Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: e5f35c27 by Salvatore Bonaccorso at 2025-03-27T19:32:51+01:00 Merge Linux CVEs from kernel-sec - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,24 @@ +CVE-2025-21871 [tee: optee: Fix supplicant wait loop] + - linux 6.12.17-1 + NOTE: https://git.kernel.org/linus/70b0d6b0a199c5a3ee6c72f5e61681ed6f759612 (6.14-rc4) +CVE-2025-21870 [ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers] + - linux 6.12.17-1 + [bullseye] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/6fd60136d256b3b948333ebdb3835f41a95ab7ef (6.14-rc4) +CVE-2025-21869 [powerpc/code-patching: Disable KASAN report during patching via temporary mm] + - linux 6.12.17-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + [bullseye] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/dc9c5166c3cb044f8a001e397195242fd6796eee (6.14-rc4) +CVE-2025-21868 [net: allow small head cache usage with large MAX_SKB_FRAGS values] + - linux 6.12.17-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + [bullseye] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/14ad6ed30a10afbe91b0749d6378285f4225d482 (6.14-rc4) +CVE-2025-21867 [bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()] + - linux 6.12.17-1 + [bullseye] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/6b3d638ca897e099fa99bd6d02189d3176f80a47 (6.14-rc4) CVE-2025-31165 (Cross-Site Scripting (XSS) vulnerability in the Logbug module of Night ...) NOT-FOR-US: NightWolf Penetration Platform CVE-2025-31113 View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e5f35c27c0424d3bff21e2ea98c28e90aab381f1 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e5f35c27c0424d3bff21e2ea98c28e90aab381f1 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
