CVE-2025-38072

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf()

A null pointer dereference can happen when attempting to access the "gsm->receive()" function in gsmld_receive_buf(). Currently, the code assumes that gsm->recieve is only called after MUX activation. Since the gsmld_receive_buf() function can be accessed without the need to initialize the MUX, the gsm->receive() function will not be set and a NULL pointer dereference will occur.

Fix this by avoiding the call to "gsm->receive()" in case the function is not initialized by adding a sanity check.

Call Trace: <TASK> gsmld_receive_buf+0x1c2/0x2f0 drivers/tty/n_gsm.c:2861 tiocsti drivers/tty/tty_io.c:2293 [inline] tty_ioctl+0xa75/0x15d0 drivers/tty/tty_io.c:2692 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x193/0x200 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd(CVE-2022-49940)

In the Linux kernel, the following vulnerability has been resolved:

iio: light: opt3001: fix deadlock due to concurrent flag access

The threaded IRQ function in this driver is reading the flag twice: once to lock a mutex and once to unlock it. Even though the code setting the flag is designed to prevent it, there are subtle cases where the flag could be true at the mutex_lock stage and false at the mutex_unlock stage. This results in the mutex not being unlocked, resulting in a deadlock.

Fix it by making the opt3001_irq() code generally more robust, reading the flag into a variable and using the variable value at both stages.(CVE-2025-37968)

In the Linux kernel, the following vulnerability has been resolved:

nfs: handle failure of nfs_get_lock_context in unlock path

When memory is insufficient, the allocation of nfs_lock_context in nfs_get_lock_context() fails and returns -ENOMEM. If we mistakenly treat an nfs4_unlockdata structure (whose l_ctx member has been set to -ENOMEM) as valid and proceed to execute rpc_run_task(), this will trigger a NULL pointer dereference in nfs4_locku_prepare. For example:

BUG: kernel NULL pointer dereference, address: 000000000000000c PGD 0 P4D 0 Oops: Oops: 0000 [#1] SMP PTI CPU: 15 UID: 0 PID: 12 Comm: kworker/u64:0 Not tainted 6.15.0-rc2-dirty #60 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 Workqueue: rpciod rpc_async_schedule RIP: 0010:nfs4_locku_prepare+0x35/0xc2 Code: 89 f2 48 89 fd 48 c7 c7 68 69 ef b5 53 48 8b 8e 90 00 00 00 48 89 f3 RSP: 0018:ffffbbafc006bdb8 EFLAGS: 00010246 RAX: 000000000000004b RBX: ffff9b964fc1fa00 RCX: 0000000000000000 RDX: 0000000000000000 RSI: fffffffffffffff4 RDI: ffff9ba53fddbf40 RBP: ffff9ba539934000 R08: 0000000000000000 R09: ffffbbafc006bc38 R10: ffffffffb6b689c8 R11: 0000000000000003 R12: ffff9ba539934030 R13: 0000000000000001 R14: 0000000004248060 R15: ffffffffb56d1c30 FS: 0000000000000000(0000) GS:ffff9ba5881f0000(0000) knlGS:00000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000000000c CR3: 000000093f244000 CR4: 00000000000006f0 Call Trace: <TASK> __rpc_execute+0xbc/0x480 rpc_async_schedule+0x2f/0x40 process_one_work+0x232/0x5d0 worker_thread+0x1da/0x3d0 ? __pfx_worker_thread+0x10/0x10 kthread+0x10d/0x240 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x34/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK> Modules linked in: CR2: 000000000000000c ---[ end trace 0000000000000000 ]---

Free the allocated nfs4_unlockdata when nfs_get_lock_context() fails and return NULL to terminate subsequent rpc_run_task, preventing NULL pointer dereference.(CVE-2025-38023)

In the Linux kernel, the following vulnerability has been resolved:

libnvdimm/labels: Fix…

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

iio: light: opt3001: fix deadlock due to concurrent flag access

The threaded IRQ function in this driver is reading the flag twice: once to lock a mutex and once to unlock it. Even though the code setting the flag is designed to prevent it, there are subtle cases where the flag could be true at the mutex_lock stage and false at the mutex_unlock stage. This results in the mutex not being unlocked, resulting in a deadlock.

Fix it by making the opt3001_irq() code generally more robust, reading the flag into a variable and using the variable value at both stages.(CVE-2025-37968)

In the Linux kernel, the following vulnerability has been resolved:

nfs: handle failure of nfs_get_lock_context in unlock path

When memory is insufficient, the allocation of nfs_lock_context in nfs_get_lock_context() fails and returns -ENOMEM. If we mistakenly treat an nfs4_unlockdata structure (whose l_ctx member has been set to -ENOMEM) as valid and proceed to execute rpc_run_task(), this will trigger a NULL pointer dereference in nfs4_locku_prepare. For example:

BUG: kernel NULL pointer dereference, address: 000000000000000c PGD 0 P4D 0 Oops: Oops: 0000 [#1] SMP PTI CPU: 15 UID: 0 PID: 12 Comm: kworker/u64:0 Not tainted 6.15.0-rc2-dirty #60 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 Workqueue: rpciod rpc_async_schedule RIP: 0010:nfs4_locku_prepare+0x35/0xc2 Code: 89 f2 48 89 fd 48 c7 c7 68 69 ef b5 53 48 8b 8e 90 00 00 00 48 89 f3 RSP: 0018:ffffbbafc006bdb8 EFLAGS: 00010246 RAX: 000000000000004b RBX: ffff9b964fc1fa00 RCX: 0000000000000000 RDX: 0000000000000000 RSI: fffffffffffffff4 RDI: ffff9ba53fddbf40 RBP: ffff9ba539934000 R08: 0000000000000000 R09: ffffbbafc006bc38 R10: ffffffffb6b689c8 R11: 0000000000000003 R12: ffff9ba539934030 R13: 0000000000000001 R14: 0000000004248060 R15: ffffffffb56d1c30 FS: 0000000000000000(0000) GS:ffff9ba5881f0000(0000) knlGS:00000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000000000c CR3: 000000093f244000 CR4: 00000000000006f0 Call Trace: <TASK> __rpc_execute+0xbc/0x480 rpc_async_schedule+0x2f/0x40 process_one_work+0x232/0x5d0 worker_thread+0x1da/0x3d0 ? __pfx_worker_thread+0x10/0x10 kthread+0x10d/0x240 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x34/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK> Modules linked in: CR2: 000000000000000c ---[ end trace 0000000000000000 ]---

Free the allocated nfs4_unlockdata when nfs_get_lock_context() fails and return NULL to terminate subsequent rpc_run_task, preventing NULL pointer dereference.(CVE-2025-38023)

In the Linux kernel, the following vulnerability has been resolved:

libnvdimm/labels: Fix divide error in nd_label_data_init()

If a faulty CXL memory device returns a broken zero LSA size in its memory device information (Identify Memory Device (Opcode 4000h), CXL spec. 3.1, 8.2.9.9.1.1), a divide error occurs in the libnvdimm driver:

Oops: divide error: 0000 [#1] PREEMPT SMP NOPTI RIP: 0010:nd_label_data_init+0x10e/0x800 [libnvdimm]

Code and flow:

1. CXL Command 4000h returns LSA size = 0
2. config_size is assigned to zero LSA size (CXL pmem driver):

drivers/cxl/pmem.c: .config_size = mds->lsa_size,

3. max_xfer is set to zero (nvdimm driver):

drivers/nvdimm/label.c: max_xfer = min_t(size_t, ndd->nsarea.max_xfer, config_size);

4. A subsequent DIV_ROUND_UP() causes a division by zero:

drivers/nvdimm/label.c: /* Make our initial read size a multiple of max_xfer size */ drivers/nvdimm/label.c: read_size = min(DIV_ROUND_UP(read_size, max_xfer) * max_xfer, drivers/nvdimm/label.c- config_size);

Fix this by checking the config size parameter by extending an existing check.(CVE-2025-38072)

In the Linux kernel, the following vulnerability has been resolved:

dma-buf: insert memory barrier before updating…

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

arm64: Don't call NULL in do_compat_alignment_fixup()

do_alignment_t32_to_handler() only fixes up alignment faults for specific instructions; it returns NULL otherwise (e.g. LDREX). When that's the case, signal to the caller that it needs to proceed with the regular alignment fault handling (i.e. SIGBUS). Without this patch, the kernel panics:

Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 Mem abort info: ESR = 0x0000000086000006 EC = 0x21: IABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x06: level 2 translation fault user pgtable: 4k pages, 48-bit VAs, pgdp=00000800164aa000 [0000000000000000] pgd=0800081fdbd22003, p4d=0800081fdbd22003, pud=08000815d51c6003, pmd=0000000000000000 Internal error: Oops: 0000000086000006 [#1] SMP Modules linked in: cfg80211 rfkill xt_nat xt_tcpudp xt_conntrack nft_chain_nat xt_MASQUERADE nf_nat nf_conntrack_netlink nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 xfrm_user xfrm_algo xt_addrtype nft_compat br_netfilter veth nvme_fa> libcrc32c crc32c_generic raid0 multipath linear dm_mod dax raid1 md_mod xhci_pci nvme xhci_hcd nvme_core t10_pi usbcore igb crc64_rocksoft crc64 crc_t10dif crct10dif_generic crct10dif_ce crct10dif_common usb_common i2c_algo_bit i2c> CPU: 2 PID: 3932954 Comm: WPEWebProcess Not tainted 6.1.0-31-arm64 #1 Debian 6.1.128-1 Hardware name: GIGABYTE MP32-AR1-00/MP32-AR1-00, BIOS F18v (SCP: 1.08.20211002) 12/01/2021 pstate: 80400009 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : 0x0 lr : do_compat_alignment_fixup+0xd8/0x3dc sp : ffff80000f973dd0 x29: ffff80000f973dd0 x28: ffff081b42526180 x27: 0000000000000000 x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000000 x23: 0000000000000004 x22: 0000000000000000 x21: 0000000000000001 x20: 00000000e8551f00 x19: ffff80000f973eb0 x18: 0000000000000000 x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000000000 x10: 0000000000000000 x9 : ffffaebc949bc488 x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000400000 x4 : 0000fffffffffffe x3 : 0000000000000000 x2 : ffff80000f973eb0 x1 : 00000000e8551f00 x0 : 0000000000000001 Call trace: 0x0 do_alignment_fault+0x40/0x50 do_mem_abort+0x4c/0xa0 el0_da+0x48/0xf0 el0t_32_sync_handler+0x110/0x140 el0t_32_sync+0x190/0x194 Code: bad PC value ---[ end trace 0000000000000000 ]---(CVE-2025-22033)

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses

Acquire a lock on kvm->srcu when userspace is getting MP state to handle a rather extreme edge case where "accepting" APIC events, i.e. processing pending INIT or SIPI, can trigger accesses to guest memory. If the vCPU is in L2 with INIT and a TRIPLE_FAULT request pending, then getting MP state will trigger a nested VM-Exit by way of ->check_nested_events(), and emuating the nested VM-Exit can access guest memory.

The splat was originally hit by syzkaller on a Google-internal kernel, and reproduced on an upstream kernel by hacking the triple_fault_event_test selftest to stuff a pending INIT, store an MSR on VM-Exit (to generate a memory access on VMX), and do vcpu_mp_state_get() to trigger the scenario.

============================= WARNING: suspicious RCU usage 6.14.0-rc3-b112d356288b-vmx/pi_lockdep_false_pos-lock #3 Not tainted

include/linux/kvm_host.h:1058 suspicious rcu_dereference_check() usage!

other info that might help us debug this:

rcu_scheduler_active = 2, debug_locks = 1 1 lock held by triple_fault_ev/1256: #0: ffff88810df5a330…

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

arm64: Don't call NULL in do_compat_alignment_fixup()

do_alignment_t32_to_handler() only fixes up alignment faults for specific instructions; it returns NULL otherwise (e.g. LDREX). When that's the case, signal to the caller that it needs to proceed with the regular alignment fault handling (i.e. SIGBUS). Without this patch, the kernel panics:

Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 Mem abort info: ESR = 0x0000000086000006 EC = 0x21: IABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x06: level 2 translation fault user pgtable: 4k pages, 48-bit VAs, pgdp=00000800164aa000 [0000000000000000] pgd=0800081fdbd22003, p4d=0800081fdbd22003, pud=08000815d51c6003, pmd=0000000000000000 Internal error: Oops: 0000000086000006 [#1] SMP Modules linked in: cfg80211 rfkill xt_nat xt_tcpudp xt_conntrack nft_chain_nat xt_MASQUERADE nf_nat nf_conntrack_netlink nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 xfrm_user xfrm_algo xt_addrtype nft_compat br_netfilter veth nvme_fa> libcrc32c crc32c_generic raid0 multipath linear dm_mod dax raid1 md_mod xhci_pci nvme xhci_hcd nvme_core t10_pi usbcore igb crc64_rocksoft crc64 crc_t10dif crct10dif_generic crct10dif_ce crct10dif_common usb_common i2c_algo_bit i2c> CPU: 2 PID: 3932954 Comm: WPEWebProcess Not tainted 6.1.0-31-arm64 #1 Debian 6.1.128-1 Hardware name: GIGABYTE MP32-AR1-00/MP32-AR1-00, BIOS F18v (SCP: 1.08.20211002) 12/01/2021 pstate: 80400009 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : 0x0 lr : do_compat_alignment_fixup+0xd8/0x3dc sp : ffff80000f973dd0 x29: ffff80000f973dd0 x28: ffff081b42526180 x27: 0000000000000000 x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000000 x23: 0000000000000004 x22: 0000000000000000 x21: 0000000000000001 x20: 00000000e8551f00 x19: ffff80000f973eb0 x18: 0000000000000000 x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000000000 x10: 0000000000000000 x9 : ffffaebc949bc488 x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000400000 x4 : 0000fffffffffffe x3 : 0000000000000000 x2 : ffff80000f973eb0 x1 : 00000000e8551f00 x0 : 0000000000000001 Call trace: 0x0 do_alignment_fault+0x40/0x50 do_mem_abort+0x4c/0xa0 el0_da+0x48/0xf0 el0t_32_sync_handler+0x110/0x140 el0t_32_sync+0x190/0x194 Code: bad PC value ---[ end trace 0000000000000000 ]---(CVE-2025-22033)

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses

Acquire a lock on kvm->srcu when userspace is getting MP state to handle a rather extreme edge case where "accepting" APIC events, i.e. processing pending INIT or SIPI, can trigger accesses to guest memory. If the vCPU is in L2 with INIT and a TRIPLE_FAULT request pending, then getting MP state will trigger a nested VM-Exit by way of ->check_nested_events(), and emuating the nested VM-Exit can access guest memory.

The splat was originally hit by syzkaller on a Google-internal kernel, and reproduced on an upstream kernel by hacking the triple_fault_event_test selftest to stuff a pending INIT, store an MSR on VM-Exit (to generate a memory access on VMX), and do vcpu_mp_state_get() to trigger the scenario.

============================= WARNING: suspicious RCU usage 6.14.0-rc3-b112d356288b-vmx/pi_lockdep_false_pos-lock #3 Not tainted

include/linux/kvm_host.h:1058 suspicious rcu_dereference_check() usage!

other info that might help us debug this:

rcu_scheduler_active = 2, debug_locks = 1 1 lock held by triple_fault_ev/1256: #0: ffff88810df5a330…

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

crypto: iaa - Fix potential use after free bug

The free_device_compression_mode(iaa_device, device_mode) function frees "device_mode" but it iss passed to iaa_compression_modes[i]->free() a few lines later resulting in a use after free.

The good news is that, so far as I can tell, nothing implements the ->free() function and the use after free happens in dead code. But, with this fix, when something does implement it, we'll be ready. :)(CVE-2024-47732)

In the Linux kernel, the following vulnerability has been resolved:

mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()

If migration succeeded, we called folio_migrate_flags()->mem_cgroup_migrate() to migrate the memcg from the old to the new folio. This will set memcg_data of the old folio to 0.

Similarly, if migration failed, memcg_data of the dst folio is left unset.

If we call folio_putback_lru() on such folios (memcg_data == 0), we will add the folio to be freed to the LRU, making memcg code unhappy. Running the hmm selftests:

./hmm-tests

...

RUN hmm.hmm_device_private.migrate ...

[ 102.078007][T14893] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x7ff27d200 pfn:0x13cc00 [ 102.079974][T14893] anon flags: 0x17ff00000020018(uptodate|dirty|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 102.082037][T14893] raw: 017ff00000020018 dead000000000100 dead000000000122 ffff8881353896c9 [ 102.083687][T14893] raw: 00000007ff27d200 0000000000000000 00000001ffffffff 0000000000000000 [ 102.085331][T14893] page dumped because: VM_WARN_ON_ONCE_FOLIO(!memcg && !mem_cgroup_disabled()) [ 102.087230][T14893] ------------[ cut here ]------------ [ 102.088279][T14893] WARNING: CPU: 0 PID: 14893 at ./include/linux/memcontrol.h:726 folio_lruvec_lock_irqsave+0x10e/0x170 [ 102.090478][T14893] Modules linked in: [ 102.091244][T14893] CPU: 0 UID: 0 PID: 14893 Comm: hmm-tests Not tainted 6.13.0-09623-g6c216bc522fd #151 [ 102.093089][T14893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-2.fc40 04/01/2014 [ 102.094848][T14893] RIP: 0010:folio_lruvec_lock_irqsave+0x10e/0x170 [ 102.096104][T14893] Code: ... [ 102.099908][T14893] RSP: 0018:ffffc900236c37b0 EFLAGS: 00010293 [ 102.101152][T14893] RAX: 0000000000000000 RBX: ffffea0004f30000 RCX: ffffffff8183f426 [ 102.102684][T14893] RDX: ffff8881063cb880 RSI: ffffffff81b8117f RDI: ffff8881063cb880 [ 102.104227][T14893] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 102.105757][T14893] R10: 0000000000000001 R11: 0000000000000002 R12: ffffc900236c37d8 [ 102.107296][T14893] R13: ffff888277a2bcb0 R14: 000000000000001f R15: 0000000000000000 [ 102.108830][T14893] FS: 00007ff27dbdd740(0000) GS:ffff888277a00000(0000) knlGS:0000000000000000 [ 102.110643][T14893] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.111924][T14893] CR2: 00007ff27d400000 CR3: 000000010866e000 CR4: 0000000000750ef0 [ 102.113478][T14893] PKRU: 55555554 [ 102.114172][T14893] Call Trace: [ 102.114805][T14893] <TASK> [ 102.115397][T14893] ? folio_lruvec_lock_irqsave+0x10e/0x170 [ 102.116547][T14893] ? __warn.cold+0x110/0x210 [ 102.117461][T14893] ? folio_lruvec_lock_irqsave+0x10e/0x170 [ 102.118667][T14893] ? report_bug+0x1b9/0x320 [ 102.119571][T14893] ? handle_bug+0x54/0x90 [ 102.120494][T14893] ? exc_invalid_op+0x17/0x50 [ 102.121433][T14893] ? asm_exc_invalid_op+0x1a/0x20 [ 102.122435][T14893] ? __wake_up_klogd.part.0+0x76/0xd0 [ 102.123506][T14893] ? dump_page+0x4f/0x60 [ 102.124352][T14893] ? folio_lruvec_lock_irqsave+0x10e/0x170 [ 102.125500][T14893] folio_batch_move_lru+0xd4/0x200 [ 102.126577][T14893] ? __pfx_lru_add+0x10/0x10 [ 102.127505][T14893] …

Root has patched CVE-2025-38072 in the linux package for Root:Debian:11. Multiple fixed versions available.

Root has patched CVE-2025-38072 in the linux package for Root:Debian:12. Multiple fixed versions available.

Root has patched CVE-2025-38072 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Root has patched CVE-2025-38072 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

In the Linux kernel, the following vulnerability has been resolved: libnvdimm/labels: Fix divide error in nd_label_data_init() If a faulty CXL memory device returns a broken zero LSA size in its memory device information (Identify Memory Device (Opcode 4000h), CXL spec. 3.1, 8.2.9.9.1.1), a divide error occurs in the libnvdimm driver: Oops: divide error: 0000 [#1] PREEMPT SMP NOPTI RIP: 0010:nd_label_data_init+0x10e/0x800 [libnvdimm] Code and flow: 1) CXL Command 4000h returns LSA size = 0 2) config_size is assigned to zero LSA size (CXL pmem driver): drivers/cxl/pmem.c: .config_size = mds->lsa_size, 3) max_xfer is set to zero (nvdimm driver): drivers/nvdimm/label.c: max_xfer = min_t(size_t, ndd->nsarea.max_xfer, config_size); 4) A subsequent DIV_ROUND_UP() causes a division by zero: drivers/nvdimm/label.c: /* Make our initial read size a multiple of max_xfer size */ drivers/nvdimm/label.c: read_size = min(DIV_ROUND_UP(read_size, max_xfer) * max_xfer, drivers/nvdimm/label.c- config_size); Fix this by checking the config size parameter by extending an existing check.

In the Linux kernel, the following vulnerability has been resolved:

libnvdimm/labels: Fix divide error in nd_label_data_init()

If a faulty CXL memory device returns a broken zero LSA size in its memory device information (Identify Memory Device (Opcode 4000h), CXL spec. 3.1, 8.2.9.9.1.1), a divide error occurs in the libnvdimm driver:

Oops: divide error: 0000 [#1] PREEMPT SMP NOPTI RIP: 0010:nd_label_data_init+0x10e/0x800 [libnvdimm]

Code and flow:

1. CXL Command 4000h returns LSA size = 0
2. config_size is assigned to zero LSA size (CXL pmem driver):

drivers/cxl/pmem.c: .config_size = mds->lsa_size,

3. max_xfer is set to zero (nvdimm driver):

drivers/nvdimm/label.c: max_xfer = min_t(size_t, ndd->nsarea.max_xfer, config_size);

4. A subsequent DIV_ROUND_UP() causes a division by zero:

drivers/nvdimm/label.c: /* Make our initial read size a multiple of max_xfer size */ drivers/nvdimm/label.c: read_size = min(DIV_ROUND_UP(read_size, max_xfer) * max_xfer, drivers/nvdimm/label.c- config_size);

Fix this by checking the config size parameter by extending an existing check.

• rds: tcp: block BH in TCP callbacks
• kexec: Improve & fix crash_exclude_mem_range() to handle overlapping ranges
• module: correctly exit module_kallsyms_on_each_symbol when fn() != 0
• module: potential uninitialized return in module_kallsyms_on_each_symbol()
• module: use RCU to synchronize find_module
• kallsyms: refactor {,module_}kallsyms_on_each_symbol
• LTS tag: v5.4.295
• scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops
• arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() {CVE-2025-38320}
• perf: Fix sample vs do_exit() {CVE-2025-38424}
• s390/pci: Fix __pcilg_mio_inuser() inline assembly
• rtc: test: Fix invalid format specifier.
• jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() {CVE-2025-38337}
• mm/huge_memory: fix dereferencing invalid pmd migration entry {CVE-2025-37958}
• rtc: Make rtc_time64_to_tm() support dates before 1970
• rtc: Improve performance of rtc_time64_to_tm(). Add tests.
• xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create {CVE-2022-48773}
• posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352}
• ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms
• ARM: dts: am335x-bone-common: Increase MDIO reset deassert time
• ARM: dts: am335x-bone-common: Add GPIO PHY reset on revision C3 board
• net: atm: fix /proc/net/atm/lec handling {CVE-2025-38180}
• net: atm: add lec_mutex {CVE-2025-38323}
• calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). {CVE-2025-38181}
• tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer {CVE-2025-38184}
• tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior
• atm: atmtcp: Free invalid length skb in atmtcp_c_send(). {CVE-2025-38185}
• mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). {CVE-2025-38324}
• wifi: carl9170: do not ping device which has failed to load firmware {CVE-2025-38420}
• aoe: clean device rq_list in aoedev_downdev() {CVE-2025-38326}
• hwmon: (occ) fix unaligned accesses
• drm/nouveau/bl: increase buffer size to avoid truncate warning
• erofs: remove unused trace event erofs_destroy_inode
• ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged
• ALSA: hda/intel: Add Thinkpad E15 to PM deny list
• Input: sparcspkr - avoid unannotated fall-through
• HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
• atm: Revert atm_account_tx() if copy_from_iter_full() fails. {CVE-2025-38190}
• selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
• scsi: s390: zfcp: Ensure synchronous unit_add
• scsi: storvsc: Increase the timeouts to storvsc_timeout
• jffs2: check jffs2_prealloc_raw_node_refs() result in few other places {CVE-2025-38328}
• jffs2: check that raw node were preallocated before writing summary {CVE-2025-38194}
• drivers/rapidio/rio_cm.c: prevent possible heap overwrite {CVE-2025-38090}
• powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery
• platform/x86: dell_rbu: Stop overwriting data buffer
• platform: Add Surface platform directory
• Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first"
• tee: Prevent size calculation wraparound on 32-bit kernels
• ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY
• bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value
• watchdog: da9052_wdt: respect TWDMIN
• i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200}
• sock: Correct error checking condition for (assign|release)_proto_idx()
• scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332}
• vxlan: Do not treat dst cache initialization errors as fatal
• clk: rockchip: rk3036: mark ddrphy as critical
• wifi: mac80211: do not offer a mesh path if forwarding is disabled
• net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info
• pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get()
• pinctrl: armada-37xx:…

• crypto: algif_aead - Fix minimum RX size check for decryption {CVE-2026-31431}
• crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl {CVE-2026-31431}
• crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-31431}
• crypto: authencesn - Fix src offset when decrypting in-place {CVE-2026-31431}
• crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption {CVE-2026-31431}
• crypto: authenc - use memcpy_sglist() instead of null skcipher {CVE-2026-31431}
• crypto: algif_aead - snapshot IV for async AEAD requests {CVE-2026-31431}
• crypto: algif_aead - Revert to operating out-of-place {CVE-2026-31431}
• crypto: algif_aead - use memcpy_sglist() instead of null skcipher {CVE-2026-31431}
• crypto: scatterwalk - Backport memcpy_sglist() {CVE-2026-31431}
• wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() {CVE-2022-50551}
• bonding: limit BOND_MODE_8023AD to Ethernet devices {CVE-2026-23099}
• libceph: make decode_pool() more resilient against corrupted osdmaps {CVE-2025-71116}
• scsi: qla2xxx: Fix bsg_done() causing double free {CVE-2025-71238}
• ftrace: Fix use-after-free for dynamic ftrace_ops {CVE-2022-49892}
• intel_th: msu: Fix vmalloced buffers {CVE-2022-50142}
• vt: Clear selection before changing the font {CVE-2022-49948}
• ACPICA: Fix error code path in acpi_ds_call_control_method() {CVE-2022-50411}
• usbnet: Run unregister_netdev() before unbind_all() {CVE-2022-50220}
• ipvs: fix WARNING in ip_vs_app_net_cleanup() {CVE-2022-49917}
• bpf: Propagate error from htab_lock_bucket() to userspace {CVE-2022-50490}
• binfmt_misc: fix shift-out-of-bounds in check_special_flags {CVE-2022-50497}
• module: fix [e_shstrndx].sh_size=0 OOB access {CVE-2022-49444}
• ceph: avoid putting the realm twice when decoding snaps fails {CVE-2022-49770}
• tracing: Fix potential double free in create_var_ref() {CVE-2022-49410}
• powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue {CVE-2022-50366}
• Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times {CVE-2022-50419}
• xsk: Fix xsk_diag use-after-free error during socket cleanup {CVE-2023-53426}
• svcrdma: bound check rq_pages index in inline path {CVE-2025-71068}
• net: hns3: add VLAN id validation before using {CVE-2025-71112}
• net: mdio: fix undefined behavior in bit shift for __mdiobus_register {CVE-2022-49907}
• capabilities: fix undefined behavior in bit shift for CAP_TO_MASK {CVE-2022-49870}
• ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS {CVE-2022-50315}
• i2c: piix4: Fix adapter not be removed in piix4_remove() {CVE-2022-49900}
• team: fix check for port enabled in team_queue_override_port_prio_changed() {CVE-2025-71091}
• staging: vme_user: Fix possible UAF in tsi148_dma_list_add {CVE-2022-50384}
• ALSA: ctxfi: Fix potential OOB access in audio mixer handling {CVE-2026-23076}
• ftrace: Add cond_resched() to ftrace_graph_set_hash() {CVE-2025-37940}
• net: stmmac: Fix accessing freed irq affinity_hint {CVE-2025-23155}
• ext4: set goal start correctly in ext4_mb_normalize_request {CVE-2023-54021}
• netfilter: ipset: fix region locking in hash types {CVE-2025-37997}
• openvswitch: Fix unsafe attribute parsing in output_userspace() {CVE-2025-37998}
• wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() {CVE-2025-37990}
• nfs: handle failure of nfs_get_lock_context in unlock path {CVE-2025-38023}
• drm/amd/pm: Prevent division by zero {CVE-2025-37767}
• netfilter: ctnetlink: remove refcounting in expectation dumpers {CVE-2025-39764}
• tracing: Fix null pointer dereference in tracing_err_log_open() {CVE-2023-53167}
• ACPICA: Refuse to evaluate a method if arguments are missing {CVE-2025-38386}
• scsi: qla2xxx: Pointer may be dereferenced {CVE-2023-53150}
• net: pktgen: fix access outside of user given buffer in pktgen_thread_write() {CVE-2025-38061}
• dm cache: prevent BUG_ON by blocking retries on failed device resumes {CVE-2025-38066} -…

• crypto: algif_aead - Fix minimum RX size check for decryption {CVE-2026-31431}
• crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl {CVE-2026-31431}
• crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-31431}
• crypto: authencesn - Fix src offset when decrypting in-place {CVE-2026-31431}
• crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption {CVE-2026-31431}
• crypto: authenc - use memcpy_sglist() instead of null skcipher {CVE-2026-31431}
• crypto: algif_aead - snapshot IV for async AEAD requests {CVE-2026-31431}
• crypto: algif_aead - Revert to operating out-of-place {CVE-2026-31431}
• crypto: algif_aead - use memcpy_sglist() instead of null skcipher {CVE-2026-31431}
• crypto: scatterwalk - Backport memcpy_sglist() {CVE-2026-31431}
• scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() {CVE-2026-23216}
• VMCI: Fix use-after-free when removing resource in vmci_resource_remove() {CVE-2024-46738}
• ptp: fix integer overflow in max_vclocks_store {CVE-2024-40994}
• xsk: Fix xsk_diag use-after-free error during socket cleanup {CVE-2023-53426}
• net: hns3: add VLAN id validation before using {CVE-2025-71112}
• scsi: qla2xxx: Fix improper freeing of purex item {CVE-2025-68741}
• tracing: Consider the NULL character when validating the event length {CVE-2024-50131}
• capabilities: fix undefined behavior in bit shift for CAP_TO_MASK {CVE-2022-49870}
• scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() {CVE-2022-50422}
• netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() {CVE-2026-23111}
• team: fix check for port enabled in team_queue_override_port_prio_changed() {CVE-2025-71091}
• i2c: piix4: Fix adapter not be removed in piix4_remove() {CVE-2022-49900}
• libceph: replace overzealous BUG_ON in osdmap_apply_incremental() {CVE-2026-22990}
• RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert {CVE-2025-38387}
• ACPICA: Refuse to evaluate a method if arguments are missing {CVE-2025-38386}
• drm/tegra: Fix a possible null pointer dereference {CVE-2025-38363}
• ACPICA: fix acpi operand cache leak in dswstate.c {CVE-2025-38345}
• ACPICA: fix acpi parse and parseext cache leaks {CVE-2025-38344}
• jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() {CVE-2025-38337}
• x86/sgx: Prevent attempts to reclaim poisoned pages {CVE-2025-38334}
• mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). {CVE-2025-38324}
• drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table {CVE-2025-38319}
• fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() {CVE-2025-38312}
• seg6: Fix validation of nexthop addresses {CVE-2025-38310}
• bpf: Fix WARN() in get_bpf_raw_tp_regs {CVE-2025-38285}
• atm: clip: prevent NULL deref in clip_push() {CVE-2025-38251}
• nfsd: Initialize ssc before laundromat_work to prevent NULL dereference {CVE-2025-38231}
• ext4: inline: fix len overflow in ext4_prepare_inline_data {CVE-2025-38222}
• fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var {CVE-2025-38215}
• fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var {CVE-2025-38214}
• atm: Revert atm_account_tx() if copy_from_iter_full() fails. {CVE-2025-38190}
• tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer {CVE-2025-38184}
• calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). {CVE-2025-38181}
• thunderbolt: Do not double dequeue a configuration request {CVE-2025-38174}
• bpf: fix ktls panic with sockmap {CVE-2025-38166}
• gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO {CVE-2025-38122}
• net_sched: sch_sfq: fix a potential crash on gso_skb handling {CVE-2025-38115}
• x86/iopl: Cure TIF_IO_BITMAP inconsistencies {CVE-2025-38100}
• dma-buf: insert memory barrier before updating num_fences {CVE-2025-38095}
• net_sched: prio: fix a race in prio_tune() {CVE-2025-38083} -…

In the Linux kernel, the following vulnerability has been resolved:

libnvdimm/labels: Fix divide error in nd_label_data_init()

If a faulty CXL memory device returns a broken zero LSA size in its memory device information (Identify Memory Device (Opcode 4000h), CXL spec. 3.1, 8.2.9.9.1.1), a divide error occurs in the libnvdimm driver:

Oops: divide error: 0000 [#1] PREEMPT SMP NOPTI RIP: 0010:nd_label_data_init+0x10e/0x800 [libnvdimm]

Code and flow:

1. CXL Command 4000h returns LSA size = 0
2. config_size is assigned to zero LSA size (CXL pmem driver):

drivers/cxl/pmem.c: .config_size = mds->lsa_size,

3. max_xfer is set to zero (nvdimm driver):

drivers/nvdimm/label.c: max_xfer = min_t(size_t, ndd->nsarea.max_xfer, config_size);

4. A subsequent DIV_ROUND_UP() causes a division by zero:

drivers/nvdimm/label.c: /* Make our initial read size a multiple of max_xfer size */ drivers/nvdimm/label.c: read_size = min(DIV_ROUND_UP(read_size, max_xfer) * max_xfer, drivers/nvdimm/label.c- config_size);

Fix this by checking the config size parameter by extending an existing check.

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
• CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
• CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
• CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
• CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
• CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
• CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
• CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
• CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
• CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
• CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
• CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
• CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
• CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
• CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
• CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
• CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
• CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
• CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
• CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
• CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
• CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
• CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
• CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
• CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
• CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (bsc#1242946).
• CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
• CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (bsc#1242982).
• CVE-2025-37865: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (bsc#1242954).
• CVE-2025-37874: net: ngbe: fix memory leak in ngbe_probe() error path (bsc#1242940).
• CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
• CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
• CVE-2025-37917: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475).
• CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
• CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
• CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
• CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot (bsc#1243628).
• CVE-2025-37936: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value (bsc#1243537).
• CVE-2025-37938: tracing: Verify event formats that have '%*p..' (bsc#1243544).
• CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
• CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (bsc#1243523).
• CVE-2025-37967: usb: typec: ucsi: displayport: Fix deadlock (bsc#1243572).
• CVE-2025-37968: iio: light: opt3001: fix deadlock due to concurrent flag…

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
• CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
• CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
• CVE-2024-57995: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (bsc#1237895).
• CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
• CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
• CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
• CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
• CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
• CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
• CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
• CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
• CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
• CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
• CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
• CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
• CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
• CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
• CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
• CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
• CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
• CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
• CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
• CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
• CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
• CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
• CVE-2025-37837: iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() (bsc#1242952).
• CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (bsc#1242946).
• CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
• CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (bsc#1242982).
• CVE-2025-37865: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (bsc#1242954).
• CVE-2025-37874: net: ngbe: fix memory leak in ngbe_probe() error path (bsc#1242940).
• CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
• CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
• CVE-2025-37917: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475).
• CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
• CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
• CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
• CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot (bsc#1243628).
• CVE-2025-37936: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value (bsc#1243537).
• CVE-2025-37938: tracing: Verify event formats that have '%*p..' (bsc#1243544).
• CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
• CVE-2025-37954: smb: client: Avoid…

The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
• CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
• CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
• CVE-2024-57995: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (bsc#1237895).
• CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
• CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
• CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
• CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
• CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
• CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
• CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
• CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
• CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
• CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
• CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
• CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
• CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
• CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
• CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
• CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
• CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
• CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
• CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
• CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
• CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
• CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
• CVE-2025-37837: iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() (bsc#1242952).
• CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (bsc#1242946).
• CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
• CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (bsc#1242982).
• CVE-2025-37865: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (bsc#1242954).
• CVE-2025-37874: net: ngbe: fix memory leak in ngbe_probe() error path (bsc#1242940).
• CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
• CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
• CVE-2025-37917: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475).
• CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
• CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
• CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
• CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot (bsc#1243628).
• CVE-2025-37936: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value (bsc#1243537).
• CVE-2025-37938: tracing: Verify event formats that have '%*p..' (bsc#1243544).
• CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
• CVE-2025-37954: smb: client: Avoid race…

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
• CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
• CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
• CVE-2024-57995: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (bsc#1237895).
• CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
• CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
• CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
• CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
• CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
• CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
• CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
• CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
• CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
• CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
• CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
• CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
• CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
• CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
• CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
• CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
• CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
• CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
• CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
• CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
• CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
• CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
• CVE-2025-37837: iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() (bsc#1242952).
• CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (bsc#1242946).
• CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
• CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (bsc#1242982).
• CVE-2025-37865: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (bsc#1242954).
• CVE-2025-37874: net: ngbe: fix memory leak in ngbe_probe() error path (bsc#1242940).
• CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
• CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
• CVE-2025-37917: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475).
• CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
• CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
• CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
• CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot (bsc#1243628).
• CVE-2025-37936: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value (bsc#1243537).
• CVE-2025-37938: tracing: Verify event formats that have '%*p..' (bsc#1243544).
• CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
• CVE-2025-37954: smb: client: Avoid…

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2021-47212: net/mlx5: Update error handler for UCTX and UMEM (bsc#1222709).
• CVE-2021-47455: ptp: Fix possible memory leak in ptp_clock_register() (bsc#1225254).
• CVE-2021-47527: serial: core: fix transmit-buffer reset and memleak (bsc#1227768).
• CVE-2022-21546: scsi: target: Fix WRITE_SAME No Data Buffer crash (bsc#1242243).
• CVE-2022-49154: KVM: SVM: fix panic on out-of-bounds guest IRQ (bsc#1238167).
• CVE-2022-49622: netfilter: nf_tables: fix crash when nf_trace is enabled (bsc#1239042).
• CVE-2022-49731: ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() (bsc#1239071).
• CVE-2022-49764: kABI: workaround 'bpf: Prevent bpf program recursion for raw tracepoint probes' changes (bsc#1242301).
• CVE-2022-49780: scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() (bsc#1242262).
• CVE-2022-49814: kcm: close race conditions on sk_receive_queue (bsc#1242498).
• CVE-2022-49879: ext4: fix BUG_ON() when directory entry has invalid rec_len (bsc#1242733).
• CVE-2022-49881: wifi: cfg80211: fix memory leak in query_regdb_file() (bsc#1242481).
• CVE-2022-49917: ipvs: fix WARNING in ip_vs_app_net_cleanup() (bsc#1242406).
• CVE-2022-49921: net: sched: Fix use after free in red_enqueue() (bsc#1242359).
• CVE-2022-50055: iavf: Fix adminq error handling (bsc#1245039).
• CVE-2022-50087: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (bsc#1245119).
• CVE-2022-50134: RDMA/hfi1: fix potential memory leak in setup_base_ctxt() (bsc#1244802).
• CVE-2022-50200: selinux: Add boundary check in put_entry() (bsc#1245149).
• CVE-2023-52500: Fixed information leaking when processing OPC_INB_SET_CONTROLLER_CONFIG command (bsc#1220883).
• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2023-53020: l2tp: fix lockdep splat (bsc#1240224).
• CVE-2023-53090: drm/amdkfd: Fix an illegal memory access (bsc#1242753).
• CVE-2023-53091: ext4: update s_journal_inum if it changes after journal replay (bsc#1242767).
• CVE-2023-53133: bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser() (bsc#1242423).
• CVE-2024-26586: mlxsw: spectrum_acl_tcam: Fix stack corruption (bsc#1220243).
• CVE-2024-26825: nfc: nci: free rx_data_reassembly skb on NCI device cleanup (bsc#1223065).
• CVE-2024-26872: RDMA/srpt: Do not register event handler until srpt device is fully setup (bsc#1223115).
• CVE-2024-26875: media: pvrusb2: fix uaf in pvr2_context_set_notify (bsc#1223118).
• CVE-2024-35790: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (bsc#1224712).
• CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
• CVE-2024-38588: ftrace: Fix possible use-after-free issue in ftrace_location() (bsc#1226837).
• CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
• CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
• CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
• CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1240799).
• CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
• CVE-2025-23149: tpm: do not start chip while suspended (bsc#1242758).
• CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
• CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
• CVE-2025-37781: i2c: cros-ec-tunnel: defer probe if parent EC is not present (bsc#1242575).
• CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
• CVE-2025-37810: usb: dwc3: gadget: check that event count does not exceed event buffer length (bsc#1242906).
• CVE-2025-37836: PCI: Fix reference…

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
• CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
• CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
• CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
• CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
• CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
• CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
• CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
• CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
• CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
• CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
• CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
• CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
• CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
• CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
• CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
• CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
• CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
• CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
• CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
• CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
• CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
• CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
• CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
• CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
• CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (bsc#1242946).
• CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
• CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (bsc#1242982).
• CVE-2025-37865: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (bsc#1242954).
• CVE-2025-37874: net: ngbe: fix memory leak in ngbe_probe() error path (bsc#1242940).
• CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
• CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
• CVE-2025-37917: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475).
• CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
• CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
• CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
• CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot (bsc#1243628).
• CVE-2025-37936: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value (bsc#1243537).
• CVE-2025-37938: tracing: Verify event formats that have '%*p..' (bsc#1243544).
• CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
• CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (bsc#1243523).
• CVE-2025-37967: usb: typec: ucsi: displayport: Fix deadlock (bsc#1243572).
• CVE-2025-37968: iio: light: opt3001: fix deadlock due to concurrent flag access…

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
• CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
• CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
• CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
• CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
• CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
• CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
• CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
• CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
• CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
• CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
• CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
• CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
• CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
• CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
• CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
• CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
• CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
• CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
• CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
• CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
• CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
• CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
• CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
• CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
• CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (bsc#1242946).
• CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
• CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (bsc#1242982).
• CVE-2025-37865: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (bsc#1242954).
• CVE-2025-37874: net: ngbe: fix memory leak in ngbe_probe() error path (bsc#1242940).
• CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
• CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
• CVE-2025-37917: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475).
• CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
• CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
• CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
• CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot (bsc#1243628).
• CVE-2025-37936: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value (bsc#1243537).
• CVE-2025-37938: tracing: Verify event formats that have '%*p..' (bsc#1243544).
• CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
• CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (bsc#1243523).
• CVE-2025-37967: usb: typec: ucsi: displayport: Fix deadlock (bsc#1243572).
• CVE-2025-37968: iio: light: opt3001: fix deadlock due to concurrent flag access…

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2019-11135: TSX Asynchronous Abort condition (bsc#1139073).
• CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
• CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
• CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
• CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
• CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
• CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
• CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
• CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
• CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
• CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
• CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
• CVE-2025-38244: smb: client: fix potential deadlock when reconnecting channels (bsc#1246183).
• CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1246911).
• CVE-2025-38371: drm/v3d: Disable interrupts before resetting the GPU (bsc#1247178).
• CVE-2025-38392: idpf: convert control queue mutex to a spinlock (bsc#1247169).
• CVE-2025-38399: scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() (bsc#1247097).
• CVE-2025-38426: drm/amdgpu: Add basic validation for RAS header (bsc#1247252).
• CVE-2025-38457: net/sched: Abort __tc_modify_qdisc if parent class does not exist (bsc#1247098).
• CVE-2025-38460: atm: clip: Fix potential null-ptr-deref in to_atmarpd() (bsc#1247143).
• CVE-2025-38465: netlink: make sure we allow at least one dump skb (bsc#1247118).
• CVE-2025-38470: kABI fix for net: vlan: fix VLAN 0 refcount imbalance of toggling (bsc#1247288).
• CVE-2025-38471: tls: always refresh the queue when reading sock (bsc#1247450).
• CVE-2025-38490: net: libwx: remove duplicate page_pool_put_full_page() (bsc#1247243).
• CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247374).
• CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
• CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
• CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
• CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
• CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
• CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
• CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
• CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
• CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
• CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
• CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
• CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
• CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
• CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
• CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
• CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
• CVE-2025-23163: net:…

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
• CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
• CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
• CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
• CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
• CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
• CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
• CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
• CVE-2025-22111: net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
• CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
• CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
• CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
• CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
• CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
• CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
• CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
• CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
• CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
• CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
• CVE-2025-37938: tracing: Verify event formats that have "%*p.." (bsc#1243544).
• CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
• CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (bsc#1243523).
• CVE-2025-37992: net_sched: Flush gso_skb list too during ->change() (bsc#1243698).
• CVE-2025-37995: module: ensure that kobject_put() is safe for module type kobjects (bsc#1243827).
• CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
• CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
• CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
• CVE-2025-38011: drm/amdgpu: csa unmap use uninterruptible lock (bsc#1244729).
• CVE-2025-38018: net/tls: fix kernel panic when alloc_page failed (bsc#1244999).
• CVE-2025-38053: idpf: fix null-ptr-deref in idpf_features_check (bsc#1244746).
• CVE-2025-38057: espintcp: fix skb leaks (bsc#1244862).
• CVE-2025-38060: bpf: abort verification if env->cur_state->loop_entry != NULL (bsc#1245155).
• CVE-2025-38072: libnvdimm/labels: Fix divide error in nd_label_data_init() (bsc#1244743).

The following non-security bugs were fixed:

• ACPI: CPPC: Fix NULL pointer dereference when nosmp is used (git-fixes).
• ACPI: battery: negate current when discharging (stable-fixes).
• ACPI: bus: Bail out if acpi_kobj registration fails (stable-fixes).
• ACPICA: Avoid sequence overread in call to strncmp() (stable-fixes).
• ACPICA: fix acpi operand cache leak in dswstate.c (stable-fixes).
• ACPICA: fix acpi parse and parseext cache leaks (stable-fixes).
• ACPICA: utilities: Fix overflow check in vsnprintf() (stable-fixes).
• ALSA: hda/intel: Add Thinkpad E15 to PM deny list (stable-fixes).
• ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR (git-fixes).
• ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X513EA (git-fixes).
• ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged (stable-fixes).
• ALSA: usb-audio: Accept multiple protocols in GTBs (stable-fixes).
• ALSA: usb-audio:…

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
• CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
• CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
• CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
• CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
• CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
• CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
• CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
• CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
• CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
• CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
• CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
• CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
• CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
• CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
• CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
• CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
• CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
• CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
• CVE-2025-37938: tracing: Verify event formats that have "%*p.." (bsc#1243544).
• CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
• CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (bsc#1243523).
• CVE-2025-37992: net_sched: Flush gso_skb list too during ->change() (bsc#1243698).
• CVE-2025-37995: module: ensure that kobject_put() is safe for module type kobjects (bsc#1243827).
• CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
• CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
• CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
• CVE-2025-38011: drm/amdgpu: csa unmap use uninterruptible lock (bsc#1244729).
• CVE-2025-38018: net/tls: fix kernel panic when alloc_page failed (bsc#1244999).
• CVE-2025-38053: idpf: fix null-ptr-deref in idpf_features_check (bsc#1244746).
• CVE-2025-38057: espintcp: fix skb leaks (bsc#1244862).
• CVE-2025-38060: bpf: abort verification if env->cur_state->loop_entry != NULL (bsc#1245155).
• CVE-2025-38072: libnvdimm/labels: Fix divide error in nd_label_data_init() (bsc#1244743).

The following non-security bugs were fixed:

• ACPI: CPPC: Fix NULL pointer dereference when nosmp is used (git-fixes).
• ACPI: battery: negate current when discharging (stable-fixes).
• ACPI: bus: Bail out if acpi_kobj registration fails (stable-fixes).
• ACPICA: Avoid sequence overread in call to strncmp() (stable-fixes).
• ACPICA: fix acpi operand cache leak in dswstate.c (stable-fixes).
• ACPICA: fix acpi parse and parseext cache leaks (stable-fixes).
• ACPICA: utilities: Fix overflow check in vsnprintf() (stable-fixes).
• ALSA: hda/intel: Add Thinkpad E15 to PM deny list (stable-fixes).
• ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR (git-fixes).
• ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X513EA (git-fixes).
• ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged (stable-fixes).
• ALSA: usb-audio: Accept multiple protocols in GTBs (stable-fixes). -…

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
• CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
• CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
• CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
• CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
• CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
• CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
• CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
• CVE-2025-22111: net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
• CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
• CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
• CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
• CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
• CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
• CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
• CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
• CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
• CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
• CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
• CVE-2025-37938: tracing: Verify event formats that have "%*p.." (bsc#1243544).
• CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
• CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (bsc#1243523).
• CVE-2025-37992: net_sched: Flush gso_skb list too during ->change() (bsc#1243698).
• CVE-2025-37995: module: ensure that kobject_put() is safe for module type kobjects (bsc#1243827).
• CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
• CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
• CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
• CVE-2025-38011: drm/amdgpu: csa unmap use uninterruptible lock (bsc#1244729).
• CVE-2025-38018: net/tls: fix kernel panic when alloc_page failed (bsc#1244999).
• CVE-2025-38053: idpf: fix null-ptr-deref in idpf_features_check (bsc#1244746).
• CVE-2025-38057: espintcp: fix skb leaks (bsc#1244862).
• CVE-2025-38060: bpf: abort verification if env->cur_state->loop_entry != NULL (bsc#1245155).
• CVE-2025-38072: libnvdimm/labels: Fix divide error in nd_label_data_init() (bsc#1244743).

The following non-security bugs were fixed:

• ACPI: CPPC: Fix NULL pointer dereference when nosmp is used (git-fixes).
• ACPI: battery: negate current when discharging (stable-fixes).
• ACPI: bus: Bail out if acpi_kobj registration fails (stable-fixes).
• ACPICA: Avoid sequence overread in call to strncmp() (stable-fixes).
• ACPICA: fix acpi operand cache leak in dswstate.c (stable-fixes).
• ACPICA: fix acpi parse and parseext cache leaks (stable-fixes).
• ACPICA: utilities: Fix overflow check in vsnprintf() (stable-fixes).
• ALSA: hda/intel: Add Thinkpad E15 to PM deny list (stable-fixes).
• ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR (git-fixes).
• ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X513EA (git-fixes).
• ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged (stable-fixes).
• ALSA: usb-audio: Accept multiple protocols in GTBs (stable-fixes).
• ALSA: usb-audio:…

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
• CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
• CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
• CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
• CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
• CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
• CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
• CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
• CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
• CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
• CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
• CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
• CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
• CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
• CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
• CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
• CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
• CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
• CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
• CVE-2025-37938: tracing: Verify event formats that have "%*p.." (bsc#1243544).
• CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
• CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (bsc#1243523).
• CVE-2025-37992: net_sched: Flush gso_skb list too during ->change() (bsc#1243698).
• CVE-2025-37995: module: ensure that kobject_put() is safe for module type kobjects (bsc#1243827).
• CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
• CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
• CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
• CVE-2025-38011: drm/amdgpu: csa unmap use uninterruptible lock (bsc#1244729).
• CVE-2025-38018: net/tls: fix kernel panic when alloc_page failed (bsc#1244999).
• CVE-2025-38053: idpf: fix null-ptr-deref in idpf_features_check (bsc#1244746).
• CVE-2025-38057: espintcp: fix skb leaks (bsc#1244862).
• CVE-2025-38060: bpf: abort verification if env->cur_state->loop_entry != NULL (bsc#1245155).
• CVE-2025-38072: libnvdimm/labels: Fix divide error in nd_label_data_init() (bsc#1244743).

The following non-security bugs were fixed:

• ACPI: CPPC: Fix NULL pointer dereference when nosmp is used (git-fixes).
• ACPI: battery: negate current when discharging (stable-fixes).
• ACPI: bus: Bail out if acpi_kobj registration fails (stable-fixes).
• ACPICA: Avoid sequence overread in call to strncmp() (stable-fixes).
• ACPICA: fix acpi operand cache leak in dswstate.c (stable-fixes).
• ACPICA: fix acpi parse and parseext cache leaks (stable-fixes).
• ACPICA: utilities: Fix overflow check in vsnprintf() (stable-fixes).
• ALSA: hda/intel: Add Thinkpad E15 to PM deny list (stable-fixes).
• ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR (git-fixes).
• ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X513EA (git-fixes).
• ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged (stable-fixes).
• ALSA: usb-audio: Accept multiple protocols in GTBs (stable-fixes). -…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• Cryptographic API;
• Arm Firmware Framework for ARMv8-A(FFA);
• Multiple devices driver;
• Media drivers;
• Network drivers;
• NVDIMM (Non-Volatile Memory Device) drivers;
• NVME drivers;
• x86 platform drivers;
• TCM subsystem;
• Virtio drivers;
• File systems infrastructure;
• SMB network file system;
• LZO compression library;
• Digital Audio (PCM) driver;
• Tracing infrastructure;
• Padata parallel execution mechanism;
• CAN network layer;
• Networking core;
• TIPC protocol;
• ALSA framework; (CVE-2025-38079, CVE-2025-38048, CVE-2025-38075, CVE-2025-38077, CVE-2025-38035, CVE-2025-38037, CVE-2025-38034, CVE-2025-38058, CVE-2025-38004, CVE-2025-38031, CVE-2025-38078, CVE-2025-38044, CVE-2025-38066, CVE-2025-38052, CVE-2025-38043, CVE-2025-38065, CVE-2025-38003, CVE-2025-38061, CVE-2025-38051, CVE-2025-38072, CVE-2025-38068)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• Cryptographic API;
• Arm Firmware Framework for ARMv8-A(FFA);
• Multiple devices driver;
• Media drivers;
• Network drivers;
• NVDIMM (Non-Volatile Memory Device) drivers;
• NVME drivers;
• x86 platform drivers;
• TCM subsystem;
• Virtio drivers;
• File systems infrastructure;
• SMB network file system;
• LZO compression library;
• Digital Audio (PCM) driver;
• Tracing infrastructure;
• Padata parallel execution mechanism;
• CAN network layer;
• Networking core;
• TIPC protocol;
• ALSA framework; (CVE-2025-38052, CVE-2025-38078, CVE-2025-38079, CVE-2025-38061, CVE-2025-38044, CVE-2025-38065, CVE-2025-38043, CVE-2025-38034, CVE-2025-38037, CVE-2025-38048, CVE-2025-38066, CVE-2025-38003, CVE-2025-38058, CVE-2025-38075, CVE-2025-38077, CVE-2025-38051, CVE-2025-38031, CVE-2025-38035, CVE-2025-38072, CVE-2025-38004, CVE-2025-38068)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• Cryptographic API;
• Arm Firmware Framework for ARMv8-A(FFA);
• Multiple devices driver;
• Media drivers;
• Network drivers;
• NVDIMM (Non-Volatile Memory Device) drivers;
• NVME drivers;
• x86 platform drivers;
• TCM subsystem;
• Virtio drivers;
• File systems infrastructure;
• SMB network file system;
• LZO compression library;
• Digital Audio (PCM) driver;
• Tracing infrastructure;
• Padata parallel execution mechanism;
• CAN network layer;
• Networking core;
• TIPC protocol;
• ALSA framework; (CVE-2025-38079, CVE-2025-38048, CVE-2025-38075, CVE-2025-38077, CVE-2025-38035, CVE-2025-38037, CVE-2025-38034, CVE-2025-38058, CVE-2025-38004, CVE-2025-38031, CVE-2025-38078, CVE-2025-38044, CVE-2025-38066, CVE-2025-38052, CVE-2025-38043, CVE-2025-38065, CVE-2025-38003, CVE-2025-38061, CVE-2025-38051, CVE-2025-38072, CVE-2025-38068)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• Cryptographic API;
• Arm Firmware Framework for ARMv8-A(FFA);
• Multiple devices driver;
• Media drivers;
• Network drivers;
• NVDIMM (Non-Volatile Memory Device) drivers;
• NVME drivers;
• x86 platform drivers;
• TCM subsystem;
• Virtio drivers;
• File systems infrastructure;
• SMB network file system;
• LZO compression library;
• Digital Audio (PCM) driver;
• Tracing infrastructure;
• Padata parallel execution mechanism;
• CAN network layer;
• Networking core;
• TIPC protocol;
• ALSA framework; (CVE-2025-38079, CVE-2025-38048, CVE-2025-38075, CVE-2025-38077, CVE-2025-38035, CVE-2025-38037, CVE-2025-38034, CVE-2025-38058, CVE-2025-38004, CVE-2025-38031, CVE-2025-38078, CVE-2025-38044, CVE-2025-38066, CVE-2025-38052, CVE-2025-38043, CVE-2025-38065, CVE-2025-38003, CVE-2025-38061, CVE-2025-38051, CVE-2025-38072, CVE-2025-38068)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• Cryptographic API;
• Arm Firmware Framework for ARMv8-A(FFA);
• Multiple devices driver;
• Media drivers;
• Network drivers;
• NVDIMM (Non-Volatile Memory Device) drivers;
• NVME drivers;
• x86 platform drivers;
• TCM subsystem;
• Virtio drivers;
• File systems infrastructure;
• SMB network file system;
• LZO compression library;
• Digital Audio (PCM) driver;
• Tracing infrastructure;
• Padata parallel execution mechanism;
• CAN network layer;
• Networking core;
• TIPC protocol;
• ALSA framework; (CVE-2025-38079, CVE-2025-38048, CVE-2025-38075, CVE-2025-38077, CVE-2025-38035, CVE-2025-38037, CVE-2025-38034, CVE-2025-38058, CVE-2025-38004, CVE-2025-38031, CVE-2025-38078, CVE-2025-38044, CVE-2025-38066, CVE-2025-38052, CVE-2025-38043, CVE-2025-38065, CVE-2025-38003, CVE-2025-38061, CVE-2025-38051, CVE-2025-38072, CVE-2025-38068)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PA-RISC architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• Serial ATA and Parallel ATA drivers;
• Bluetooth drivers;
• Bus devices;
• CPU frequency scaling framework;
• Buffer Sharing and Synchronization framework;
• DMA engine subsystem;
• Arm Firmware Framework for ARMv8-A(FFA);
• ARM SCMI message protocol;
• GPU drivers;
• HID subsystem;
• HSI subsystem;
• I2C subsystem;
• I3C subsystem;
• IIO subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• IRQ chip drivers;
• MCB driver;
• Multiple devices driver;
• Media drivers;
• Multifunction device drivers;
• PCI Endpoint Test driver;
• MTD block device drivers;
• Network drivers;
• NVDIMM (Non-Volatile Memory Device) drivers;
• NVME drivers;
• Device tree and open firmware driver;
• PCI subsystem;
• x86 platform drivers;
• TI SCI PM domains driver;
• PWM drivers;
• S/390 drivers;
• SCSI subsystem;
• Samsung SoC drivers;
• TCM subsystem;
• TTY drivers;
• UFS subsystem;
• Cadence USB3 driver;
• ChipIdea USB driver;
• USB Device Class drivers;
• DesignWare USB3 driver;
• USB Gadget drivers;
• USB Type-C support driver;
• USB Type-C Connector System Software Interface driver;
• Backlight driver;
• Framebuffer layer;
• Virtio drivers;
• Xen hypervisor drivers;
• BTRFS file system;
• Ext4 file system;
• F2FS file system;
• File systems infrastructure;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• Proc file system;
• SMB network file system;
• LZO compression library;
• Kernel stack handling interfaces;
• Bluetooth subsystem;
• Network traffic control;
• SCTP protocol;
• Digital Audio (PCM) driver;
• Tracing infrastructure;
• BPF subsystem;
• Padata parallel execution mechanism;
• Kernel command line parsing driver;
• Memory management;
• 802.1Q VLAN protocol;
• CAN network layer;
• Networking core;
• IPv6 networking;
• MAC80211 subsystem;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Open vSwitch;
• Phonet protocol;
• TIPC protocol;
• TLS protocol;
• ALSA framework;
• Virtio sound driver;
• CPU Power monitoring subsystem; (CVE-2025-37992, CVE-2025-37995, CVE-2025-38075, CVE-2025-37771, CVE-2025-38051, CVE-2025-37796, CVE-2022-49168, CVE-2025-37989, CVE-2025-38072, CVE-2025-37757, CVE-2024-46742, CVE-2024-50125, CVE-2024-42322, CVE-2022-49535, CVE-2025-37756, CVE-2025-37811, CVE-2025-37805, CVE-2025-37789, CVE-2025-22027, CVE-2025-37911, CVE-2025-37770, CVE-2025-37881, CVE-2025-37875, CVE-2025-37817, CVE-2024-26686, CVE-2025-37927, CVE-2025-38043, CVE-2025-38044, CVE-2025-23156, CVE-2025-38004, CVE-2025-37983, CVE-2025-37742, CVE-2025-23150, CVE-2025-23146, CVE-2025-21839, CVE-2025-37749, CVE-2024-50258, CVE-2025-37812, CVE-2025-37969, CVE-2025-37758, CVE-2024-27402, CVE-2025-37767, CVE-2025-37970, CVE-2025-23151, CVE-2025-37790, CVE-2025-37949, CVE-2024-38540, CVE-2025-37787, CVE-2025-37741, CVE-2025-37844, CVE-2025-37930, CVE-2024-46774, CVE-2025-37892, CVE-2025-37839, CVE-2025-37766, CVE-2025-37819, CVE-2025-37913, CVE-2025-37808, CVE-2025-37998, CVE-2024-56751, CVE-2025-21853, CVE-2024-36908, CVE-2025-37967, CVE-2025-38052, CVE-2025-37985, CVE-2025-37883, CVE-2025-37740, CVE-2025-37991, CVE-2025-38094, CVE-2025-23144, CVE-2024-50280, CVE-2025-37859, CVE-2024-50073, CVE-2025-23157, CVE-2025-37840, CVE-2025-38068, CVE-2025-37738, CVE-2025-23145, CVE-2025-37824, CVE-2025-38024, CVE-2025-38023, CVE-2025-38003, CVE-2025-38079, CVE-2025-37794, CVE-2025-37810, CVE-2025-37851, CVE-2024-53203, CVE-2024-35943, CVE-2025-23161, CVE-2025-37990, CVE-2024-35790, CVE-2024-50272, CVE-2024-35867,…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PA-RISC architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• Serial ATA and Parallel ATA drivers;
• Bluetooth drivers;
• Bus devices;
• CPU frequency scaling framework;
• Buffer Sharing and Synchronization framework;
• DMA engine subsystem;
• Arm Firmware Framework for ARMv8-A(FFA);
• ARM SCMI message protocol;
• GPU drivers;
• HID subsystem;
• HSI subsystem;
• I2C subsystem;
• I3C subsystem;
• IIO subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• IRQ chip drivers;
• MCB driver;
• Multiple devices driver;
• Media drivers;
• Multifunction device drivers;
• PCI Endpoint Test driver;
• MTD block device drivers;
• Network drivers;
• NVDIMM (Non-Volatile Memory Device) drivers;
• NVME drivers;
• Device tree and open firmware driver;
• PCI subsystem;
• x86 platform drivers;
• TI SCI PM domains driver;
• PWM drivers;
• S/390 drivers;
• SCSI subsystem;
• Samsung SoC drivers;
• TCM subsystem;
• TTY drivers;
• UFS subsystem;
• Cadence USB3 driver;
• ChipIdea USB driver;
• USB Device Class drivers;
• DesignWare USB3 driver;
• USB Gadget drivers;
• USB Type-C support driver;
• USB Type-C Connector System Software Interface driver;
• Backlight driver;
• Framebuffer layer;
• Virtio drivers;
• Xen hypervisor drivers;
• BTRFS file system;
• Ext4 file system;
• F2FS file system;
• File systems infrastructure;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• Proc file system;
• SMB network file system;
• LZO compression library;
• Kernel stack handling interfaces;
• Bluetooth subsystem;
• Network traffic control;
• SCTP protocol;
• Digital Audio (PCM) driver;
• Tracing infrastructure;
• BPF subsystem;
• Padata parallel execution mechanism;
• Kernel command line parsing driver;
• Memory management;
• 802.1Q VLAN protocol;
• CAN network layer;
• Networking core;
• IPv6 networking;
• MAC80211 subsystem;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Open vSwitch;
• Phonet protocol;
• TIPC protocol;
• TLS protocol;
• ALSA framework;
• Virtio sound driver;
• CPU Power monitoring subsystem; (CVE-2025-37766, CVE-2025-38044, CVE-2025-38003, CVE-2025-37990, CVE-2024-56751, CVE-2022-21546, CVE-2025-23148, CVE-2025-21853, CVE-2025-38043, CVE-2025-37844, CVE-2025-38048, CVE-2025-38034, CVE-2025-38072, CVE-2025-38177, CVE-2025-38005, CVE-2025-38068, CVE-2025-37765, CVE-2025-37808, CVE-2025-37787, CVE-2025-23145, CVE-2025-37756, CVE-2024-50272, CVE-2025-37857, CVE-2025-37819, CVE-2025-37789, CVE-2024-36908, CVE-2025-37812, CVE-2024-53128, CVE-2025-37788, CVE-2025-37892, CVE-2025-38001, CVE-2025-37773, CVE-2024-46816, CVE-2025-37823, CVE-2025-37838, CVE-2025-38066, CVE-2025-37771, CVE-2024-38541, CVE-2025-37927, CVE-2025-23142, CVE-2025-22062, CVE-2025-37811, CVE-2025-37969, CVE-2024-27402, CVE-2025-37911, CVE-2025-37740, CVE-2025-37913, CVE-2025-37810, CVE-2025-38094, CVE-2024-46787, CVE-2025-37749, CVE-2025-37983, CVE-2025-23157, CVE-2025-37790, CVE-2025-37739, CVE-2025-37995, CVE-2024-46774, CVE-2025-37758, CVE-2025-38065, CVE-2025-37909, CVE-2025-38009, CVE-2025-37915, CVE-2025-37932, CVE-2022-48893, CVE-2024-50125, CVE-2025-37841, CVE-2024-50047, CVE-2025-23140, CVE-2025-37780, CVE-2025-23156, CVE-2024-50280, CVE-2025-37840, CVE-2024-50258, CVE-2025-37796, CVE-2024-49960, CVE-2025-37829, CVE-2025-38024, CVE-2024-46751, CVE-2025-37985, CVE-2025-37989, CVE-2025-37994, CVE-2025-37741, CVE-2025-23151, CVE-2025-38058, CVE-2024-35790, CVE-2025-37871, CVE-2025-38031, CVE-2025-37940, CVE-2025-37930, CVE-2025-23150, CVE-2025-37805, CVE-2025-37738, CVE-2025-37850,…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PA-RISC architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• Serial ATA and Parallel ATA drivers;
• Bluetooth drivers;
• Bus devices;
• CPU frequency scaling framework;
• Buffer Sharing and Synchronization framework;
• DMA engine subsystem;
• Arm Firmware Framework for ARMv8-A(FFA);
• ARM SCMI message protocol;
• GPU drivers;
• HID subsystem;
• HSI subsystem;
• I2C subsystem;
• I3C subsystem;
• IIO subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• IRQ chip drivers;
• MCB driver;
• Multiple devices driver;
• Media drivers;
• Multifunction device drivers;
• PCI Endpoint Test driver;
• MTD block device drivers;
• Network drivers;
• NVDIMM (Non-Volatile Memory Device) drivers;
• NVME drivers;
• Device tree and open firmware driver;
• PCI subsystem;
• x86 platform drivers;
• TI SCI PM domains driver;
• PWM drivers;
• S/390 drivers;
• SCSI subsystem;
• Samsung SoC drivers;
• TCM subsystem;
• TTY drivers;
• UFS subsystem;
• Cadence USB3 driver;
• ChipIdea USB driver;
• USB Device Class drivers;
• DesignWare USB3 driver;
• USB Gadget drivers;
• USB Type-C support driver;
• USB Type-C Connector System Software Interface driver;
• Backlight driver;
• Framebuffer layer;
• Virtio drivers;
• Xen hypervisor drivers;
• BTRFS file system;
• Ext4 file system;
• F2FS file system;
• File systems infrastructure;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• Proc file system;
• SMB network file system;
• LZO compression library;
• Kernel stack handling interfaces;
• Bluetooth subsystem;
• Network traffic control;
• SCTP protocol;
• Digital Audio (PCM) driver;
• Tracing infrastructure;
• BPF subsystem;
• Padata parallel execution mechanism;
• Kernel command line parsing driver;
• Memory management;
• 802.1Q VLAN protocol;
• CAN network layer;
• Networking core;
• IPv6 networking;
• MAC80211 subsystem;
• Management Component Transport Protocol (MCTP);
• Multipath TCP;
• Netfilter;
• Open vSwitch;
• Phonet protocol;
• TIPC protocol;
• TLS protocol;
• ALSA framework;
• Virtio sound driver;
• CPU Power monitoring subsystem; (CVE-2025-37766, CVE-2025-38044, CVE-2025-38003, CVE-2025-37990, CVE-2024-56751, CVE-2022-21546, CVE-2025-23148, CVE-2025-21853, CVE-2025-38043, CVE-2025-37844, CVE-2025-38048, CVE-2025-38034, CVE-2025-38072, CVE-2025-38177, CVE-2025-38005, CVE-2025-38068, CVE-2025-37765, CVE-2025-37808, CVE-2025-37787, CVE-2025-23145, CVE-2025-37756, CVE-2024-50272, CVE-2025-37857, CVE-2025-37819, CVE-2025-37789, CVE-2024-36908, CVE-2025-37812, CVE-2024-53128, CVE-2025-37788, CVE-2025-37892, CVE-2025-38001, CVE-2025-37773, CVE-2024-46816, CVE-2025-37823, CVE-2025-37838, CVE-2025-38066, CVE-2025-37771, CVE-2024-38541, CVE-2025-37927, CVE-2025-23142, CVE-2025-22062, CVE-2025-37811, CVE-2025-37969, CVE-2024-27402, CVE-2025-37911, CVE-2025-37740, CVE-2025-37913, CVE-2025-37810, CVE-2025-38094, CVE-2024-46787, CVE-2025-37749, CVE-2025-37983, CVE-2025-23157, CVE-2025-37790, CVE-2025-37739, CVE-2025-37995, CVE-2024-46774, CVE-2025-37758, CVE-2025-38065, CVE-2025-37909, CVE-2025-38009, CVE-2025-37915, CVE-2025-37932, CVE-2022-48893, CVE-2024-50125, CVE-2025-37841, CVE-2024-50047, CVE-2025-23140, CVE-2025-37780, CVE-2025-23156, CVE-2024-50280, CVE-2025-37840, CVE-2024-50258, CVE-2025-37796, CVE-2024-49960, CVE-2025-37829, CVE-2025-38024, CVE-2024-46751, CVE-2025-37985, CVE-2025-37989, CVE-2025-37994, CVE-2025-37741, CVE-2025-23151, CVE-2025-38058, CVE-2024-35790, CVE-2025-37871, CVE-2025-38031, CVE-2025-37940, CVE-2025-37930, CVE-2025-23150, CVE-2025-37805, CVE-2025-37738, CVE-2025-37850,…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• ACPI drivers;
• Android drivers;
• Bluetooth drivers;
• Bus devices;
• Clock framework and drivers;
• CPU frequency scaling framework;
• Hardware crypto device drivers;
• DMA engine subsystem;
• EDAC drivers;
• Arm Firmware Framework for ARMv8-A(FFA);
• FPGA Framework;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• Hardware monitoring drivers;
• HW tracing;
• InfiniBand drivers;
• IOMMU subsystem;
• Multiple devices driver;
• Media drivers;
• VMware VMCI Driver;
• MTD block device drivers;
• Network drivers;
• Mellanox network drivers;
• STMicroelectronics network drivers;
• NVDIMM (Non-Volatile Memory Device) drivers;
• NVME drivers;
• NVMEM (Non Volatile Memory) drivers;
• PCI subsystem;
• Amlogic Meson DDR PMU;
• NI-700 PMU driver;
• PHY drivers;
• Pin controllers subsystem;
• x86 platform drivers;
• PTP clock framework;
• SCSI subsystem;
• ASPEED SoC drivers;
• SPI subsystem;
• TCM subsystem;
• Thunderbolt and USB4 drivers;
• TTY drivers;
• UFS subsystem;
• USB core drivers;
• USB Gadget drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Port Controller Manager driver;
• VFIO drivers;
• Virtio Host (VHOST) subsystem;
• Backlight driver;
• Framebuffer layer;
• Virtio drivers;
• BTRFS file system;
• EROFS file system;
• F2FS file system;
• File systems infrastructure;
• Network file systems library;
• NTFS3 file system;
• SMB network file system;
• Codetag library;
• BPF subsystem;
• LZO compression library;
• Mellanox drivers;
• IPv4 networking;
• Bluetooth subsystem;
• Network sockets;
• XFRM subsystem;
• Digital Audio (PCM) driver;
• Tracing infrastructure;
• io_uring subsystem;
• Padata parallel execution mechanism;
• DVFS energy model driver;
• Restartable seuqences system call mechanism;
• Timer subsystem;
• Memory management;
• KASAN memory debugging framework;
• CAN network layer;
• Networking core;
• IPv6 networking;
• Netfilter;
• NetLabel subsystem;
• Open vSwitch;
• Network traffic control;
• TIPC protocol;
• TLS protocol;
• ALSA framework;
• sma1307 audio codecs;
• Intel ASoC drivers;
• MediaTek ASoC drivers;
• USB sound devices; (CVE-2025-38122, CVE-2025-38119, CVE-2025-38071, CVE-2025-38310, CVE-2025-38166, CVE-2025-38055, CVE-2025-38292, CVE-2025-38078, CVE-2025-38134, CVE-2025-38063, CVE-2025-38282, CVE-2025-38059, CVE-2025-38112, CVE-2025-38082, CVE-2025-38296, CVE-2025-38126, CVE-2025-38136, CVE-2025-38075, CVE-2025-38042, CVE-2025-38113, CVE-2025-38003, CVE-2025-38318, CVE-2025-38156, CVE-2025-38290, CVE-2025-38102, CVE-2025-38076, CVE-2025-38097, CVE-2025-38313, CVE-2025-38298, CVE-2025-38300, CVE-2025-38169, CVE-2025-38131, CVE-2025-38301, CVE-2025-38050, CVE-2025-38139, CVE-2025-38305, CVE-2025-38317, CVE-2025-38045, CVE-2025-38040, CVE-2025-38279, CVE-2025-38123, CVE-2025-38074, CVE-2025-38111, CVE-2025-38117, CVE-2025-38069, CVE-2025-38035, CVE-2025-38128, CVE-2025-38277, CVE-2025-38061, CVE-2025-38306, CVE-2025-38051, CVE-2025-38124, CVE-2025-38291, CVE-2025-38130, CVE-2025-38319, CVE-2025-38272, CVE-2025-38175, CVE-2025-38176, CVE-2025-38070, CVE-2025-38032, CVE-2025-38151, CVE-2025-38107, CVE-2025-38103, CVE-2025-38274, CVE-2025-38163, CVE-2025-38293, CVE-2025-38064, CVE-2025-38498, CVE-2025-38039, CVE-2025-38173, CVE-2025-38038, CVE-2025-38135, CVE-2025-38149, CVE-2025-38142, CVE-2025-38414, CVE-2025-38120, CVE-2025-38106, CVE-2025-38092, CVE-2025-38091, CVE-2025-38415, CVE-2025-38294, CVE-2025-38043, CVE-2025-38147, CVE-2025-38037, CVE-2025-38108, CVE-2025-38088, CVE-2025-38316, CVE-2025-38312, CVE-2025-38352,…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• ACPI drivers;
• Android drivers;
• Bluetooth drivers;
• Bus devices;
• Clock framework and drivers;
• CPU frequency scaling framework;
• Hardware crypto device drivers;
• DMA engine subsystem;
• EDAC drivers;
• Arm Firmware Framework for ARMv8-A(FFA);
• FPGA Framework;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• Hardware monitoring drivers;
• HW tracing;
• InfiniBand drivers;
• IOMMU subsystem;
• Multiple devices driver;
• Media drivers;
• VMware VMCI Driver;
• MTD block device drivers;
• Network drivers;
• Mellanox network drivers;
• STMicroelectronics network drivers;
• NVDIMM (Non-Volatile Memory Device) drivers;
• NVME drivers;
• NVMEM (Non Volatile Memory) drivers;
• PCI subsystem;
• Amlogic Meson DDR PMU;
• NI-700 PMU driver;
• PHY drivers;
• Pin controllers subsystem;
• x86 platform drivers;
• PTP clock framework;
• SCSI subsystem;
• ASPEED SoC drivers;
• SPI subsystem;
• TCM subsystem;
• Thunderbolt and USB4 drivers;
• TTY drivers;
• UFS subsystem;
• USB core drivers;
• USB Gadget drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Port Controller Manager driver;
• VFIO drivers;
• Virtio Host (VHOST) subsystem;
• Backlight driver;
• Framebuffer layer;
• Virtio drivers;
• BTRFS file system;
• EROFS file system;
• F2FS file system;
• File systems infrastructure;
• Network file systems library;
• NTFS3 file system;
• SMB network file system;
• Codetag library;
• BPF subsystem;
• LZO compression library;
• Mellanox drivers;
• IPv4 networking;
• Bluetooth subsystem;
• Network sockets;
• XFRM subsystem;
• Digital Audio (PCM) driver;
• Tracing infrastructure;
• io_uring subsystem;
• Padata parallel execution mechanism;
• DVFS energy model driver;
• Restartable seuqences system call mechanism;
• Timer subsystem;
• Memory management;
• KASAN memory debugging framework;
• CAN network layer;
• Networking core;
• IPv6 networking;
• Netfilter;
• NetLabel subsystem;
• Open vSwitch;
• Network traffic control;
• TIPC protocol;
• TLS protocol;
• ALSA framework;
• sma1307 audio codecs;
• Intel ASoC drivers;
• MediaTek ASoC drivers;
• USB sound devices; (CVE-2025-38112, CVE-2025-38283, CVE-2025-38120, CVE-2025-38091, CVE-2025-38124, CVE-2025-38031, CVE-2025-38288, CVE-2025-38047, CVE-2025-38295, CVE-2025-38284, CVE-2025-38281, CVE-2025-38151, CVE-2025-38058, CVE-2025-38059, CVE-2025-38299, CVE-2025-38065, CVE-2025-38107, CVE-2025-38143, CVE-2025-38113, CVE-2025-38289, CVE-2025-38160, CVE-2025-38311, CVE-2025-38052, CVE-2025-38131, CVE-2025-38268, CVE-2025-38066, CVE-2025-38129, CVE-2025-38127, CVE-2025-38317, CVE-2025-38158, CVE-2025-38039, CVE-2025-38064, CVE-2025-38306, CVE-2025-38291, CVE-2025-38162, CVE-2025-38111, CVE-2025-38147, CVE-2025-38415, CVE-2025-38290, CVE-2025-38294, CVE-2025-38499, CVE-2025-38167, CVE-2025-38098, CVE-2025-38298, CVE-2025-38279, CVE-2025-38278, CVE-2025-38149, CVE-2025-38073, CVE-2025-38100, CVE-2025-38033, CVE-2025-38080, CVE-2025-38314, CVE-2025-38166, CVE-2025-38154, CVE-2025-38050, CVE-2025-38123, CVE-2025-38070, CVE-2025-38169, CVE-2025-38077, CVE-2025-38082, CVE-2025-38061, CVE-2025-38032, CVE-2025-38092, CVE-2025-38176, CVE-2025-38044, CVE-2025-38277, CVE-2025-38305, CVE-2025-38034, CVE-2025-38293, CVE-2025-38115, CVE-2025-38057, CVE-2025-38126, CVE-2025-38312, CVE-2025-38117, CVE-2025-38141, CVE-2025-38155, CVE-2025-38161, CVE-2025-38142, CVE-2025-38036, CVE-2025-38165, CVE-2025-38069, CVE-2025-38106, CVE-2025-38267, CVE-2025-38138, CVE-2025-38119, CVE-2025-38282, CVE-2025-38275, CVE-2025-38081, CVE-2025-38414,…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• ACPI drivers;
• Android drivers;
• Bluetooth drivers;
• Bus devices;
• Clock framework and drivers;
• CPU frequency scaling framework;
• Hardware crypto device drivers;
• DMA engine subsystem;
• EDAC drivers;
• Arm Firmware Framework for ARMv8-A(FFA);
• FPGA Framework;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• Hardware monitoring drivers;
• HW tracing;
• InfiniBand drivers;
• IOMMU subsystem;
• Multiple devices driver;
• Media drivers;
• VMware VMCI Driver;
• MTD block device drivers;
• Network drivers;
• Mellanox network drivers;
• STMicroelectronics network drivers;
• NVDIMM (Non-Volatile Memory Device) drivers;
• NVME drivers;
• NVMEM (Non Volatile Memory) drivers;
• PCI subsystem;
• Amlogic Meson DDR PMU;
• NI-700 PMU driver;
• PHY drivers;
• Pin controllers subsystem;
• x86 platform drivers;
• PTP clock framework;
• SCSI subsystem;
• ASPEED SoC drivers;
• SPI subsystem;
• TCM subsystem;
• Thunderbolt and USB4 drivers;
• TTY drivers;
• UFS subsystem;
• USB core drivers;
• USB Gadget drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Port Controller Manager driver;
• VFIO drivers;
• Virtio Host (VHOST) subsystem;
• Backlight driver;
• Framebuffer layer;
• Virtio drivers;
• BTRFS file system;
• EROFS file system;
• F2FS file system;
• File systems infrastructure;
• Network file systems library;
• NTFS3 file system;
• SMB network file system;
• Codetag library;
• BPF subsystem;
• LZO compression library;
• Mellanox drivers;
• IPv4 networking;
• Bluetooth subsystem;
• Network sockets;
• XFRM subsystem;
• Digital Audio (PCM) driver;
• Tracing infrastructure;
• io_uring subsystem;
• Padata parallel execution mechanism;
• DVFS energy model driver;
• Restartable seuqences system call mechanism;
• Timer subsystem;
• Memory management;
• KASAN memory debugging framework;
• CAN network layer;
• Networking core;
• IPv6 networking;
• Netfilter;
• NetLabel subsystem;
• Open vSwitch;
• Network traffic control;
• TIPC protocol;
• TLS protocol;
• ALSA framework;
• sma1307 audio codecs;
• Intel ASoC drivers;
• MediaTek ASoC drivers;
• USB sound devices; (CVE-2025-38115, CVE-2025-38004, CVE-2025-38035, CVE-2025-38057, CVE-2025-38314, CVE-2025-38317, CVE-2025-38074, CVE-2025-38113, CVE-2025-38130, CVE-2025-38175, CVE-2025-38155, CVE-2025-38062, CVE-2025-38050, CVE-2025-38159, CVE-2025-38352, CVE-2025-38101, CVE-2025-38034, CVE-2025-38061, CVE-2025-38288, CVE-2025-38153, CVE-2025-38043, CVE-2025-38268, CVE-2025-38415, CVE-2025-38291, CVE-2025-38270, CVE-2025-38044, CVE-2025-38146, CVE-2025-38048, CVE-2025-38069, CVE-2025-38298, CVE-2025-38058, CVE-2025-38161, CVE-2025-38158, CVE-2025-38059, CVE-2025-38066, CVE-2025-38047, CVE-2025-38040, CVE-2025-38112, CVE-2025-38042, CVE-2025-38107, CVE-2025-38296, CVE-2025-38278, CVE-2025-39890, CVE-2025-38088, CVE-2025-38174, CVE-2025-38118, CVE-2025-38117, CVE-2025-38110, CVE-2025-38305, CVE-2025-38136, CVE-2025-38063, CVE-2025-38498, CVE-2025-38499, CVE-2025-38106, CVE-2025-38292, CVE-2025-38163, CVE-2025-38169, CVE-2025-38032, CVE-2025-38310, CVE-2025-38302, CVE-2025-38092, CVE-2025-38052, CVE-2025-38282, CVE-2025-38082, CVE-2025-38036, CVE-2025-38054, CVE-2025-38105, CVE-2025-38265, CVE-2025-38116, CVE-2025-38060, CVE-2025-38154, CVE-2025-38280, CVE-2025-38176, CVE-2025-38156, CVE-2025-38289, CVE-2025-38166, CVE-2025-38080, CVE-2025-38098, CVE-2025-38127, CVE-2025-38125, CVE-2025-38172, CVE-2025-38142, CVE-2025-38096, CVE-2025-38055, CVE-2025-38138, CVE-2025-38126, CVE-2025-38073, CVE-2025-38173, CVE-2025-38031,…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• ACPI drivers;
• Android drivers;
• Bluetooth drivers;
• Bus devices;
• Clock framework and drivers;
• CPU frequency scaling framework;
• Hardware crypto device drivers;
• DMA engine subsystem;
• EDAC drivers;
• Arm Firmware Framework for ARMv8-A(FFA);
• FPGA Framework;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• Hardware monitoring drivers;
• HW tracing;
• InfiniBand drivers;
• IOMMU subsystem;
• Multiple devices driver;
• Media drivers;
• VMware VMCI Driver;
• MTD block device drivers;
• Network drivers;
• Mellanox network drivers;
• STMicroelectronics network drivers;
• NVDIMM (Non-Volatile Memory Device) drivers;
• NVME drivers;
• NVMEM (Non Volatile Memory) drivers;
• PCI subsystem;
• Amlogic Meson DDR PMU;
• NI-700 PMU driver;
• PHY drivers;
• Pin controllers subsystem;
• x86 platform drivers;
• PTP clock framework;
• SCSI subsystem;
• ASPEED SoC drivers;
• SPI subsystem;
• TCM subsystem;
• Thunderbolt and USB4 drivers;
• TTY drivers;
• UFS subsystem;
• USB core drivers;
• USB Gadget drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Port Controller Manager driver;
• VFIO drivers;
• Virtio Host (VHOST) subsystem;
• Backlight driver;
• Framebuffer layer;
• Virtio drivers;
• BTRFS file system;
• EROFS file system;
• F2FS file system;
• File systems infrastructure;
• Network file systems library;
• NTFS3 file system;
• SMB network file system;
• Codetag library;
• BPF subsystem;
• LZO compression library;
• Mellanox drivers;
• IPv4 networking;
• Bluetooth subsystem;
• Network sockets;
• XFRM subsystem;
• Digital Audio (PCM) driver;
• Tracing infrastructure;
• io_uring subsystem;
• Padata parallel execution mechanism;
• DVFS energy model driver;
• Restartable seuqences system call mechanism;
• Timer subsystem;
• Memory management;
• KASAN memory debugging framework;
• CAN network layer;
• Networking core;
• IPv6 networking;
• Netfilter;
• NetLabel subsystem;
• Open vSwitch;
• Network traffic control;
• TIPC protocol;
• TLS protocol;
• ALSA framework;
• sma1307 audio codecs;
• Intel ASoC drivers;
• MediaTek ASoC drivers;
• USB sound devices; (CVE-2025-38155, CVE-2025-38145, CVE-2025-38072, CVE-2025-38306, CVE-2025-38004, CVE-2025-38053, CVE-2025-38293, CVE-2025-38045, CVE-2025-38105, CVE-2025-38079, CVE-2025-38161, CVE-2025-38031, CVE-2025-38114, CVE-2025-38033, CVE-2025-38274, CVE-2025-38265, CVE-2025-38135, CVE-2025-38075, CVE-2025-38313, CVE-2025-38064, CVE-2025-38118, CVE-2025-38299, CVE-2025-38123, CVE-2025-38112, CVE-2025-38073, CVE-2025-38070, CVE-2025-38138, CVE-2025-38303, CVE-2025-38148, CVE-2025-38035, CVE-2025-38157, CVE-2025-38131, CVE-2025-38107, CVE-2025-38108, CVE-2025-38071, CVE-2025-38081, CVE-2025-38301, CVE-2025-38415, CVE-2025-38034, CVE-2025-38294, CVE-2025-38314, CVE-2025-38285, CVE-2025-38147, CVE-2025-38113, CVE-2025-38352, CVE-2025-38170, CVE-2025-38103, CVE-2025-38282, CVE-2025-38290, CVE-2025-38117, CVE-2025-38078, CVE-2025-38122, CVE-2025-38176, CVE-2025-38082, CVE-2025-38289, CVE-2025-38124, CVE-2025-38039, CVE-2025-38281, CVE-2025-38126, CVE-2025-38111, CVE-2025-38080, CVE-2025-38088, CVE-2025-38048, CVE-2025-38269, CVE-2025-38003, CVE-2025-38102, CVE-2025-38140, CVE-2025-38316, CVE-2025-38268, CVE-2025-38132, CVE-2025-38286, CVE-2025-38159, CVE-2025-38120, CVE-2025-38295, CVE-2025-38077, CVE-2025-38297, CVE-2025-38174, CVE-2025-38160, CVE-2025-38119, CVE-2025-38099, CVE-2025-38134, CVE-2025-38051, CVE-2025-38061, CVE-2025-38317, CVE-2025-38142, CVE-2025-38175, CVE-2025-38091, CVE-2025-38311, CVE-2025-38066,…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• ACPI drivers;
• Android drivers;
• Bluetooth drivers;
• Bus devices;
• Clock framework and drivers;
• CPU frequency scaling framework;
• Hardware crypto device drivers;
• DMA engine subsystem;
• EDAC drivers;
• Arm Firmware Framework for ARMv8-A(FFA);
• FPGA Framework;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• Hardware monitoring drivers;
• HW tracing;
• InfiniBand drivers;
• IOMMU subsystem;
• Multiple devices driver;
• Media drivers;
• VMware VMCI Driver;
• MTD block device drivers;
• Network drivers;
• Mellanox network drivers;
• STMicroelectronics network drivers;
• NVDIMM (Non-Volatile Memory Device) drivers;
• NVME drivers;
• NVMEM (Non Volatile Memory) drivers;
• PCI subsystem;
• Amlogic Meson DDR PMU;
• NI-700 PMU driver;
• PHY drivers;
• Pin controllers subsystem;
• x86 platform drivers;
• PTP clock framework;
• SCSI subsystem;
• ASPEED SoC drivers;
• SPI subsystem;
• TCM subsystem;
• TTY drivers;
• UFS subsystem;
• USB core drivers;
• USB Gadget drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Port Controller Manager driver;
• VFIO drivers;
• Virtio Host (VHOST) subsystem;
• Backlight driver;
• Framebuffer layer;
• Virtio drivers;
• BTRFS file system;
• EROFS file system;
• F2FS file system;
• File systems infrastructure;
• Network file systems library;
• NTFS3 file system;
• SMB network file system;
• Codetag library;
• BPF subsystem;
• LZO compression library;
• Mellanox drivers;
• IPv4 networking;
• Bluetooth subsystem;
• Network sockets;
• XFRM subsystem;
• Digital Audio (PCM) driver;
• Tracing infrastructure;
• io_uring subsystem;
• Padata parallel execution mechanism;
• DVFS energy model driver;
• Restartable seuqences system call mechanism;
• Timer subsystem;
• Memory management;
• KASAN memory debugging framework;
• CAN network layer;
• Networking core;
• IPv6 networking;
• Netfilter;
• NetLabel subsystem;
• Open vSwitch;
• Network traffic control;
• TIPC protocol;
• TLS protocol;
• ALSA framework;
• sma1307 audio codecs;
• Intel ASoC drivers;
• MediaTek ASoC drivers;
• USB sound devices; (CVE-2025-38141, CVE-2025-38039, CVE-2025-38283, CVE-2025-38272, CVE-2025-38290, CVE-2025-38168, CVE-2025-38134, CVE-2025-38158, CVE-2025-38097, CVE-2025-38078, CVE-2025-38161, CVE-2025-38116, CVE-2025-38312, CVE-2025-38067, CVE-2025-38129, CVE-2025-38119, CVE-2025-38061, CVE-2025-38352, CVE-2025-38269, CVE-2025-38163, CVE-2025-38315, CVE-2025-38301, CVE-2025-38115, CVE-2025-38032, CVE-2025-38127, CVE-2025-38029, CVE-2025-38277, CVE-2025-38075, CVE-2025-38300, CVE-2025-38059, CVE-2025-38047, CVE-2025-38118, CVE-2025-38038, CVE-2025-38278, CVE-2025-38169, CVE-2025-38074, CVE-2025-38292, CVE-2025-38295, CVE-2025-38294, CVE-2025-38154, CVE-2025-38165, CVE-2025-38069, CVE-2025-38120, CVE-2025-38098, CVE-2025-38050, CVE-2025-38068, CVE-2025-38063, CVE-2025-38034, CVE-2025-38123, CVE-2025-38092, CVE-2025-38103, CVE-2025-38170, CVE-2025-38313, CVE-2025-38062, CVE-2025-38159, CVE-2025-38147, CVE-2025-38415, CVE-2025-38045, CVE-2025-38279, CVE-2025-38302, CVE-2025-38162, CVE-2025-38414, CVE-2025-38146, CVE-2025-38035, CVE-2025-38040, CVE-2025-38073, CVE-2025-38054, CVE-2025-38099, CVE-2025-38291, CVE-2025-38126, CVE-2025-38088, CVE-2025-38310, CVE-2025-38176, CVE-2025-38102, CVE-2025-38149, CVE-2025-38124, CVE-2025-38003, CVE-2025-38140, CVE-2025-38100, CVE-2025-38081, CVE-2025-38319, CVE-2025-38142, CVE-2025-38303, CVE-2025-38155, CVE-2025-38044, CVE-2025-38316, CVE-2025-38052, CVE-2025-38317, CVE-2025-38151, CVE-2025-38164, CVE-2025-38148,…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• ACPI drivers;
• Android drivers;
• Bluetooth drivers;
• Bus devices;
• Clock framework and drivers;
• CPU frequency scaling framework;
• Hardware crypto device drivers;
• DMA engine subsystem;
• EDAC drivers;
• Arm Firmware Framework for ARMv8-A(FFA);
• FPGA Framework;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• Hardware monitoring drivers;
• HW tracing;
• InfiniBand drivers;
• IOMMU subsystem;
• Multiple devices driver;
• Media drivers;
• VMware VMCI Driver;
• MTD block device drivers;
• Network drivers;
• Mellanox network drivers;
• STMicroelectronics network drivers;
• NVDIMM (Non-Volatile Memory Device) drivers;
• NVME drivers;
• NVMEM (Non Volatile Memory) drivers;
• PCI subsystem;
• Amlogic Meson DDR PMU;
• NI-700 PMU driver;
• PHY drivers;
• Pin controllers subsystem;
• x86 platform drivers;
• PTP clock framework;
• SCSI subsystem;
• ASPEED SoC drivers;
• SPI subsystem;
• TCM subsystem;
• Thunderbolt and USB4 drivers;
• TTY drivers;
• UFS subsystem;
• USB core drivers;
• USB Gadget drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Port Controller Manager driver;
• VFIO drivers;
• Virtio Host (VHOST) subsystem;
• Backlight driver;
• Framebuffer layer;
• Virtio drivers;
• BTRFS file system;
• EROFS file system;
• F2FS file system;
• File systems infrastructure;
• Network file systems library;
• NTFS3 file system;
• SMB network file system;
• Codetag library;
• BPF subsystem;
• LZO compression library;
• Mellanox drivers;
• IPv4 networking;
• Bluetooth subsystem;
• Network sockets;
• XFRM subsystem;
• Digital Audio (PCM) driver;
• Tracing infrastructure;
• io_uring subsystem;
• Padata parallel execution mechanism;
• DVFS energy model driver;
• Restartable seuqences system call mechanism;
• Timer subsystem;
• Memory management;
• KASAN memory debugging framework;
• CAN network layer;
• Networking core;
• IPv6 networking;
• Netfilter;
• NetLabel subsystem;
• Open vSwitch;
• Network traffic control;
• TIPC protocol;
• TLS protocol;
• ALSA framework;
• sma1307 audio codecs;
• Intel ASoC drivers;
• MediaTek ASoC drivers;
• USB sound devices; (CVE-2025-38137, CVE-2025-38141, CVE-2025-38035, CVE-2025-38298, CVE-2025-38042, CVE-2025-38140, CVE-2025-38138, CVE-2025-38316, CVE-2025-38304, CVE-2025-38165, CVE-2025-38306, CVE-2025-38082, CVE-2025-38132, CVE-2025-38498, CVE-2025-38158, CVE-2025-38154, CVE-2025-38064, CVE-2025-38129, CVE-2025-38096, CVE-2025-38352, CVE-2025-38303, CVE-2025-38122, CVE-2025-38048, CVE-2025-38296, CVE-2025-38149, CVE-2025-38319, CVE-2025-38078, CVE-2025-38066, CVE-2025-38099, CVE-2025-38291, CVE-2025-38267, CVE-2025-38268, CVE-2025-38126, CVE-2025-38076, CVE-2025-38077, CVE-2025-38101, CVE-2025-38071, CVE-2025-38163, CVE-2025-38285, CVE-2025-38265, CVE-2025-38125, CVE-2025-38302, CVE-2025-38172, CVE-2025-38292, CVE-2025-38279, CVE-2025-38170, CVE-2025-38062, CVE-2025-38074, CVE-2025-38050, CVE-2025-38116, CVE-2025-38414, CVE-2025-38173, CVE-2025-38033, CVE-2025-38112, CVE-2025-38091, CVE-2025-38290, CVE-2025-39890, CVE-2025-38156, CVE-2025-38289, CVE-2025-38275, CVE-2025-38295, CVE-2025-38123, CVE-2025-38300, CVE-2025-38067, CVE-2025-38131, CVE-2025-38294, CVE-2025-38105, CVE-2025-38107, CVE-2025-38106, CVE-2025-38069, CVE-2025-38041, CVE-2025-38111, CVE-2025-38312, CVE-2025-38092, CVE-2025-38054, CVE-2025-38166, CVE-2025-38044, CVE-2025-38159, CVE-2025-38061, CVE-2025-38115, CVE-2025-38058, CVE-2025-38036, CVE-2025-38100, CVE-2025-38075, CVE-2025-38160, CVE-2025-38102, CVE-2025-38269, CVE-2025-38108, CVE-2025-38119,…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• ACPI drivers;
• Android drivers;
• Bluetooth drivers;
• Bus devices;
• Clock framework and drivers;
• CPU frequency scaling framework;
• Hardware crypto device drivers;
• DMA engine subsystem;
• EDAC drivers;
• Arm Firmware Framework for ARMv8-A(FFA);
• FPGA Framework;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• Hardware monitoring drivers;
• HW tracing;
• InfiniBand drivers;
• IOMMU subsystem;
• Multiple devices driver;
• Media drivers;
• VMware VMCI Driver;
• MTD block device drivers;
• Network drivers;
• Mellanox network drivers;
• STMicroelectronics network drivers;
• NVDIMM (Non-Volatile Memory Device) drivers;
• NVME drivers;
• NVMEM (Non Volatile Memory) drivers;
• PCI subsystem;
• Amlogic Meson DDR PMU;
• NI-700 PMU driver;
• PHY drivers;
• Pin controllers subsystem;
• x86 platform drivers;
• PTP clock framework;
• SCSI subsystem;
• ASPEED SoC drivers;
• SPI subsystem;
• TCM subsystem;
• Thunderbolt and USB4 drivers;
• TTY drivers;
• UFS subsystem;
• USB core drivers;
• USB Gadget drivers;
• Renesas USBHS Controller drivers;
• USB Type-C Port Controller Manager driver;
• VFIO drivers;
• Virtio Host (VHOST) subsystem;
• Backlight driver;
• Framebuffer layer;
• Virtio drivers;
• BTRFS file system;
• EROFS file system;
• F2FS file system;
• File systems infrastructure;
• Network file systems library;
• NTFS3 file system;
• SMB network file system;
• Codetag library;
• BPF subsystem;
• LZO compression library;
• Mellanox drivers;
• IPv4 networking;
• Bluetooth subsystem;
• Network sockets;
• XFRM subsystem;
• Digital Audio (PCM) driver;
• Tracing infrastructure;
• io_uring subsystem;
• Padata parallel execution mechanism;
• DVFS energy model driver;
• Restartable seuqences system call mechanism;
• Timer subsystem;
• Memory management;
• KASAN memory debugging framework;
• CAN network layer;
• Networking core;
• IPv6 networking;
• Netfilter;
• NetLabel subsystem;
• Open vSwitch;
• Network traffic control;
• TIPC protocol;
• TLS protocol;
• ALSA framework;
• sma1307 audio codecs;
• Intel ASoC drivers;
• MediaTek ASoC drivers;
• USB sound devices; (CVE-2025-38081, CVE-2025-38142, CVE-2025-38157, CVE-2025-38174, CVE-2025-38156, CVE-2025-38044, CVE-2025-38414, CVE-2025-38041, CVE-2025-38124, CVE-2025-38122, CVE-2025-38285, CVE-2025-38317, CVE-2025-38159, CVE-2025-38352, CVE-2025-38117, CVE-2025-38040, CVE-2025-38292, CVE-2025-38301, CVE-2025-38149, CVE-2025-38299, CVE-2025-38116, CVE-2025-38100, CVE-2025-38107, CVE-2025-38063, CVE-2025-38069, CVE-2025-38130, CVE-2025-38032, CVE-2025-38113, CVE-2025-38287, CVE-2025-38138, CVE-2025-38004, CVE-2025-38097, CVE-2025-38270, CVE-2025-38311, CVE-2025-38499, CVE-2025-38050, CVE-2025-38064, CVE-2025-38278, CVE-2025-38297, CVE-2025-38091, CVE-2025-38065, CVE-2025-38114, CVE-2025-38048, CVE-2025-38096, CVE-2025-38112, CVE-2025-38148, CVE-2025-38101, CVE-2025-38062, CVE-2025-38057, CVE-2025-38029, CVE-2025-38105, CVE-2025-38277, CVE-2025-38053, CVE-2025-38302, CVE-2025-38169, CVE-2025-38307, CVE-2025-38153, CVE-2025-38106, CVE-2025-38293, CVE-2025-38267, CVE-2025-38314, CVE-2025-38291, CVE-2025-38284, CVE-2025-38141, CVE-2025-38052, CVE-2025-38079, CVE-2025-38088, CVE-2025-38164, CVE-2025-38288, CVE-2025-38289, CVE-2025-38074, CVE-2025-38073, CVE-2025-38274, CVE-2025-38167, CVE-2025-38129, CVE-2025-38082, CVE-2025-38109, CVE-2025-38003, CVE-2025-38042, CVE-2025-38319, CVE-2025-38165, CVE-2025-38102, CVE-2025-38045, CVE-2025-38154, CVE-2025-38127, CVE-2025-38034, CVE-2025-38051, CVE-2025-38143, CVE-2025-38061,…

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• MIPS architecture;
• PA-RISC architecture;
• PowerPC architecture;
• RISC-V architecture;
• S390 architecture;
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• Compute Acceleration Framework;
• ACPI drivers;
• Serial ATA and Parallel ATA drivers;
• ATM drivers;
• Drivers core;
• ATA over ethernet (AOE) driver;
• DRBD Distributed Replicated Block Device drivers;
• Network block device driver;
• Ublk userspace block driver;
• Bluetooth drivers;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• Data acquisition framework and drivers;
• CPU frequency scaling framework;
• Hardware crypto device drivers;
• Device frequency scaling framework;
• Buffer Sharing and Synchronization framework;
• DMA engine subsystem;
• EDAC drivers;
• Arm Firmware Framework for ARMv8-A(FFA);
• ARM SCMI message protocol;
• FPGA Framework;
• GPU drivers;
• HID subsystem;
• Hardware monitoring drivers;
• HW tracing;
• I2C subsystem;
• I3C subsystem;
• IIO subsystem;
• InfiniBand drivers;
• Input Device core drivers;
• Input Device (Miscellaneous) drivers;
• IOMMU subsystem;
• IRQ chip drivers;
• MCB driver;
• Multiple devices driver;
• Media drivers;
• Multifunction device drivers;
• Microchip PCI driver;
• Intel Management Engine Interface driver;
• PCI Endpoint Test driver;
• TI TPS6594 PFSM driver;
• VMware VMCI Driver;
• MMC subsystem;
• MTD block device drivers;
• Network drivers;
• Mellanox network drivers;
• STMicroelectronics network drivers;
• NVDIMM (Non-Volatile Memory Device) drivers;
• NVME drivers;
• PCI subsystem;
• Amlogic Meson DDR PMU;
• PHY drivers;
• Pin controllers subsystem;
• x86 platform drivers;
• Power supply drivers;
• Powercap sysfs driver;
• PTP clock framework;
• PWM drivers;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• S/390 drivers;
• SCSI subsystem;
• ASPEED SoC drivers;
• QCOM SoC drivers;
• Samsung SoC drivers;
• SPI subsystem;
• small TFT LCD display modules;
• Media staging drivers;
• TCM subsystem;
• Trusted Execution Environment drivers;
• Thunderbolt and USB4 drivers;
• TTY drivers;
• UFS subsystem;
• Cadence USB3 driver;
• ChipIdea USB driver;
• USB Device Class drivers;
• USB core drivers;
• DesignWare USB3 driver;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• USB Type-C support driver;
• USB Type-C Connector System Software Interface driver;
• VFIO drivers;
• Virtio Host (VHOST) subsystem;
• Backlight driver;
• Framebuffer layer;
• TSM Common Guest driver;
• Virtio drivers;
• Xen hypervisor drivers;
• File systems infrastructure;
• BTRFS file system;
• Ceph distributed file system;
• EFI Variable file system;
• Ext4 file system;
• F2FS file system;
• GFS2 file system;
• JFFS2 file system;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• NTFS3 file system;
• Overlay file system;…

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• MIPS architecture;
• PA-RISC architecture;
• PowerPC architecture;
• RISC-V architecture;
• S390 architecture;
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• Compute Acceleration Framework;
• ACPI drivers;
• Serial ATA and Parallel ATA drivers;
• ATM drivers;
• Drivers core;
• ATA over ethernet (AOE) driver;
• DRBD Distributed Replicated Block Device drivers;
• Network block device driver;
• Ublk userspace block driver;
• Bluetooth drivers;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• Data acquisition framework and drivers;
• CPU frequency scaling framework;
• Hardware crypto device drivers;
• Device frequency scaling framework;
• Buffer Sharing and Synchronization framework;
• DMA engine subsystem;
• EDAC drivers;
• Arm Firmware Framework for ARMv8-A(FFA);
• ARM SCMI message protocol;
• FPGA Framework;
• GPU drivers;
• HID subsystem;
• Hardware monitoring drivers;
• HW tracing;
• I2C subsystem;
• I3C subsystem;
• IIO subsystem;
• InfiniBand drivers;
• Input Device core drivers;
• Input Device (Miscellaneous) drivers;
• IOMMU subsystem;
• IRQ chip drivers;
• MCB driver;
• Multiple devices driver;
• Media drivers;
• Multifunction device drivers;
• Microchip PCI driver;
• Intel Management Engine Interface driver;
• PCI Endpoint Test driver;
• TI TPS6594 PFSM driver;
• VMware VMCI Driver;
• MMC subsystem;
• MTD block device drivers;
• Network drivers;
• Mellanox network drivers;
• STMicroelectronics network drivers;
• NVDIMM (Non-Volatile Memory Device) drivers;
• NVME drivers;
• PCI subsystem;
• Amlogic Meson DDR PMU;
• PHY drivers;
• Pin controllers subsystem;
• x86 platform drivers;
• Power supply drivers;
• Powercap sysfs driver;
• PTP clock framework;
• PWM drivers;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• S/390 drivers;
• SCSI subsystem;
• ASPEED SoC drivers;
• QCOM SoC drivers;
• Samsung SoC drivers;
• SPI subsystem;
• small TFT LCD display modules;
• Media staging drivers;
• TCM subsystem;
• Trusted Execution Environment drivers;
• Thunderbolt and USB4 drivers;
• TTY drivers;
• UFS subsystem;
• Cadence USB3 driver;
• ChipIdea USB driver;
• USB Device Class drivers;
• USB core drivers;
• DesignWare USB3 driver;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• USB Type-C support driver;
• USB Type-C Connector System Software Interface driver;
• VFIO drivers;
• Virtio Host (VHOST) subsystem;
• Backlight driver;
• Framebuffer layer;
• TSM Common Guest driver;
• Virtio drivers;
• Xen hypervisor drivers;
• File systems infrastructure;
• BTRFS file system;
• Ceph distributed file system;
• EFI Variable file system;
• Ext4 file system;
• F2FS file system;
• GFS2 file system;
• JFFS2 file system;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• NTFS3 file system;
• Overlay file system; …

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• MIPS architecture;
• PA-RISC architecture;
• PowerPC architecture;
• RISC-V architecture;
• S390 architecture;
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• Compute Acceleration Framework;
• ACPI drivers;
• Serial ATA and Parallel ATA drivers;
• ATM drivers;
• Drivers core;
• ATA over ethernet (AOE) driver;
• DRBD Distributed Replicated Block Device drivers;
• Network block device driver;
• Ublk userspace block driver;
• Bluetooth drivers;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• Data acquisition framework and drivers;
• CPU frequency scaling framework;
• Hardware crypto device drivers;
• Device frequency scaling framework;
• Buffer Sharing and Synchronization framework;
• DMA engine subsystem;
• EDAC drivers;
• Arm Firmware Framework for ARMv8-A(FFA);
• ARM SCMI message protocol;
• FPGA Framework;
• GPU drivers;
• HID subsystem;
• Hardware monitoring drivers;
• HW tracing;
• I2C subsystem;
• I3C subsystem;
• IIO subsystem;
• InfiniBand drivers;
• Input Device core drivers;
• Input Device (Miscellaneous) drivers;
• IOMMU subsystem;
• IRQ chip drivers;
• MCB driver;
• Multiple devices driver;
• Media drivers;
• Multifunction device drivers;
• Microchip PCI driver;
• Intel Management Engine Interface driver;
• PCI Endpoint Test driver;
• TI TPS6594 PFSM driver;
• VMware VMCI Driver;
• MMC subsystem;
• MTD block device drivers;
• Network drivers;
• Mellanox network drivers;
• STMicroelectronics network drivers;
• NVDIMM (Non-Volatile Memory Device) drivers;
• NVME drivers;
• PCI subsystem;
• Amlogic Meson DDR PMU;
• PHY drivers;
• Pin controllers subsystem;
• x86 platform drivers;
• Power supply drivers;
• Powercap sysfs driver;
• PTP clock framework;
• PWM drivers;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• S/390 drivers;
• SCSI subsystem;
• ASPEED SoC drivers;
• QCOM SoC drivers;
• Samsung SoC drivers;
• SPI subsystem;
• small TFT LCD display modules;
• Media staging drivers;
• TCM subsystem;
• Trusted Execution Environment drivers;
• Thunderbolt and USB4 drivers;
• TTY drivers;
• UFS subsystem;
• Cadence USB3 driver;
• ChipIdea USB driver;
• USB Device Class drivers;
• USB core drivers;
• DesignWare USB3 driver;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• USB Type-C support driver;
• USB Type-C Connector System Software Interface driver;
• VFIO drivers;
• Virtio Host (VHOST) subsystem;
• Backlight driver;
• Framebuffer layer;
• TSM Common Guest driver;
• Virtio drivers;
• Xen hypervisor drivers;
• File systems infrastructure;
• BTRFS file system;
• Ceph distributed file system;
• EFI Variable file system;
• Ext4 file system;
• F2FS file system;
• GFS2 file system;
• JFFS2 file system;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• NTFS3 file system;
• Overlay file system; …