In the Linux kernel, the following vulnerability has been resolved:
media: vidtv: Terminating the subsequent process of initialization failure
syzbot reported a slab-use-after-free Read in vidtv_mux_init. [1]
After PSI initialization fails, the si member is accessed again, resulting in this uaf.
After si initialization fails, the subsequent process needs to be exited.
[1] BUG: KASAN: slab-use-after-free in vidtv_mux_pid_ctx_init drivers/media/test-drivers/vidtv/vidtv_mux.c:78 [inline] BUG: KASAN: slab-use-after-free in vidtv_mux_init+0xac2/0xbe0 drivers/media/test-drivers/vidtv/vidtv_mux.c:524 Read of size 8 at addr ffff88802fa42acc by task syz.2.37/6059
CPU: 0 UID: 0 PID: 6059 Comm: syz.2.37 Not tainted 6.14.0-rc5-syzkaller #0 Hardware name: Google Compute Engine, BIOS Google 02/12/2025 Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:408 [inline] print_report+0xc3/0x670 mm/kasan/report.c:521 kasan_report+0xd9/0x110 mm/kasan/report.c:634 vidtv_mux_pid_ctx_init drivers/media/test-drivers/vidtv/vidtv_mux.c:78 vidtv_mux_init+0xac2/0xbe0 drivers/media/test-drivers/vidtv/vidtv_mux.c:524 vidtv_start_streaming drivers/media/test-drivers/vidtv/vidtv_bridge.c:194 vidtv_start_feed drivers/media/test-drivers/vidtv/vidtv_bridge.c:239 dmx_section_feed_start_filtering drivers/media/dvb-core/dvb_demux.c:973 dvb_dmxdev_feed_start drivers/media/dvb-core/dmxdev.c:508 [inline] dvb_dmxdev_feed_restart.isra.0 drivers/media/dvb-core/dmxdev.c:537 dvb_dmxdev_filter_stop+0x2b4/0x3a0 drivers/media/dvb-core/dmxdev.c:564 dvb_dmxdev_filter_free drivers/media/dvb-core/dmxdev.c:840 [inline] dvb_demux_release+0x92/0x550 drivers/media/dvb-core/dmxdev.c:1246 __fput+0x3ff/0xb70 fs/file_table.c:464 task_work_run+0x14e/0x250 kernel/task_work.c:227 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0xad8/0x2d70 kernel/exit.c:938 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087 __do_sys_exit_group kernel/exit.c:1098 [inline] __se_sys_exit_group kernel/exit.c:1096 [inline] __x64_sys_exit_group+0x3e/0x50 kernel/exit.c:1096 x64_sys_call+0x151f/0x1720 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f871d58d169 Code: Unable to access opcode bytes at 0x7f871d58d13f. RSP: 002b:00007fff4b19a788 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f871d58d169 RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007fff4b19a7ec R08: 0000000b4b19a87f R09: 00000000000927c0 R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000003 R13: 00000000000927c0 R14: 000000000001d553 R15: 00007fff4b19a840 </TASK>
Allocated by task 6059: kasan_save_stack+0x33/0x60 mm/kasan/common.c:47 kasan_save_track+0x14/0x30 mm/kasan/common.c:68 poison_kmalloc_redzone mm/kasan/common.c:377 [inline] __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394 kmalloc_noprof include/linux/slab.h:901 [inline] kzalloc_noprof include/linux/slab.h:1037 [inline] vidtv_psi_pat_table_init drivers/media/test-drivers/vidtv/vidtv_psi.c:970 vidtv_channel_si_init drivers/media/test-drivers/vidtv/vidtv_channel.c:423 vidtv_mux_init drivers/media/test-drivers/vidtv/vidtv_mux.c:519 vidtv_start_streaming drivers/media/test-drivers/vidtv/vidtv_bridge.c:194 vidtv_start_feed drivers/media/test-drivers/vidtv/vidtv_bridge.c:239 dmx_section_feed_start_filtering drivers/media/dvb-core/dvb_demux.c:973 dvb_dmxdev_feed_start drivers/media/dvb-core/dmxdev.c:508 [inline] dvb_dmxdev_feed_restart.isra.0 drivers/media/dvb-core/dmxdev.c:537 dvb_dmxdev_filter_stop+0x2b4/0x3a0 drivers/media/dvb-core/dmxdev.c:564 dvb_dmxdev_filter_free drivers/media/dvb-core/dmxdev.c:840 [inline] dvb_demux_release+0x92/0x550 drivers/media/dvb-core/dmxdev.c:1246 __fput+0x3ff/0xb70 fs/file_tabl ---truncated---
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 7, 2025 | Jul 4, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | Jul 4, 2025 |
| Suse | — | Upgrade dtb-alteraUpgrade dtb-lgUpgrade dtb-qcomUpgrade dtb-allwinnerUpgrade kernel-rt_debug-develUpgrade dtb-hisiliconUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-symsUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-develUpgrade dlm-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade dtb-exynosUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade kernel-default-baseUpgrade kernel-devel-rtUpgrade dtb-mediatekUpgrade kernel-source-azureUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade dtb-renesasUpgrade kernel-rt-develUpgrade kernel-default-vdsoUpgrade dtb-armUpgrade kernel-develUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-debugUpgrade gfs2-kmp-64kbUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade dtb-marvellUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-docsUpgrade kernel-default-livepatchUpgrade kernel-default-extraUpgrade kernel-docs-htmlUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade dtb-amlogicUpgrade kernel-source-rtUpgrade dtb-amazonUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-defaultUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade dtb-appleUpgrade kernel-rtUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-rt_debug-vdsoUpgrade dtb-broadcomUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-default-develUpgrade kernel-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-devel-azureUpgrade dtb-freescaleUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-debug-vdsoUpgrade kernel-syms-azureUpgrade kernel-rt_debugUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade dtb-amdUpgrade dlm-kmp-azureUpgrade kselftests-kmp-rt | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-64k-6.14Upgrade linux-image-5.15.0-156-fipsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-88-fipsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-6.14Upgrade linux-image-6.8.0-1044-gcp-fipsUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-ibm-classicUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-88-lowlatencyUpgrade linux-image-aws-64k-6.14Upgrade linux-image-gke-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-6.8.0-1043-aws-fipsUpgrade linux-image-6.8.0-88-genericUpgrade linux-image-oem-6.14Upgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-ibm-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-gkeUpgrade linux-image-oem-24.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-oem-24.04aUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1044-gcp-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1015-awsUpgrade linux-image-6.8.0-1044-gcpUpgrade linux-image-intelUpgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1040-oracle-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-nvidia-6.14Upgrade linux-image-intel-iotgUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1040-gke-64kUpgrade linux-image-fips-6.8Upgrade linux-image-ibmUpgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1092-awsUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-6.8.0-1041-ibmUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-gcpUpgrade linux-image-xilinxUpgrade linux-image-fips-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-oem-24.04cUpgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-6.8.0-1043-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1044-azureUpgrade linux-image-azure-cvmUpgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-156-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-88-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1029-azure-nvidiaUpgrade linux-image-virtualUpgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-awsUpgrade linux-image-6.8.0-2034-raspi-realtimeUpgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-realtime-6.14Upgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-6.8.0-1020-xilinxUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1040-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-88-generic-64kUpgrade linux-image-6.8.0-1043-nvidiaUpgrade linux-image-raspi-6.14Upgrade linux-image-raspi-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-generic-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1043-nvidia-lowlatencyUpgrade linux-image-6.8.0-1043-nvidia-64kUpgrade linux-image-6.8.0-1043-aws-64kUpgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-6.14Upgrade linux-image-azure-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1044-azure-fipsUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-virtual-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.14.0-1014-oemUpgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-6.8.1-1038-realtimeUpgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-oracle-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-gke-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1040-gkeUpgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-raspiUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-6.14Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-azure-nvidiaUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azureUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-gcp-6.14Upgrade linux-image-genericUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.8.0-1043-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1043-awsUpgrade linux-image-6.8.0-1027-gkeopUpgrade linux-image-6.14.0-34-genericUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-gke-6.8Upgrade linux-image-azure-nvidia-lts-24.04 | Jul 9, 2025 | Jul 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Jul 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub