kasan

A newly recorded Linux kernel vulnerability, tracked as CVE-2025-68378, fixes a dangerous boundary-check omission in the BPF stackmap handling that could produce a KASAN-detected slab out‑of‑bounds write when copying stack trace entries into a stackmap bucket. The flaw was reported by the...

A recently assigned Linux-kernel vulnerability, CVE-2025-38029 — described as “kasan: avoid sleepable page allocation from atomic context” — has prompted an upstream kernel patch that removes a sleep-prone allocation in a KASAN-related path and has raised questions about which Microsoft...

A recently disclosed Linux-kernel vulnerability, tracked as CVE-2025-37750, fixes a kernel use‑after‑free (UAF) that can be triggered when SMB multichannel is used with encrypted transfers; the bug arises from reusing crypto AEAD state across channels and manifests as KASAN-detected slab UAFs...

The Linux kernel received a targeted fix for an out‑of‑bounds read in the UDF filesystem parser — a small defensive change that closes a KASAN‑reported use‑after‑free triggered by malformed Allocation Extent Descriptors and prevents crc_itu_t from being invoked on memory outside the descriptor...