A null-pointer bug tucked inside the Linux kernel’s XFRM (IP transformation) code — specifically in xfrm_update_ae_params() — can be triggered by a local actor with network administration privileges to cause a complete kernel crash and a hard denial-of-service on affected systems; the defect was...
A recently assigned Linux-kernel vulnerability, tracked as CVE‑2025‑38465, fixes integer wraparound bugs in netlink code paths that update a socket’s receive-accounting counter (sk->sk_rmem_alloc); Microsoft’s public advisory names Azure Linux as a product that “includes this open‑source library...
A compact but consequential Linux kernel information‑leak fix has been published under CVE‑2025‑40279: a small change in the traffic‑control connmark action (act_connmark) zero‑initializes a local struct (tc_ife / opt) in tcf_connmark_dump to stop uninitialized padding bytes from being copied...
The Linux kernel received a surgical fix for CVE-2025-40278 that zero-initializes a local struct used by the traffic-control “ife” action, closing a KMSAN-reported kernel information leak that could otherwise disclose residual stack bytes to unprivileged userspace.
Background / Overview...