A flaw was found in the Linux kernel's mlx5e network driver. When handling temporary Security Associations (SAs) for IPsec, the `mlx5e_xfrm_add_state()` function incorrectly decrements a counter without a corresponding increment. This underflow in the eswitch mode block mechanism can lead to a denial of service, potentially disrupting network operations.

A flaw was found in the Linux kernel's pinctrl subsystem for Amlogic A4 devices. A local attacker could trigger a deadlock by accessing the `pinconf-pins` sysfs node. This occurs because the `pinconf_pins_show()` function attempts to acquire a mutex that is already held, leading to a system freeze or unresponsiveness. This vulnerability can result in a denial of service.

A flaw was found in the Linux kernel's ARM Firmware Framework for ARM (FFA). The PARTITION_INFO_GET_REGS function, which handles copying partition descriptors, did not adequately validate the indices provided by the firmware. This oversight could allow the system to process inconsistent data, resulting in an out-of-bounds write. Such an issue can lead to memory corruption, potentially causing system instability or a denial of service.

A flaw was found in the Linux kernel's Network File System Daemon (NFSD). This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by triggering an infinite loop during layout state revocation. The issue occurs because the system repeatedly attempts to revoke a layout state without properly updating its status, leading to the revoker hanging indefinitely.

A flaw was found in the Linux kernel's TCP implementation. An out-of-bounds access vulnerability exists when the `lockdep_sock_is_held()` function is called with a `tcp_timewait_sock` object. This occurs because the `tcp_timewait_sock` object lacks the necessary `sk->sk_lock`, leading to an incorrect lockdep annotation. This issue could potentially lead to system instability or other undefined behavior.

A flaw was found in the Linux kernel. This vulnerability, located in the graphics subsystem (drm/xe/gsc), involves a double-free error during the initialization of a graphics component. An attacker could potentially exploit this memory corruption issue to cause a system crash, leading to a denial of service.

A flaw was found in the Linux kernel's `drm/amdgpu/vce1` component. The vulnerability arises from incorrect calculations of the VCE 1 firmware size and offsets, which could lead to an out-of-bounds access. This issue could potentially allow a local attacker to cause system instability or a denial of service (DoS) by manipulating the firmware handling.

A flaw was found in the Linux kernel's mac80211 Wi-Fi subsystem. This vulnerability arises from incorrect handling of Multi-Link Element (MLE) defragmentation. When a reconf or EPCS (Enhanced Power Save) MLE is present in a non-transmitted profile, the defragmentation routine uses an incorrect pointer. This can lead to a heap data overrun, which is a form of memory corruption that may result in system instability or unexpected behavior.

A flaw was found in the Linux kernel's userfaultfd mechanism. This vulnerability occurs when the userfaultfd_must_wait() and userfaultfd_huge_must_wait() functions incorrectly read Page Table Entries (PTEs) without proper locking during memory operations. This can lead to an undefined state if a page is being swapped or migrated, potentially causing a process to become unresponsive. The most significant consequence is a denial of service (DoS), where a user's application may freeze indefinitely.

A flaw was found in the Linux kernel's Kernel-based Virtual Machine (KVM) for x86 architectures. When the `apic_update_ppr()` function does not find a deliverable interrupt, it fails to recompute the CR8 intercept, leading to a stale Task Priority Register Threshold (TPR_THRESHOLD). This issue can cause a virtual machine (VM) entry failure with a hardware error (0x7) on older platforms or in nested virtualization environments that do not support virtual-interrupt delivery, such as Hyper-V.

A flaw was found in the Linux kernel's Advanced Configuration and Power Interface (ACPI) Collaborative Processor Performance Control (CPPC) module. A field misuse related to register access width can lead to a "shift-out-of-bounds" error. This undefined behavior could potentially cause system instability or a denial of service, which may be triggered by a local user.

A flaw was found in the Linux kernel's ACPI NFIT core component. This vulnerability allows a local attacker to cause a system crash by triggering a specific notification related to Non-Volatile Memory (NVM) before the NVM table is fully set up. This improper handling of NVM notifications can lead to a critical error, resulting in a denial of service for the affected system.

A flaw was found in the Linux kernel's Advanced Configuration and Power Interface (ACPI) Non-Volatile Memory (NVM) Firmware Interface Table (NFIT) core. Improper error handling during the initialization process can leave a dangling pointer. A local attacker could potentially trigger an ACPI Machine Check Exception, leading to a use-after-free vulnerability. This could result in system instability, denial of service, or potentially lead to further compromise of the system.

A flaw was found in the Linux kernel's `rust: block` module. This vulnerability occurs in the `GenDisk` cleanup paths, where temporary disk and request queue resources may not be properly released during error handling or after unregistration. This can lead to a resource leak, potentially causing system instability or a denial of service (DoS) due to resource exhaustion.

A flaw was found in the Linux kernel's Berkeley Packet Filter (BPF) Just-In-Time (JIT) compiler. The BPF JIT allocator reuses memory space, and when new code is written, an indirect jump into the new program can reuse a branch prediction left behind by an old program. This could allow an attacker to bypass security hardening mechanisms, potentially leading to information disclosure or other impacts. The vulnerability is mitigated by flushing indirect branch predictors before reusing JIT memory.

A flaw was found in the Linux kernel. This vulnerability involves an incomplete defense against Spectre-v2, a type of attack that can expose sensitive information by exploiting how modern processors predict future operations. Specifically, when the Berkeley Packet Filter (BPF) Just-In-Time (JIT) compiler was active, the system did not adequately clear the processor's branch prediction buffer during BPF JIT memory reuse. This could potentially allow an attacker to bypass existing Spectre-v2 protections, leading to the unauthorized disclosure of information.

A flaw was found in the Realtek 802.11ac wireless driver (rtw89) within the Linux kernel. A remote attacker, within adjacent network range, could send specially crafted malformed Aggregated MAC Protocol Data Unit (AMPDU) frames. This incorrect handling of frames, particularly during rekey processes, leads to unexpected packet drops. The consequence is a denial of service (DoS), causing affected clients to disconnect from the wireless access point.

A flaw was found in the Linux kernel's USB RNDIS gadget function. A missing length check for the RNDIS header in the `rndis_rm_hdr` function could allow an attacker to read data beyond the intended buffer. This out-of-bounds read vulnerability could lead to information disclosure or potentially a denial of service.

A flaw was found in the Linux kernel's bmc150 accelerometer driver. A malicious or malfunctioning accelerometer device, or an attacker tampering with the I2C/SPI bus, can report an excessively large number of FIFO frames. This improper handling of the frame count leads to a stack out-of-bounds write, which could allow for arbitrary code execution or a denial of service (DoS) on the affected system.

A flaw was found in the Linux kernel's iio subsystem, specifically in the kxsd9 accelerometer driver. A local user could exploit this by requesting a scale with a non-zero integer part through the `kxsd9_write_raw()` function. This action causes a runtime Power Management (PM) usage-counter reference to leak, preventing the device from entering autosuspend mode. The consequence is increased power consumption and a denial of service for the device's power management capabilities.