-2024-58092, CVE-2025-21939, CVE-2025-22086, CVE-2025-21996, CVE-2025-21929, CVE-2025-21947, CVE-2025-21919, CVE-2025-21922, CVE-2023-53034, CVE-2025-22013, CVE-2025-21979, CVE-2025-21968, CVE-2025-22056, CVE-2025-37937, CVE-2025-22047, CVE-2025-21956,…

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PA-RISC architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• ACPI drivers;
• Serial ATA and Parallel ATA drivers;
• Bluetooth drivers;
• Bus devices;
• Clock framework and drivers;
• CPU frequency scaling framework;
• Buffer Sharing and Synchronization framework;
• DMA engine subsystem;
• ARM SCMI message protocol;
• GPU drivers;
• HID subsystem;
• HSI subsystem;
• I2C subsystem;
• I3C subsystem;
• IIO subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• IRQ chip drivers;
• MCB driver;
• Multiple devices driver;
• Media drivers;
• MemoryStick subsystem;
• Multifunction device drivers;
• PCI Endpoint Test driver;
• MTD block device drivers;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• Device tree and open firmware driver;
• PCI subsystem;
• TI SCI PM domains driver;
• PWM drivers;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• S/390 drivers;
• SCSI subsystem;
• QCOM SoC drivers;
• Samsung SoC drivers;
• TCM subsystem;
• Thermal drivers;
• UFS subsystem;
• Cadence USB3 driver;
• ChipIdea USB driver;
• USB Device Class drivers;
• DesignWare USB3 driver;
• USB Gadget drivers;
• USB Type-C support driver;
• USB Type-C Connector System Software Interface driver;
• Backlight driver;
• Framebuffer layer;
• Xen hypervisor drivers;
• BTRFS file system;
• Ext4 file system;
• F2FS file system;
• File systems infrastructure;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NTFS3 file system;
• Proc file system;
• SMB network file system;
• Kernel stack handling interfaces;
• Bluetooth subsystem;
• IPv6 networking;
• Network traffic control;
• SCTP protocol;
• RDMA verbs API;
• SoC audio core drivers;
• BPF subsystem;
• Kernel command line parsing driver;
• Tracing infrastructure;
• Watch queue notification mechanism;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Networking core;
• IPv4 networking;
• MAC80211 subsystem;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Open vSwitch;
• Phonet protocol;
• SMC sockets;
• Sun RPC protocol;
• TIPC protocol;
• TLS protocol;
• SoC Audio for Freescale CPUs drivers;
• Virtio sound driver;
• CPU Power monitoring subsystem; (CVE-2025-37989, CVE-2025-22071, CVE-2025-37808, CVE-2025-37983, CVE-2025-38001, CVE-2024-46816, CVE-2024-50125, CVE-2025-38575, CVE-2025-37766, CVE-2022-49168, CVE-2025-22025, CVE-2025-22035, CVE-2025-37923, CVE-2024-49989, CVE-2025-23148, CVE-2024-53051, CVE-2025-39728, CVE-2025-21956, CVE-2025-37741, CVE-2025-37970, CVE-2025-37798, CVE-2025-23157, CVE-2025-38177, CVE-2022-49535, CVE-2025-22027, CVE-2025-37756, CVE-2025-38023, CVE-2025-22066, CVE-2025-37780, CVE-2025-37995, CVE-2025-37739, CVE-2025-37932, CVE-2025-37982, CVE-2025-37812, CVE-2025-23156, CVE-2025-38005, CVE-2025-21839, CVE-2025-37892, CVE-2025-22073, CVE-2024-35866, CVE-2023-52757, CVE-2025-37785, CVE-2025-23150, CVE-2024-58093, CVE-2025-21992, CVE-2025-37905, CVE-2025-37836, CVE-2025-21964, CVE-2025-23140, CVE-2025-22056, CVE-2025-37915, CVE-2025-22054,…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• x86 architecture;
• Compute Acceleration Framework;
• Bus devices;
• AMD CDX bus driver;
• DPLL subsystem;
• EFI core;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Network drivers;
• Mellanox network drivers;
• NVME drivers;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• UFS subsystem;
• USB DSL drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• Network file system (NFS) client;
• Proc file system;
• SMB network file system;
• Memory Management;
• Scheduler infrastructure;
• SoC audio core drivers;
• Perf events;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Network traffic control;
• Switch device API;
• Wireless networking;
• eXpress Data Path; (CVE-2025-22008, CVE-2025-21872, CVE-2025-21945, CVE-2025-37889, CVE-2025-21997, CVE-2025-21935, CVE-2025-21986, CVE-2025-21890, CVE-2025-21925, CVE-2024-58090, CVE-2025-38569, CVE-2025-21911, CVE-2025-21957, CVE-2025-21891, CVE-2025-21924, CVE-2025-21956, CVE-2025-21994, CVE-2025-22013, CVE-2025-21964, CVE-2025-21909, CVE-2025-21888, CVE-2025-21918, CVE-2025-21981, CVE-2025-21966, CVE-2025-22011, CVE-2025-21877, CVE-2025-21913, CVE-2025-21895, CVE-2025-21929, CVE-2025-22010, CVE-2025-21992, CVE-2025-21930, CVE-2025-21982, CVE-2025-21894, CVE-2025-21934, CVE-2025-21873, CVE-2025-21914, CVE-2025-21941, CVE-2025-21962, CVE-2025-22014, CVE-2025-21905, CVE-2025-21908, CVE-2025-21898, CVE-2025-21878, CVE-2025-22009, CVE-2025-21961, CVE-2025-22015, CVE-2025-21883, CVE-2025-21916, CVE-2025-22016, CVE-2025-21936, CVE-2025-21947, CVE-2025-21927, CVE-2025-22004, CVE-2025-21926, CVE-2025-21969, CVE-2025-21976, CVE-2025-21912, CVE-2025-21920, CVE-2025-21951, CVE-2025-22005, CVE-2025-21978, CVE-2025-21975, CVE-2025-22007, CVE-2025-21928, CVE-2025-21968, CVE-2025-21963, CVE-2025-21977, CVE-2025-21915, CVE-2025-21980, CVE-2025-22047, CVE-2025-21972, CVE-2025-21892, CVE-2025-22003, CVE-2025-21979, CVE-2025-21944, CVE-2025-21880, CVE-2025-21899, CVE-2025-21995, CVE-2025-22017, CVE-2025-21946, CVE-2025-22001, CVE-2025-21904, CVE-2025-21881, CVE-2025-21917, CVE-2025-21970, CVE-2025-21889, CVE-2025-21922, CVE-2025-21875, CVE-2025-21919, CVE-2025-21991, CVE-2025-21967, CVE-2025-21960, CVE-2025-21959, CVE-2025-21955, CVE-2025-21996, CVE-2025-21950, CVE-2025-21937, CVE-2025-21948, CVE-2025-21903, CVE-2025-21885, CVE-2025-21999, CVE-2025-21910)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• x86 architecture;
• Compute Acceleration Framework;
• Bus devices;
• AMD CDX bus driver;
• DPLL subsystem;
• EFI core;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Network drivers;
• Mellanox network drivers;
• NVME drivers;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• UFS subsystem;
• USB DSL drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• Network file system (NFS) client;
• Proc file system;
• SMB network file system;
• Memory Management;
• Scheduler infrastructure;
• SoC audio core drivers;
• Perf events;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Network traffic control;
• Switch device API;
• Wireless networking;
• eXpress Data Path; (CVE-2025-21945, CVE-2025-21991, CVE-2025-22008, CVE-2025-21996, CVE-2025-21924, CVE-2025-21986, CVE-2025-21872, CVE-2025-21962, CVE-2025-22007, CVE-2025-37889, CVE-2025-21889, CVE-2025-21968, CVE-2025-21903, CVE-2025-21955, CVE-2025-21982, CVE-2025-21929, CVE-2025-21944, CVE-2025-22004, CVE-2025-21997, CVE-2025-21941, CVE-2025-22047, CVE-2025-21915, CVE-2025-21995, CVE-2025-22011, CVE-2025-21891, CVE-2025-22009, CVE-2025-22015, CVE-2024-58090, CVE-2025-21947, CVE-2025-21976, CVE-2025-21964, CVE-2025-21904, CVE-2025-21880, CVE-2025-21918, CVE-2025-21950, CVE-2025-21948, CVE-2025-21888, CVE-2025-22014, CVE-2025-21963, CVE-2025-21875, CVE-2025-21967, CVE-2025-21972, CVE-2025-21895, CVE-2025-21961, CVE-2025-21926, CVE-2025-21892, CVE-2025-21916, CVE-2025-21894, CVE-2025-21930, CVE-2025-21927, CVE-2025-21911, CVE-2025-21936, CVE-2025-21881, CVE-2025-38569, CVE-2025-21873, CVE-2025-21951, CVE-2025-22003, CVE-2025-21877, CVE-2025-21908, CVE-2025-21956, CVE-2025-21977, CVE-2025-21917, CVE-2025-21922, CVE-2025-21959, CVE-2025-22005, CVE-2025-22017, CVE-2025-22016, CVE-2025-21878, CVE-2025-21970, CVE-2025-21905, CVE-2025-21978, CVE-2025-21981, CVE-2025-21980, CVE-2025-21910, CVE-2025-21925, CVE-2025-21885, CVE-2025-21946, CVE-2025-21937, CVE-2025-21919, CVE-2025-22013, CVE-2025-21883, CVE-2025-21957, CVE-2025-21914, CVE-2025-21909, CVE-2025-21934, CVE-2025-21975, CVE-2025-21912, CVE-2025-21969, CVE-2025-21898, CVE-2025-21890, CVE-2025-21899, CVE-2025-22001, CVE-2025-21979, CVE-2025-21966, CVE-2025-21935, CVE-2025-21920, CVE-2025-21913, CVE-2025-22010, CVE-2025-21992, CVE-2025-21960, CVE-2025-21994, CVE-2025-21999, CVE-2025-21928)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• x86 architecture;
• Compute Acceleration Framework;
• Bus devices;
• AMD CDX bus driver;
• DPLL subsystem;
• EFI core;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Network drivers;
• Mellanox network drivers;
• NVME drivers;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• UFS subsystem;
• USB DSL drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• Network file system (NFS) client;
• Proc file system;
• SMB network file system;
• Memory Management;
• Scheduler infrastructure;
• SoC audio core drivers;
• Perf events;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Network traffic control;
• Switch device API;
• Wireless networking;
• eXpress Data Path; (CVE-2025-21980, CVE-2025-21999, CVE-2025-21991, CVE-2025-21937, CVE-2025-22016, CVE-2025-21920, CVE-2025-21979, CVE-2025-21919, CVE-2025-21969, CVE-2025-21872, CVE-2025-21996, CVE-2025-21927, CVE-2025-21904, CVE-2025-22013, CVE-2025-21928, CVE-2025-21891, CVE-2025-21889, CVE-2025-21972, CVE-2025-21981, CVE-2025-38569, CVE-2025-21910, CVE-2025-21945, CVE-2025-22011, CVE-2025-21916, CVE-2025-21924, CVE-2025-21922, CVE-2025-21975, CVE-2025-21880, CVE-2025-21995, CVE-2025-21977, CVE-2025-21947, CVE-2025-21914, CVE-2025-21905, CVE-2025-22009, CVE-2025-21892, CVE-2025-22005, CVE-2024-58090, CVE-2025-21926, CVE-2025-37889, CVE-2025-21966, CVE-2025-21955, CVE-2025-22007, CVE-2025-21894, CVE-2025-21909, CVE-2025-21883, CVE-2025-21992, CVE-2025-21976, CVE-2025-21890, CVE-2025-21898, CVE-2025-21982, CVE-2025-21877, CVE-2025-21925, CVE-2025-21970, CVE-2025-21930, CVE-2025-21946, CVE-2025-22017, CVE-2025-21908, CVE-2025-21944, CVE-2025-21885, CVE-2025-22010, CVE-2025-21917, CVE-2025-21918, CVE-2025-21934, CVE-2025-21950, CVE-2025-21963, CVE-2025-22003, CVE-2025-21961, CVE-2025-21967, CVE-2025-21878, CVE-2025-21895, CVE-2025-21913, CVE-2025-21875, CVE-2025-21959, CVE-2025-22008, CVE-2025-21968, CVE-2025-21936, CVE-2025-21956, CVE-2025-21903, CVE-2025-22004, CVE-2025-21986, CVE-2025-21915, CVE-2025-21964, CVE-2025-22014, CVE-2025-21994, CVE-2025-21912, CVE-2025-21873, CVE-2025-21957, CVE-2025-22015, CVE-2025-21997, CVE-2025-21948, CVE-2025-21951, CVE-2025-21962, CVE-2025-22001, CVE-2025-21978, CVE-2025-21960, CVE-2025-22047, CVE-2025-21935, CVE-2025-21899, CVE-2025-21911, CVE-2025-21881, CVE-2025-21929, CVE-2025-21941)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• x86 architecture;
• Compute Acceleration Framework;
• Bus devices;
• AMD CDX bus driver;
• DPLL subsystem;
• EFI core;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Network drivers;
• Mellanox network drivers;
• NVME drivers;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• UFS subsystem;
• USB DSL drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• Network file system (NFS) client;
• Proc file system;
• SMB network file system;
• Memory Management;
• Scheduler infrastructure;
• SoC audio core drivers;
• Perf events;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Network traffic control;
• Switch device API;
• Wireless networking;
• eXpress Data Path; (CVE-2025-21961, CVE-2025-21895, CVE-2025-21934, CVE-2025-21898, CVE-2024-58090, CVE-2025-21999, CVE-2025-22004, CVE-2025-21966, CVE-2025-21922, CVE-2025-21920, CVE-2025-21911, CVE-2025-21885, CVE-2025-21912, CVE-2025-21996, CVE-2025-21924, CVE-2025-21914, CVE-2025-21936, CVE-2025-21944, CVE-2025-21877, CVE-2025-21909, CVE-2025-21986, CVE-2025-21890, CVE-2025-22009, CVE-2025-21905, CVE-2025-21969, CVE-2025-21935, CVE-2025-21917, CVE-2025-22008, CVE-2025-21994, CVE-2025-21980, CVE-2025-22014, CVE-2025-21915, CVE-2025-21991, CVE-2025-22015, CVE-2025-21875, CVE-2025-21975, CVE-2025-21878, CVE-2025-21930, CVE-2025-21967, CVE-2025-21908, CVE-2025-22007, CVE-2025-21899, CVE-2025-21950, CVE-2025-21959, CVE-2025-21937, CVE-2025-22010, CVE-2025-21945, CVE-2025-21997, CVE-2025-21992, CVE-2025-22003, CVE-2025-22013, CVE-2025-21963, CVE-2025-22001, CVE-2025-21927, CVE-2025-21894, CVE-2025-21960, CVE-2025-21956, CVE-2025-21948, CVE-2025-21929, CVE-2025-21919, CVE-2025-21972, CVE-2025-21883, CVE-2025-21880, CVE-2025-21976, CVE-2025-22005, CVE-2025-22016, CVE-2025-21978, CVE-2025-21873, CVE-2025-21925, CVE-2025-21904, CVE-2025-21928, CVE-2025-21892, CVE-2025-21891, CVE-2025-21995, CVE-2025-21968, CVE-2025-21982, CVE-2025-21918, CVE-2025-21889, CVE-2025-21970, CVE-2025-21910, CVE-2025-21913, CVE-2025-21926, CVE-2025-21955, CVE-2025-21947, CVE-2025-21979, CVE-2025-21981, CVE-2025-22011, CVE-2025-21888, CVE-2025-37889, CVE-2025-21957, CVE-2025-21977, CVE-2025-21903, CVE-2025-21946, CVE-2025-21941, CVE-2025-21964, CVE-2025-21951, CVE-2025-21962, CVE-2025-22017, CVE-2025-21872, CVE-2025-21881, CVE-2025-21916)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• x86 architecture;
• Compute Acceleration Framework;
• Bus devices;
• AMD CDX bus driver;
• DPLL subsystem;
• EFI core;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Network drivers;
• Mellanox network drivers;
• NVME drivers;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• UFS subsystem;
• USB DSL drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• Network file system (NFS) client;
• Proc file system;
• SMB network file system;
• Memory Management;
• Scheduler infrastructure;
• SoC audio core drivers;
• Perf events;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Network traffic control;
• Switch device API;
• Wireless networking;
• eXpress Data Path; (CVE-2025-21966, CVE-2025-21895, CVE-2025-21944, CVE-2025-21986, CVE-2025-21918, CVE-2025-21873, CVE-2025-21963, CVE-2025-21929, CVE-2025-21995, CVE-2025-22017, CVE-2025-21991, CVE-2025-21960, CVE-2025-21946, CVE-2025-21976, CVE-2025-21922, CVE-2025-21925, CVE-2025-21903, CVE-2025-21978, CVE-2025-21979, CVE-2025-22016, CVE-2025-21936, CVE-2025-21997, CVE-2025-21992, CVE-2025-21920, CVE-2025-21875, CVE-2025-21934, CVE-2025-21919, CVE-2025-21972, CVE-2025-22001, CVE-2025-21981, CVE-2025-21910, CVE-2025-21969, CVE-2025-22010, CVE-2025-21908, CVE-2025-21957, CVE-2025-22009, CVE-2025-21927, CVE-2025-21930, CVE-2025-21994, CVE-2025-21980, CVE-2025-21885, CVE-2025-21967, CVE-2025-21899, CVE-2025-21890, CVE-2025-21948, CVE-2025-21964, CVE-2025-21911, CVE-2025-21982, CVE-2025-21883, CVE-2025-21913, CVE-2025-21917, CVE-2025-21905, CVE-2025-21968, CVE-2025-22013, CVE-2025-22005, CVE-2025-21916, CVE-2025-21880, CVE-2025-21881, CVE-2025-22003, CVE-2025-21892, CVE-2025-21937, CVE-2025-21970, CVE-2025-22004, CVE-2025-21950, CVE-2025-21924, CVE-2025-21894, CVE-2025-21904, CVE-2025-21915, CVE-2025-21889, CVE-2025-21912, CVE-2025-21909, CVE-2025-21888, CVE-2025-21935, CVE-2025-22008, CVE-2025-37889, CVE-2025-21878, CVE-2025-21926, CVE-2025-22011, CVE-2025-21962, CVE-2025-22007, CVE-2025-21941, CVE-2025-21898, CVE-2025-21956, CVE-2025-22015, CVE-2025-21961, CVE-2025-21872, CVE-2025-21891, CVE-2025-21947, CVE-2025-21955, CVE-2025-21877, CVE-2025-21996, CVE-2025-21977, CVE-2025-21945, CVE-2025-21914, CVE-2025-21975, CVE-2024-58090, CVE-2025-21959, CVE-2025-22014, CVE-2025-21951, CVE-2025-21928, CVE-2025-21999)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• x86 architecture;
• Compute Acceleration Framework;
• Bus devices;
• AMD CDX bus driver;
• DPLL subsystem;
• EFI core;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Network drivers;
• Mellanox network drivers;
• NVME drivers;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• UFS subsystem;
• USB DSL drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• Network file system (NFS) client;
• Proc file system;
• SMB network file system;
• Memory Management;
• Scheduler infrastructure;
• SoC audio core drivers;
• Perf events;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Network traffic control;
• Switch device API;
• Wireless networking;
• eXpress Data Path; (CVE-2025-21964, CVE-2025-21890, CVE-2025-21934, CVE-2025-21929, CVE-2025-21922, CVE-2025-21970, CVE-2025-21913, CVE-2025-21937, CVE-2025-21872, CVE-2025-21972, CVE-2025-21892, CVE-2025-21991, CVE-2025-21967, CVE-2025-21894, CVE-2025-21881, CVE-2025-21885, CVE-2025-21999, CVE-2025-21978, CVE-2025-22001, CVE-2025-21979, CVE-2025-21951, CVE-2025-22003, CVE-2025-21963, CVE-2025-21936, CVE-2025-21891, CVE-2025-21941, CVE-2025-21895, CVE-2025-21982, CVE-2025-21919, CVE-2025-21961, CVE-2025-21946, CVE-2025-21889, CVE-2025-21899, CVE-2025-21873, CVE-2025-37889, CVE-2025-22008, CVE-2025-21969, CVE-2025-21957, CVE-2025-21925, CVE-2025-21945, CVE-2025-21927, CVE-2025-21878, CVE-2025-21995, CVE-2025-21981, CVE-2025-21956, CVE-2025-21909, CVE-2025-21955, CVE-2025-21918, CVE-2025-21960, CVE-2025-21915, CVE-2025-21992, CVE-2025-21914, CVE-2025-21877, CVE-2025-21875, CVE-2025-21928, CVE-2025-22013, CVE-2025-22014, CVE-2025-21950, CVE-2025-21948, CVE-2025-21912, CVE-2025-21944, CVE-2025-22004, CVE-2025-22009, CVE-2025-21968, CVE-2025-21888, CVE-2025-21980, CVE-2025-21911, CVE-2025-22017, CVE-2025-21975, CVE-2025-21930, CVE-2025-21947, CVE-2025-21908, CVE-2025-21994, CVE-2024-58090, CVE-2025-21910, CVE-2025-21959, CVE-2025-21977, CVE-2025-21903, CVE-2025-22016, CVE-2025-21976, CVE-2025-21898, CVE-2025-21986, CVE-2025-22011, CVE-2025-21905, CVE-2025-22015, CVE-2025-21996, CVE-2025-21966, CVE-2025-21883, CVE-2025-22010, CVE-2025-21904, CVE-2025-21916, CVE-2025-21935, CVE-2025-21924, CVE-2025-22005, CVE-2025-21962, CVE-2025-21917, CVE-2025-21920, CVE-2025-21997, CVE-2025-21880, CVE-2025-21926, CVE-2025-22007)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• x86 architecture;
• Compute Acceleration Framework;
• Bus devices;
• AMD CDX bus driver;
• DPLL subsystem;
• EFI core;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Network drivers;
• Mellanox network drivers;
• NVME drivers;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• UFS subsystem;
• USB DSL drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• Network file system (NFS) client;
• Overlay file system;
• Proc file system;
• SMB network file system;
• Memory Management;
• Scheduler infrastructure;
• SoC audio core drivers;
• Perf events;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Network traffic control;
• Switch device API;
• Wireless networking;
• eXpress Data Path; (CVE-2025-22017, CVE-2025-22003, CVE-2025-22009, CVE-2025-22015, CVE-2025-21934, CVE-2025-21908, CVE-2025-21885, CVE-2025-21979, CVE-2025-21887, CVE-2025-21922, CVE-2025-21944, CVE-2025-21905, CVE-2025-21969, CVE-2025-21904, CVE-2025-21926, CVE-2025-21951, CVE-2025-21997, CVE-2025-21920, CVE-2025-21994, CVE-2025-21977, CVE-2025-21976, CVE-2025-21975, CVE-2025-21972, CVE-2025-22013, CVE-2025-21894, CVE-2025-21963, CVE-2025-21978, CVE-2025-38569, CVE-2025-21936, CVE-2025-21873, CVE-2025-22010, CVE-2025-21981, CVE-2025-22005, CVE-2025-21959, CVE-2025-21929, CVE-2025-21927, CVE-2025-21966, CVE-2025-22008, CVE-2025-21957, CVE-2025-21970, CVE-2025-21968, CVE-2025-21889, CVE-2025-22047, CVE-2025-21881, CVE-2025-21956, CVE-2025-22011, CVE-2025-21986, CVE-2025-21892, CVE-2025-21964, CVE-2025-21899, CVE-2025-21877, CVE-2025-21875, CVE-2025-21912, CVE-2025-22001, CVE-2025-38350, CVE-2025-21991, CVE-2025-21930, CVE-2025-21962, CVE-2025-21880, CVE-2024-57996, CVE-2025-21914, CVE-2025-22014, CVE-2025-21888, CVE-2025-21955, CVE-2025-21937, CVE-2025-21924, CVE-2025-21895, CVE-2025-21947, CVE-2025-21946, CVE-2025-21878, CVE-2025-21918, CVE-2025-21913, CVE-2025-21945, CVE-2025-37752, CVE-2025-21935, CVE-2025-21950, CVE-2025-21960, CVE-2024-58090, CVE-2025-21992, CVE-2025-21961, CVE-2025-21948, CVE-2025-21982, CVE-2025-21910, CVE-2025-21909, CVE-2025-21925, CVE-2025-37889, CVE-2025-21967, CVE-2025-21898, CVE-2025-22007, CVE-2025-21995, CVE-2025-22016, CVE-2025-21891, CVE-2025-21911, CVE-2025-21890, CVE-2025-21999, CVE-2025-22004, CVE-2025-21915, CVE-2025-21996, CVE-2025-21980, CVE-2025-21903, CVE-2025-21916, CVE-2025-21941, CVE-2025-21928, CVE-2025-21919, CVE-2025-21883, CVE-2025-21872, CVE-2025-21917)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• x86 architecture;
• Compute Acceleration Framework;
• Bus devices;
• AMD CDX bus driver;
• DPLL subsystem;
• EFI core;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Multiple devices driver;
• Network drivers;
• Mellanox network drivers;
• NVME drivers;
• Pin controllers subsystem;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• UFS subsystem;
• USB DSL drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Connector System Software Interface driver;
• Framebuffer layer;
• ACRN Hypervisor Service Module driver;
• Network file system (NFS) client;
• Proc file system;
• SMB network file system;
• Memory Management;
• Scheduler infrastructure;
• SoC audio core drivers;
• Perf events;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• Bluetooth subsystem;
• Devlink API;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Network traffic control;
• Switch device API;
• Wireless networking;
• eXpress Data Path; (CVE-2025-21944, CVE-2025-21927, CVE-2025-21996, CVE-2025-21928, CVE-2025-21888, CVE-2025-21995, CVE-2025-21929, CVE-2025-21873, CVE-2025-21875, CVE-2025-21894, CVE-2025-21878, CVE-2025-21977, CVE-2024-58090, CVE-2025-21872, CVE-2025-21905, CVE-2025-21963, CVE-2025-21991, CVE-2025-21947, CVE-2025-21924, CVE-2025-21899, CVE-2025-21992, CVE-2025-21909, CVE-2025-21920, CVE-2025-21917, CVE-2025-21972, CVE-2025-21997, CVE-2025-21999, CVE-2025-21895, CVE-2025-22013, CVE-2025-21936, CVE-2025-21881, CVE-2025-21956, CVE-2025-22010, CVE-2025-22015, CVE-2025-21959, CVE-2025-21980, CVE-2025-22017, CVE-2025-22005, CVE-2025-21935, CVE-2025-21911, CVE-2025-21914, CVE-2025-22001, CVE-2025-21913, CVE-2025-22007, CVE-2025-21966, CVE-2025-21962, CVE-2025-21908, CVE-2025-21910, CVE-2025-22014, CVE-2025-22016, CVE-2025-21957, CVE-2025-21968, CVE-2025-21986, CVE-2025-21981, CVE-2025-21880, CVE-2025-21950, CVE-2025-21982, CVE-2025-21976, CVE-2025-21979, CVE-2025-21912, CVE-2025-21951, CVE-2025-21994, CVE-2025-21946, CVE-2025-21955, CVE-2025-21898, CVE-2025-21960, CVE-2025-21883, CVE-2025-21970, CVE-2025-21891, CVE-2025-21919, CVE-2025-21964, CVE-2025-21926, CVE-2025-21877, CVE-2025-21903, CVE-2025-21978, CVE-2025-21885, CVE-2025-21948, CVE-2025-21930, CVE-2025-22009, CVE-2025-21918, CVE-2025-21890, CVE-2025-21925, CVE-2025-22003, CVE-2025-22008, CVE-2025-21934, CVE-2025-21961, CVE-2025-22004, CVE-2025-21941, CVE-2025-21915, CVE-2025-21967, CVE-2025-21904, CVE-2025-21916, CVE-2025-37889, CVE-2025-21922, CVE-2025-21892, CVE-2025-21975, CVE-2025-21945, CVE-2025-21889, CVE-2025-21937, CVE-2025-21969)