In the Linux kernel, the following vulnerability has been resolved:
security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6
A bad bug in clang's implementation of -fzero-call-used-regs can result in NULL pointer dereferences (see the links above the check for more information). Restrict CONFIG_CC_HAS_ZERO_CALL_USED_REGS to either a supported GCC version or a clang newer than 15.0.6, which will catch both a theoretical 15.0.7 and the upcoming 16.0.0, which will both have the bug fixed.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Dec 31, 2025 | Dec 31, 2025 |
| Ubuntu | — | Upgrade linux-nvidia-tegra-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-awsUpgrade linux-azure-fdeUpgrade linux-realtimeUpgrade linux-bluefieldUpgrade linux-azureUpgrade linux-gcpUpgrade linux-aws-5.15Upgrade linux-gcp-5.15Upgrade linux-hwe-5.15Upgrade linux-riscv-5.15Upgrade linux-kvmUpgrade linux-intel-iotgUpgrade linux-raspiUpgrade linux-ibmUpgrade linuxUpgrade linux-gkeopUpgrade linux-oracleUpgrade linux-oracle-5.15Upgrade linux-lowlatencyUpgrade linux-gkeUpgrade linux-nvidiaUpgrade linux-azure-fde-5.15Upgrade linux-azure-5.15 | Jan 6, 2026 | Jan 2, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub