CVE-2025-21662 – Mellanox Technologies mlx5 Core Deadlock Vulnerability

The following table lists the changes that have been made to the CVE-2025-21662 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 21, 2025 Action […]

CVE-2025-21661 – “Linux GPIO Virtuser Missing Lookup Table Cleanups”

In the Linux kernel, the following vulnerability has been resolved: gpio: virtuser: fix missing lookup table cleanups When a virtuser device is created via configfs and the probe fails due to an incorrect lookup table, the table is not removed. This prevents subsequent probe attempts from succeeding, even if the issue is corrected, unless the […]

CVE-2025-21660 – Samba Linux Kernel Buffer Use After Free

The following table lists the changes that have been made to the CVE-2025-21660 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 21, 2025 Action […]

CVE-2025-21659 – Apache Netlink NAPI Namespace Violation

The following table lists the changes that have been made to the CVE-2025-21659 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 21, 2025 Action […]

CVE-2025-21658 – Linux Btrfs NULL Pointer Dereference Vulnerability

In the Linux kernel, the following vulnerability has been resolved: btrfs: avoid NULL pointer dereference if no valid extent tree [BUG] Syzbot reported a crash with the following call trace: BTRFS info (device loop0): scrub: started on devid 1 BUG: kernel NULL pointer dereference, address: 0000000000000208 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) […]

CVE-2025-21657 – Linux Kernel Sched Ext rq_lock Raw Spin Lock RQ Locking Weakness

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Replace rq_lock() to raw_spin_rq_lock() in scx_ops_bypass() scx_ops_bypass() iterates all CPUs to re-enqueue all the scx tasks. For each CPU, it acquires a lock using rq_lock() regardless of whether a CPU is offline or the CPU is currently running a task in a higher scheduler […]

CVE-2025-21656 – Linux drivetemp SCSI Error Code Injection Vulnerability

The following table lists the changes that have been made to the CVE-2025-21656 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 21, 2025 Action […]

CVE-2024-57946 – Vulnerability Title: “Virtio-Blk Linux Kernel Deadlock Vulnerability” (Virtio-Blk, Deadlock)

In the Linux kernel, the following vulnerability has been resolved: virtio-blk: don’t keep queue frozen during system suspend Commit 4ce6e2db00de (“virtio-blk: Ensure no requests in virtqueues before deleting vqs.”) replaces queue quiesce with queue freeze in virtio-blk’s PM callbacks. And the motivation is to drain inflight IOs before suspending. block layer’s queue freeze looks very […]

CVE-2024-57945 – “Riscv Linux Kernel Out-of-Bounds Memory Access Vulnerability”

In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Fix the out of bound issue of vmemmap address In sparse vmemmap model, the virtual address of vmemmap is calculated as: ((struct page *)VMEMMAP_START – (phys_ram_base >> PAGE_SHIFT)). And the struct page’s va can be calculated with an offset: (vmemmap + (pfn)). However, […]

CVE-2025-21663 – Nvidia Stmmac Tegra MGBE IOMMU Stream ID Vulnerability

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwmac-tegra: Read iommu stream id from device tree Nvidia’s Tegra MGBE controllers require the IOMMU “Stream ID” (SID) to be written to the MGBE_WRAP_AXI_ASID0_CTRL register. The current driver is hard coded to use MGBE0’s SID for all controllers. This causes softirq time outs […]