[Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
87abd478 by Salvatore Bonaccorso at 2025-12-16T21:24:11+01:00
Merge Linux CVEs from kernel-sec

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -647,29 +647,65 @@ CVE-2025-40359 (In the Linux kernel, the following vulnerability has been resolv
 CVE-2025-40358 (In the Linux kernel, the following vulnerability has been resolved:  r ...)
 	TODO: check
 CVE-2025-40357 (In the Linux kernel, the following vulnerability has been resolved:  n ...)
-	TODO: check
+	- linux 6.17.6-1
+	[trixie] - linux 6.12.57-1
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	[bullseye] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/f584239a9ed25057496bf397c370cc5163dde419 (6.18-rc3)
 CVE-2025-40356 (In the Linux kernel, the following vulnerability has been resolved:  s ...)
-	TODO: check
+	- linux 6.17.6-1
+	[trixie] - linux <not-affected> (Vulnerable code not present)
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	[bullseye] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/ee795e82e10197c070efd380dc9615c73dffad6c (6.18-rc3)
 CVE-2025-40355 (In the Linux kernel, the following vulnerability has been resolved:  s ...)
-	TODO: check
+	- linux 6.17.6-1
+	NOTE: https://git.kernel.org/linus/c7fbb8218b4ad35fec0bd2256d2b9c8d60331f33 (6.18-rc3)
 CVE-2025-40354 (In the Linux kernel, the following vulnerability has been resolved:  d ...)
-	TODO: check
+	- linux 6.17.6-1
+	[trixie] - linux 6.12.57-1
+	NOTE: https://git.kernel.org/linus/bec947cbe9a65783adb475a5fb47980d7b4f4796 (6.18-rc3)
 CVE-2025-40353 (In the Linux kernel, the following vulnerability has been resolved:  a ...)
-	TODO: check
+	- linux 6.17.6-1
+	[trixie] - linux 6.12.57-1
+	NOTE: https://git.kernel.org/linus/b98c94eed4a975e0c80b7e90a649a46967376f58 (6.18-rc3)
 CVE-2025-40352 (In the Linux kernel, the following vulnerability has been resolved:  p ...)
-	TODO: check
+	- linux 6.17.6-1
+	[trixie] - linux <not-affected> (Vulnerable code not present)
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	[bullseye] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/a7b4747d8e0e7871c3d4971cded1dcc9af6af9e9 (6.18-rc3)
 CVE-2025-40351 (In the Linux kernel, the following vulnerability has been resolved:  h ...)
-	TODO: check
+	- linux 6.17.6-1
+	[trixie] - linux 6.12.57-1
+	[bookworm] - linux 6.1.158-1
+	[bullseye] - linux 5.10.247-1
+	NOTE: https://git.kernel.org/linus/9b3d15a758910bb98ba8feb4109d99cc67450ee4 (6.18-rc1)
 CVE-2025-40350 (In the Linux kernel, the following vulnerability has been resolved:  n ...)
-	TODO: check
+	- linux 6.17.6-1
+	[trixie] - linux 6.12.57-1
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	[bullseye] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/87bcef158ac1faca1bd7e0104588e8e2956d10be (6.18-rc3)
 CVE-2025-40349 (In the Linux kernel, the following vulnerability has been resolved:  h ...)
-	TODO: check
+	- linux 6.17.6-1
+	[trixie] - linux 6.12.57-1
+	[bookworm] - linux 6.1.158-1
+	[bullseye] - linux 5.10.247-1
+	NOTE: https://git.kernel.org/linus/738d5a51864ed8d7a68600b8c0c63fe6fe5c4f20 (6.18-rc1)
 CVE-2025-40348 (In the Linux kernel, the following vulnerability has been resolved:  s ...)
-	TODO: check
+	- linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/6ed8bfd24ce1cb31742b09a3eb557cd008533eec (6.18-rc3)
 CVE-2025-40347 (In the Linux kernel, the following vulnerability has been resolved:  n ...)
-	TODO: check
+	- linux 6.17.6-1
+	[trixie] - linux 6.12.57-1
+	NOTE: https://git.kernel.org/linus/50bd33f6b3922a6b760aa30d409cae891cec8fb5 (6.18-rc3)
 CVE-2025-40346 (In the Linux kernel, the following vulnerability has been resolved:  a ...)
-	TODO: check
+	- linux 6.17.6-1
+	[trixie] - linux 6.12.57-1
+	[bookworm] - linux 6.1.158-1
+	[bullseye] - linux 5.10.247-1
+	NOTE: https://git.kernel.org/linus/2eead19334516c8e9927c11b448fbe512b1f18a1 (6.18-rc3)
 CVE-2025-37164 (A remote code execution issue exists in HPE OneView.)
 	NOT-FOR-US: HPE
 CVE-2025-33235 (NVIDIA Resiliency Extension for Linux contains a vulnerability in the  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/87abd478ff10b88f6798f13e964c185b304cdc75

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/87abd478ff10b88f6798f13e964c185b304cdc75
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251216/6c6dbad0/attachment.htm>