opensuse/kernel-source-longterm&distro=openSUSE Tumbleweed

Vulnerabilities (694)

• CVE-2025-40038Oct 28, 2025
  affected < 6.18.16-1.1fixed 6.18.16-1.1

  In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid Skip the WRMSR and HLT fastpaths in SVM's VM-Exit handler if the next RIP isn't valid, e.g. because KVM is running with nrips=false. SVM mus

• CVE-2025-40037Oct 28, 2025
  affected < 6.18.16-1.1fixed 6.18.16-1.1

  In the Linux kernel, the following vulnerability has been resolved: fbdev: simplefb: Fix use after free in simplefb_detach_genpds() The pm_domain cleanup can not be devres managed as it uses struct simplefb_par which is allocated within struct fb_info by framebuffer_alloc(). Th

• CVE-2025-40036Oct 28, 2025
  affected < 6.18.16-1.1fixed 6.18.16-1.1

  In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix possible map leak in fastrpc_put_args copy_to_user() failure would cause an early return without cleaning up the fdlist, which has been updated by the DSP. This could lead to map leak. Fix th

• CVE-2025-40035Oct 28, 2025
  affected < 6.18.16-1.1fixed 6.18.16-1.1

  In the Linux kernel, the following vulnerability has been resolved: Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak Struct ff_effect_compat is embedded twice inside uinput_ff_upload_compat, contains internal padding. In particular, there is a hole aft

• CVE-2025-40034Oct 28, 2025
  affected < 6.18.16-1.1fixed 6.18.16-1.1

  In the Linux kernel, the following vulnerability has been resolved: PCI/AER: Avoid NULL pointer dereference in aer_ratelimit() When platform firmware supplies error information to the OS, e.g., via the ACPI APEI GHES mechanism, it may identify an error source device that doesn'

• CVE-2025-40033Oct 28, 2025
  affected < 6.18.16-1.1fixed 6.18.16-1.1

  In the Linux kernel, the following vulnerability has been resolved: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() pru_rproc_set_ctable() accessed rproc->priv before the IS_ERR_OR_NULL check, which could lead to a null pointer dereference. Mov

• CVE-2025-40032Oct 28, 2025
  affected < 6.18.16-1.1fixed 6.18.16-1.1

  In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release The fields dma_chan_tx and dma_chan_rx of the struct pci_epf_test can be NULL even after EPF initialization. Then it is prudent to che

• CVE-2025-40031Oct 28, 2025
  affected < 6.18.16-1.1fixed 6.18.16-1.1

  In the Linux kernel, the following vulnerability has been resolved: tee: fix register_shm_helper() In register_shm_helper(), fix incorrect error handling for a call to iov_iter_extract_pages(). A case is missing for when iov_iter_extract_pages() only got some pages and return a

• CVE-2025-40030Oct 28, 2025
  affected < 6.18.16-1.1fixed 6.18.16-1.1

  In the Linux kernel, the following vulnerability has been resolved: pinctrl: check the return value of pinmux_ops::get_function_name() While the API contract in docs doesn't specify it explicitly, the generic implementation of the get_function_name() callback from struct pinmux

• CVE-2025-40029Oct 28, 2025
  affected < 6.18.16-1.1fixed 6.18.16-1.1

  In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: Check return value of platform_get_resource() platform_get_resource() returns NULL in case of failure, so check its return value and propagate the error in order to prevent NULL pointer dereference

• CVE-2025-40082Oct 28, 2025
  affected < 6.18.16-1.1fixed 6.18.16-1.1

  In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() BUG: KASAN: slab-out-of-bounds in hfsplus_uni2asc+0xa71/0xb90 fs/hfsplus/unicode.c:186 Read of size 2 at addr ffff8880289ef218 by task syz.6.248/14290

• CVE-2025-40040Oct 28, 2025
  affected < 6.18.16-1.1fixed 6.18.16-1.1

  In the Linux kernel, the following vulnerability has been resolved: mm/ksm: fix flag-dropping behavior in ksm_madvise syzkaller discovered the following crash: (kernel BUG) [ 44.607039] ------------[ cut here ]------------ [ 44.607422] kernel BUG at mm/userfaultfd.c:2067!

• CVE-2025-40039Oct 28, 2025
  affected < 6.18.16-1.1fixed 6.18.16-1.1

  In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix race condition in RPC handle list access The 'sess->rpc_handle_list' XArray manages RPC handles within a ksmbd session. Access to this list is intended to be protected by 'sess->rpc_lock' (an rw_sema

• CVE-2025-40028Oct 28, 2025
  affected < 6.18.16-1.1fixed 6.18.16-1.1

  In the Linux kernel, the following vulnerability has been resolved: binder: fix double-free in dbitmap A process might fail to allocate a new bitmap when trying to expand its proc->dmap. In that case, dbitmap_grow() fails and frees the old bitmap via dbitmap_free(). However, th

• CVE-2025-40027Oct 28, 2025
  affected < 6.18.16-1.1fixed 6.18.16-1.1

  In the Linux kernel, the following vulnerability has been resolved: net/9p: fix double req put in p9_fd_cancelled Syzkaller reports a KASAN issue as below: general protection fault, probably for non-canonical address 0xfbd59c0000000021: 0000 [#1] PREEMPT SMP KASAN NOPTI KASAN:

• CVE-2025-40026Oct 28, 2025
  affected < 6.18.16-1.1fixed 6.18.16-1.1

  In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O When completing emulation of instruction that generated a userspace exit for I/O, don't recheck L1 intercepts as KVM has already finished th

• CVE-2025-40025Oct 28, 2025
  affected < 6.18.16-1.1fixed 6.18.16-1.1

  In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on node footer for non inode dnode As syzbot reported below: ------------[ cut here ]------------ kernel BUG at fs/f2fs/file.c:1243! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI

• CVE-2025-40019Oct 24, 2025
  affected < 6.18.16-1.1fixed 6.18.16-1.1

  In the Linux kernel, the following vulnerability has been resolved: crypto: essiv - Check ssize for decryption and in-place encryption Move the ssize check to the start in essiv_aead_crypt so that it's also checked for decryption and in-place encryption.

• CVE-2025-40018Oct 24, 2025
  affected < 6.18.16-1.1fixed 6.18.16-1.1

  In the Linux kernel, the following vulnerability has been resolved: ipvs: Defer ip_vs_ftp unregister during netns cleanup On the netns cleanup path, __ip_vs_ftp_exit() may unregister ip_vs_ftp before connections with valid cp->app pointers are flushed, leading to a use-after-fr

• CVE-2025-40017Oct 20, 2025
  affected < 6.18.16-1.1fixed 6.18.16-1.1

  In the Linux kernel, the following vulnerability has been resolved: media: iris: Fix memory leak by freeing untracked persist buffer One internal buffer which is allocated only once per session was not being freed during session close because it was not being tracked as part of