In the Linux kernel, the following vulnerability has been resolved:
vme: Fix error not catched in fake_init()
In fake_init(), __root_device_register() is possible to fail but it's ignored, which can cause unregistering vme_root fail when exit.
general protection fault, probably for non-canonical address 0xdffffc000000008c KASAN: null-ptr-deref in range [0x0000000000000460-0x0000000000000467] RIP: 0010:root_device_unregister+0x26/0x60 Call Trace: <TASK> __x64_sys_delete_module+0x34f/0x540 do_syscall_64+0x38/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd
Return error when __root_device_register() fails.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 9, 2025 | Oct 9, 2025 |
| Ubuntu | — | Upgrade linux-oracle-5.15Upgrade linux-gcp-fipsUpgrade linux-ibm-5.4Upgrade linux-gcp-5.4Upgrade linux-nvidiaUpgrade linux-gkeopUpgrade linux-hweUpgrade linux-oracleUpgrade linux-aws-fipsUpgrade linux-aws-hweUpgrade linuxUpgrade linux-iotUpgrade linux-gcp-4.15Upgrade linux-lowlatencyUpgrade linux-azure-5.15Upgrade linux-azure-fipsUpgrade linux-ibmUpgrade linux-hwe-5.4Upgrade linux-xilinx-zynqmpUpgrade linux-intel-iot-realtimeUpgrade linux-oracle-5.4Upgrade linux-aws-5.4Upgrade linux-gcpUpgrade linux-realtimeUpgrade linux-raspi-5.4Upgrade linux-intel-iotgUpgrade linux-fipsUpgrade linux-azureUpgrade linux-gkeUpgrade linux-azure-5.4Upgrade linux-aws-5.15Upgrade linux-awsUpgrade linux-raspiUpgrade linux-nvidia-tegra-5.15Upgrade linux-azure-4.15Upgrade linux-kvmUpgrade linux-gcp-5.15Upgrade linux-hwe-5.15Upgrade linux-bluefieldUpgrade linux-lowlatency-hwe-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-riscv-5.15 | Oct 10, 2025 | Oct 7, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Oct 7, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub