DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Linux Kernel: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2025-12-28
Ein Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um nicht näher spezifizierte Angriffe durchzuführen, die möglicherweise zu einer Denial-of-Service- Bedingung führen oder eine Speicherbeschädigung verursachen können.
01
beschreibt (207)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-68750US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
usb: potential integer overflow in usbg_make_tpg()
The variable tpgt in usbg_make_tpg() is defined as unsigned… | ||||
| CVE-2025-68749US | medium4.7 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
accel/ivpu: Fix race condition when unbinding BOs
Fix 'Memory manager not clean during takedown' warning that… | ||||
| CVE-2025-68748US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
drm/panthor: Fix UAF race between device unplug and FW event processing
The function panthor_fw_unplug() will… | ||||
| CVE-2025-68747US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
drm/panthor: Fix UAF on kernel BO VA nodes
If the MMU is down, panthor_vm_unmap_range() might return an error.… | ||||
| CVE-2025-68746US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
spi: tegra210-quad: Fix timeout handling
When the CPU that the QSPI interrupt handler runs on (typically CPU 0… | ||||
| CVE-2025-68745US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Clear cmds after chip reset
Commit aefed3e5548f ("scsi: qla2xxx: target: Fix offline port handl… | ||||
| CVE-2025-68744US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
bpf: Free special fields when update [lru_,]percpu_hash maps
As [lru_,]percpu_hash maps support BPF_KPTR_{REF,… | ||||
| CVE-2025-68743US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
mshv: Fix create memory region overlap check
The current check is incorrect; it only checks if the beginning o… | ||||
| CVE-2025-68742US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix invalid prog->stats access when update_effective_progs fails
Syzkaller triggers an invalid memory acc… | ||||
| CVE-2025-68741US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Fix improper freeing of purex item
In qla2xxx_process_purls_iocb(), an item is allocated via
ql… | ||||
| CVE-2025-68740US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
ima: Handle error code returned by ima_filter_rule_match()
In ima_match_rules(), if ima_filter_rule_match() re… | ||||
| CVE-2025-68739US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
PM / devfreq: hisi: Fix potential UAF in OPP handling
Ensure all required data is acquired before calling dev_… | ||||
| CVE-2025-68738US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7996: fix null pointer deref in mt7996_conf_tx()
If a link does not have an assigned channel yet… | ||||
| CVE-2025-68737US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
arm64/pageattr: Propagate return value from __change_memory_common
The rodata=on security measure requires tha… | ||||
| CVE-2025-68736US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
landlock: Fix handling of disconnected directories
Disconnected files or directories can appear when they are… | ||||
| CVE-2025-68735US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
drm/panthor: Prevent potential UAF in group creation
This commit prevents the possibility of a use after free… | ||||
| CVE-2023-54161US | — | — | ||
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | ||||
| CVE-2023-54160US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
firmware: arm_sdei: Fix sleep from invalid context BUG
Running a preempt-rt (v6.2-rc3-rt1) based kernel on an… | ||||
| CVE-2023-54159US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
usb: mtu3: fix kernel panic at qmu transfer done irq handler
When handle qmu transfer irq, it will unlock @mtu… | ||||
| CVE-2023-54158US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
btrfs: don't free qgroup space unless specified
Boris noticed in his simple quotas testing that he was getting… | ||||
20 von 207 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Oracle Linux Security Advisory ELSA-2026-50294 vom 2026-06-04external
- Oracle Linux Security Advisory ELSA-2026-50372 vom 2026-07-07external
- Red Hat Security Advisory RHSA-2026:10996 vom 2026-04-27external
- Red Hat Security Advisory RHSA-2026:14339 vom 2026-05-06external
- Red Hat Security Advisory RHSA-2026:19568 vom 2026-05-21external
- Red Hat Security Advisory RHSA-2026:19569 vom 2026-05-20external
- Red Hat Security Advisory RHSA-2026:21209 vom 2026-05-27external
- Red Hat Security Advisory RHSA-2026:66324 vom 2026-09-10external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan