p PatchFirst

PatchFirst · Aktuelle Sicherheitslücken

Sicherheitslücken in linux-lowlatency-hwe-5.15 · Seite 82

In den letzten 30 Tagen veröffentlichte Sicherheitslücken für linux-lowlatency-hwe-5.15: 0. Davon im KEV-Katalog: 0.

RSS ↗ JSON ↗
Sicherheitslücken filtern
Filter zurücksetzen

Sicherheitslücken: 4519

  1. CVE-2025-21767

    Mittel · CVSS 5.5EPSS 0,18%Korrektur verfügbar

    clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context

    In the Linux kernel, the following vulnerability has been resolved: clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context The following bug report happened with a PREEMPT_RT kernel: BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 2012, name: kwatchdog preempt_count: 1, expected: 0 RCU nest depth: 0, expected: 0 get_random_u32+0x4f/0x110 clocksource_verify_choose_cpus+0xab/0x1a0 clocksource_verify_percpu.part.0+0x6b/0x330 clocksource_watchdog_kthread+0x193/0x1a0 It is due to the fact that clocksource

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-140.150~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  2. CVE-2025-21766

    Hoch · CVSS 8.1EPSS 0,57%Korrektur verfügbar

    ipv4: use RCU protection in __ip_rt_update_pmtu()

    In the Linux kernel, the following vulnerability has been resolved: ipv4: use RCU protection in __ip_rt_update_pmtu() __ip_rt_update_pmtu() must use RCU protection to make sure the net structure it reads does not disappear.

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-140.150~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  3. CVE-2025-21765

    Hoch · CVSS 8.1EPSS 0,61%Korrektur verfügbar

    ipv6: use RCU protection in ip6_default_advmss()

    In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU protection in ip6_default_advmss() ip6_default_advmss() needs rcu protection to make sure the net structure it reads does not disappear.

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-140.150~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  4. CVE-2025-21764

    Hoch · CVSS 7.8EPSS 0,27%Korrektur verfügbar

    ndisc: use RCU protection in ndisc_alloc_skb()

    In the Linux kernel, the following vulnerability has been resolved: ndisc: use RCU protection in ndisc_alloc_skb() ndisc_alloc_skb() can be called without RTNL or RCU being held. Add RCU protection to avoid possible UAF.

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-140.150~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  5. CVE-2025-21763

    Hoch · CVSS 7.8EPSS 0,26%Korrektur verfügbar

    neighbour: use RCU protection in __neigh_notify()

    In the Linux kernel, the following vulnerability has been resolved: neighbour: use RCU protection in __neigh_notify() __neigh_notify() can be called without RTNL or RCU protection. Use RCU protection to avoid potential UAF.

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-140.150~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  6. CVE-2025-21762

    Hoch · CVSS 8.1EPSS 0,66%Korrektur verfügbar

    arp: use RCU protection in arp_xmit()

    In the Linux kernel, the following vulnerability has been resolved: arp: use RCU protection in arp_xmit() arp_xmit() can be called without RTNL or RCU protection. Use RCU protection to avoid potential UAF.

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-140.150~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  7. CVE-2025-21761

    Hoch · CVSS 7.8EPSS 0,26%Korrektur verfügbar

    openvswitch: use RCU protection in ovs_vport_cmd_fill_info()

    In the Linux kernel, the following vulnerability has been resolved: openvswitch: use RCU protection in ovs_vport_cmd_fill_info() ovs_vport_cmd_fill_info() can be called without RTNL or RCU. Use RCU protection and dev_net_rcu() to avoid potential UAF.

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-140.150~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  8. CVE-2025-21760

    Hoch · CVSS 8.1EPSS 38%Korrektur verfügbar

    ndisc: extend RCU protection in ndisc_send_skb()

    In the Linux kernel, the following vulnerability has been resolved: ndisc: extend RCU protection in ndisc_send_skb() ndisc_send_skb() can be called without RTNL or RCU held. Acquire rcu_read_lock() earlier, so that we can use dev_net_rcu() and avoid a potential UAF.

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-140.150~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  9. CVE-2025-21758

    Hoch · CVSS 7.8EPSS 16,93%Korrektur verfügbar

    ipv6: mcast: add RCU protection to mld_newpack()

    In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: add RCU protection to mld_newpack() mld_newpack() can be called without RTNL or RCU being held. Note that we no longer can use sock_alloc_send_skb() because ipv6.igmp_sk uses GFP_KERNEL allocations which can sleep. Instead use alloc_skb() and charge the net->ipv6.igmp_sk socket under RCU protection.

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-140.150~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  10. CVE-2025-21756

    Hoch · CVSS 7.8EPSS 0,89%Öffentlicher ExploitKorrektur verfügbar

    vsock: Keep the binding until socket destruction

    In the Linux kernel, the following vulnerability has been resolved: vsock: Keep the binding until socket destruction Preserve sockets bindings; this includes both resulting from an explicit bind() and those implicitly bound through autobind during connect(). Prevents socket unbinding during a transport reassignment, which fixes a use-after-free: 1. vsock_create() (refcnt=1) calls vsock_insert_unbound() (refcnt=2) 2. transport->release() calls vsock_remove_bound() without checking if sk was bound and moved to bound list (refcnt=1) 3. vsock_bind() assumes sk is in unbound list and before __vsock_insert_bound(vsock_

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-138.148~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  11. CVE-2024-58020

    Mittel · CVSS 5.5EPSS 0,26%Korrektur verfügbar

    HID: multitouch: Add NULL check in mt_input_configured

    In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Add NULL check in mt_input_configured devm_kasprintf() can return a NULL pointer on failure,but this returned value in mt_input_configured() is not checked. Add NULL check in mt_input_configured(), to handle kernel NULL pointer dereference error.

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-140.150~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  12. CVE-2024-57834

    Mittel · CVSS 5.7EPSS 0,25%Korrektur verfügbar

    media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread

    In the Linux kernel, the following vulnerability has been resolved: media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread syzbot report a null-ptr-deref in vidtv_mux_stop_thread. [1] If dvb->mux is not initialized successfully by vidtv_mux_init() in the vidtv_start_streaming(), it will trigger null pointer dereference about mux in vidtv_mux_stop_thread(). Adjust the timing of streaming initialization and check it before stopping it. [1] KASAN: null-ptr-deref in range [0x0000000000000128-0x000000000000012f] CPU: 0 UID: 0 PID: 5842 Comm: syz-executor248 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 Hardware name: Google Goo

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-140.150~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  13. CVE-2025-21753

    Hoch · CVSS 7.8EPSS 0,26%Korrektur verfügbar

    btrfs: fix use-after-free when attempting to join an aborted transaction

    In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free when attempting to join an aborted transaction When we are trying to join the current transaction and if it's aborted, we read its 'aborted' field after unlocking fs_info->trans_lock and without holding any extra reference count on it. This means that a concurrent task that is aborting the transaction may free the transaction before we read its 'aborted' field, leading to a use-after-free. Fix this by reading the 'aborted' field while holding fs_info->trans_lock since any freeing task must first acquire that lock and set fs_info->running_transacti

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-140.150~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  14. CVE-2025-21749

    Mittel · CVSS 5.7EPSS 0,21%Korrektur verfügbar

    net: rose: lock the socket in rose_bind()

    In the Linux kernel, the following vulnerability has been resolved: net: rose: lock the socket in rose_bind() syzbot reported a soft lockup in rose_loopback_timer(), with a repro calling bind() from multiple threads. rose_bind() must lock the socket to avoid this issue.

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-140.150~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  15. CVE-2025-21748

    Kritisch · CVSS 9.8EPSS 0,61%Korrektur verfügbar

    ksmbd: fix integer overflows on 32 bit systems

    In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix integer overflows on 32 bit systems On 32bit systems the addition operations in ipc_msg_alloc() can potentially overflow leading to memory corruption. Add bounds checking using KSMBD_IPC_MAX_PAYLOAD to avoid overflow.

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-140.150~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  16. CVE-2025-21745

    Mittel · CVSS 5.5EPSS 0,27%Korrektur verfügbar

    blk-cgroup: Fix class @block_class's subsystem refcount leakage

    In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix class @block_class's subsystem refcount leakage blkcg_fill_root_iostats() iterates over @block_class's devices by class_dev_iter_(init|next)(), but does not end iterating with class_dev_iter_exit(), so causes the class's subsystem refcount leakage. Fix by ending the iterating with class_dev_iter_exit().

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-140.150~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  17. CVE-2025-21744

    Mittel · CVSS 5.5EPSS 0,25%Korrektur verfügbar

    wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize()

    In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() On removal of the device or unloading of the kernel module a potential NULL pointer dereference occurs. The following sequence deletes the interface: brcmf_detach() brcmf_remove_interface() brcmf_del_if() Inside the brcmf_del_if() function the drvr->if2bss[ifidx] is updated to BRCMF_BSSIDX_INVALID (-1) if the bsscfgidx matches. After brcmf_remove_interface() call the brcmf_proto_detach() function is called providing the following sequence: brcmf_detach() brcmf_proto_detach() brcm

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-140.150~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  18. CVE-2025-21736

    Mittel · CVSS 5.5EPSS 0,25%Korrektur verfügbar

    nilfs2: fix possible int overflows in nilfs_fiemap()

    In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix possible int overflows in nilfs_fiemap() Since nilfs_bmap_lookup_contig() in nilfs_fiemap() calculates its result by being prepared to go through potentially maxblocks == INT_MAX blocks, the value in n may experience an overflow caused by left shift of blkbits. While it is extremely unlikely to occur, play it safe and cast right hand expression to wider type to mitigate the issue. Found by Linux Verification Center (linuxtesting.org) with static analysis tool SVACE.

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-140.150~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  19. CVE-2025-21735

    Hoch · CVSS 8.8EPSS 0,38%Korrektur verfügbar

    NFC: nci: Add bounds checking in nci_hci_create_pipe()

    In the Linux kernel, the following vulnerability has been resolved: NFC: nci: Add bounds checking in nci_hci_create_pipe() The "pipe" variable is a u8 which comes from the network. If it's more than 127, then it results in memory corruption in the caller, nci_hci_connect_gate().

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-140.150~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  20. CVE-2024-58017

    Mittel · CVSS 5.5EPSS 0,25%Korrektur verfügbar

    printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX

    In the Linux kernel, the following vulnerability has been resolved: printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX Shifting 1 << 31 on a 32-bit int causes signed integer overflow, which leads to undefined behavior. To prevent this, cast 1 to u32 before performing the shift, ensuring well-defined behavior. This change explicitly avoids any potential overflow by ensuring that the shift occurs on an unsigned 32-bit integer.

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-140.150~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

Prüfen Sie Ihren Server

Gleichen Sie Ihren installierten Stack und seine Versionen mit den aktuellen Sicherheitsmeldungen ab.

Prüfen Sie Ihren Server →