In the Linux kernel, the following vulnerability has been resolved:
media: vidtv: Terminating the subsequent process of initialization failure
syzbot reported a slab-use-after-free Read in vidtv_mux_init. [1]
After PSI initialization fails, the si member is accessed again, resulting in this uaf.
After si initialization fails, the subsequent process needs to be exited.
[1] BUG: KASAN: slab-use-after-free in vidtv_mux_pid_ctx_init drivers/media/test-drivers/vidtv/vidtv_mux.c:78 [inline] BUG: KASAN: slab-use-after-free in vidtv_mux_init+0xac2/0xbe0 drivers/media/test-drivers/vidtv/vidtv_mux.c:524 Read of size 8 at addr ffff88802fa42acc by task syz.2.37/6059
CPU: 0 UID: 0 PID: 6059 Comm: syz.2.37 Not tainted 6.14.0-rc5-syzkaller #0 Hardware name: Google Compute Engine, BIOS Google 02/12/2025 Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:408 [inline] print_report+0xc3/0x670 mm/kasan/report.c:521 kasan_report+0xd9/0x110 mm/kasan/report.c:634 vidtv_mux_pid_ctx_init drivers/media/test-drivers/vidtv/vidtv_mux.c:78 vidtv_mux_init+0xac2/0xbe0 drivers/media/test-drivers/vidtv/vidtv_mux.c:524 vidtv_start_streaming drivers/media/test-drivers/vidtv/vidtv_bridge.c:194 vidtv_start_feed drivers/media/test-drivers/vidtv/vidtv_bridge.c:239 dmx_section_feed_start_filtering drivers/media/dvb-core/dvb_demux.c:973 dvb_dmxdev_feed_start drivers/media/dvb-core/dmxdev.c:508 [inline] dvb_dmxdev_feed_restart.isra.0 drivers/media/dvb-core/dmxdev.c:537 dvb_dmxdev_filter_stop+0x2b4/0x3a0 drivers/media/dvb-core/dmxdev.c:564 dvb_dmxdev_filter_free drivers/media/dvb-core/dmxdev.c:840 [inline] dvb_demux_release+0x92/0x550 drivers/media/dvb-core/dmxdev.c:1246 __fput+0x3ff/0xb70 fs/file_table.c:464 task_work_run+0x14e/0x250 kernel/task_work.c:227 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0xad8/0x2d70 kernel/exit.c:938 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087 __do_sys_exit_group kernel/exit.c:1098 [inline] __se_sys_exit_group kernel/exit.c:1096 [inline] __x64_sys_exit_group+0x3e/0x50 kernel/exit.c:1096 x64_sys_call+0x151f/0x1720 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f871d58d169 Code: Unable to access opcode bytes at 0x7f871d58d13f. RSP: 002b:00007fff4b19a788 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f871d58d169 RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007fff4b19a7ec R08: 0000000b4b19a87f R09: 00000000000927c0 R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000003 R13: 00000000000927c0 R14: 000000000001d553 R15: 00007fff4b19a840 </TASK>
Allocated by task 6059: kasan_save_stack+0x33/0x60 mm/kasan/common.c:47 kasan_save_track+0x14/0x30 mm/kasan/common.c:68 poison_kmalloc_redzone mm/kasan/common.c:377 [inline] __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394 kmalloc_noprof include/linux/slab.h:901 [inline] kzalloc_noprof include/linux/slab.h:1037 [inline] vidtv_psi_pat_table_init drivers/media/test-drivers/vidtv/vidtv_psi.c:970 vidtv_channel_si_init drivers/media/test-drivers/vidtv/vidtv_channel.c:423 vidtv_mux_init drivers/media/test-drivers/vidtv/vidtv_mux.c:519 vidtv_start_streaming drivers/media/test-drivers/vidtv/vidtv_bridge.c:194 vidtv_start_feed drivers/media/test-drivers/vidtv/vidtv_bridge.c:239 dmx_section_feed_start_filtering drivers/media/dvb-core/dvb_demux.c:973 dvb_dmxdev_feed_start drivers/media/dvb-core/dmxdev.c:508 [inline] dvb_dmxdev_feed_restart.isra.0 drivers/media/dvb-core/dmxdev.c:537 dvb_dmxdev_filter_stop+0x2b4/0x3a0 drivers/media/dvb-core/dmxdev.c:564 dvb_dmxdev_filter_free drivers/media/dvb-core/dmxdev.c:840 [inline] dvb_demux_release+0x92/0x550 drivers/media/dvb-core/dmxdev.c:1246 __fput+0x3ff/0xb70 fs/file_tabl ---truncated---
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 7, 2025 | Jul 4, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | Jul 4, 2025 |
| Suse | — | Upgrade kernel-rt_debug-develUpgrade dtb-lgUpgrade dtb-qcomUpgrade kernel-source-azureUpgrade ocfs2-kmp-azureUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-azure-optionalUpgrade kernel-default-vdsoUpgrade dtb-caviumUpgrade kernel-develUpgrade kernel-rt-livepatchUpgrade kernel-symsUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade cluster-md-kmp-64kbUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade dtb-armUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade kernel-sourceUpgrade dtb-rockchipUpgrade kernel-devel-rtUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade kernel-default-baseUpgrade kernel-debugUpgrade dtb-exynosUpgrade kernel-64kb-develUpgrade kernel-default-base-rebuildUpgrade dtb-sprdUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-64kb-optionalUpgrade dlm-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-source-vanillaUpgrade kernel-rt-extraUpgrade dtb-amazonUpgrade kernel-azure-develUpgrade dtb-appleUpgrade dtb-amlogicUpgrade kernel-source-rtUpgrade kselftests-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt_debugUpgrade kernel-obs-qaUpgrade kernel-debug-vdsoUpgrade dtb-amdUpgrade dlm-kmp-azureUpgrade dtb-nvidiaUpgrade kselftests-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade dtb-broadcomUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade gfs2-kmp-rtUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-azureUpgrade kernel-default-extraUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kernel-docsUpgrade dtb-socionextUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmallUpgrade kernel-defaultUpgrade dtb-marvellUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-macros | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-azure-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1029-azure-nvidiaUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1043-raspiUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-6.8.0-1044-gcpUpgrade linux-image-virtualUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-6.8.0-1040-oracle-64kUpgrade linux-image-intel-iotgUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-88-lowlatency-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-aws-64k-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-aws-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-azure-nvidia-6.14Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1092-awsUpgrade linux-image-6.8.0-1041-ibmUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-156-fipsUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-oem-24.04cUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-kvmUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-88-genericUpgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-6.8.0-88-fipsUpgrade linux-image-gcpUpgrade linux-image-kvm-5.15Upgrade linux-image-6.8.0-1040-gke-64kUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1043-aws-fipsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-generic-lpaeUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.8.0-1044-azureUpgrade linux-image-6.14.0-1015-awsUpgrade linux-image-6.8.0-1044-gcp-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-6.8.0-1044-gcp-fipsUpgrade linux-image-xilinxUpgrade linux-image-gke-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-fips-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-6.14Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-6.8.0-88-lowlatencyUpgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-aws-64k-6.14Upgrade linux-image-intelUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-raspi-6.14Upgrade linux-image-raspi-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1044-azure-fipsUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-gcp-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-azure-6.14Upgrade linux-image-virtual-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-fipsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04dUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-2034-raspi-realtimeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-6.14.0-1014-oemUpgrade linux-image-generic-6.14Upgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-realtime-6.14Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-6.14.0-34-genericUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-awsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-oracle-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-gke-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1043-nvidia-lowlatency-64kUpgrade linux-image-nvidia-5.15Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.8.0-1043-awsUpgrade linux-image-nvidia-tegraUpgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-5.15Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-azureUpgrade linux-image-6.8.1-1038-realtimeUpgrade linux-image-realtime-5.15Upgrade linux-image-6.8.0-1027-gkeopUpgrade linux-image-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-88-generic-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1040-oracleUpgrade linux-image-6.8.0-1043-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1020-xilinxUpgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1040-gkeUpgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-raspiUpgrade linux-image-ibm-5.15Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1043-nvidia-lowlatencyUpgrade linux-image-6.8.0-1043-nvidia-64kUpgrade linux-image-6.8.0-1043-aws-64k | Jul 9, 2025 | Jul 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Jul 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub