[Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e0604f3e by Salvatore Bonaccorso at 2025-11-21T11:56:54+01:00
Merge Linux CVEs from kernel-sec

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,14 @@
+CVE-2025-40211 [ACPI: video: Fix use-after-free in acpi_video_switch_brightness()]
+	- linux 6.17.8-1
+	NOTE: https://git.kernel.org/linus/8f067aa59430266386b83c18b983ca583faa6a11 (6.18-rc4)
+CVE-2025-40210 [Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND"]
+	- linux 6.17.8-1
+	NOTE: https://git.kernel.org/linus/3e7f011c255582d7c914133785bbba1990441713 (6.18-rc4)
+CVE-2025-40209 [btrfs: fix memory leak of qgroup_list in btrfs_add_qgroup_relation]
+	- linux 6.17.8-1
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	[bullseye] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/f260c6aff0b8af236084012d14f9f1bf792ea883 (6.18-rc5)
 CVE-2025-64770 (The affected products allow unauthenticated access to Open Network Vid ...)
 	NOT-FOR-US: iCam365 P201
 CVE-2025-64762 (The AuthKit library for Next.js provides convenient helpers for authen ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e0604f3efa0ba5822536ab41049978bb7ff07017

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e0604f3efa0ba5822536ab41049978bb7ff07017
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251121/e84e30af/attachment.htm>