In the Linux kernel, the following vulnerability has been resolved:
KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler
We do check for target CPU == -1, but this might change at the time we are going to use it. Hold the physical target CPU in a local variable to avoid out-of-bound accesses to the cpu arrays.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Sep 17, 2025 | Sep 17, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 15, 2025 |
| Ubuntu | — | Upgrade linuxUpgrade linux-azure-fdeUpgrade linux-riscv-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-lowlatencyUpgrade linux-gkeUpgrade linux-awsUpgrade linux-nvidia-tegra-5.15Upgrade linux-ibm-5.15Upgrade linux-aws-5.15Upgrade linux-raspiUpgrade linux-bluefieldUpgrade linux-gcpUpgrade linux-nvidia-tegraUpgrade linux-intel-iot-realtimeUpgrade linux-nvidiaUpgrade linux-gkeopUpgrade linux-realtimeUpgrade linux-oracleUpgrade linux-azure-5.15Upgrade linux-azureUpgrade linux-intel-iotgUpgrade linux-ibmUpgrade linux-nvidia-tegra-igxUpgrade linux-kvmUpgrade linux-xilinx-zynqmpUpgrade linux-oracle-5.15Upgrade linux-hwe-5.15Upgrade linux-gcp-5.15Upgrade linux-intel-iotg-5.15 | Sep 19, 2025 | Sep 16, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub