Publish Advisories

GHSA-r2qx-8vq2-jc32
GHSA-wqc8-4945-8xxr

Author: advisory-database[bot]

advisories/unreviewed/2025/11/GHSA-r2qx-8vq2-jc32/GHSA-r2qx-8vq2-jc32.json

@@ -0,0 +1,57 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-r2qx-8vq2-jc32",
+  "modified": "2025-11-09T06:30:24Z",
+  "published": "2025-11-09T06:30:24Z",
+  "aliases": [
+    "CVE-2025-40109"
+  ],
+  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: rng - Ensure set_ent is always present\n\nEnsure that set_ent is always set since only drbg provides it.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-40109"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/15d6f42da1bb527629d8e1067b1302d58dec9166"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/17acbcd44fe8dc17dc1072375e76df2d52da6ac8"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/915cb75983bc5e8b80f8a2f25a4af463f7b18c14"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/ab172f4f42626549b02bada05f09e3f2b0cc26ec"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/bd903c25b652c331831226cdf56c8179d18e43f4"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/c0d36727bf39bb16ef0a67ed608e279535ebf0da"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/c5c703b50e91dd4748769f4c5ab50d9ad60be370"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/e247a7d138e514a40edda7c4d72c8bd49bb2cad3"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-11-09T05:15:46Z"
+  }
+}

advisories/unreviewed/2025/11/GHSA-wqc8-4945-8xxr/GHSA-wqc8-4945-8xxr.json

@@ -0,0 +1,33 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-wqc8-4945-8xxr",
+  "modified": "2025-11-09T06:30:24Z",
+  "published": "2025-11-09T06:30:24Z",
+  "aliases": [
+    "CVE-2025-40108"
+  ],
+  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nserial: qcom-geni: Fix blocked task\n\nRevert commit 1afa70632c39 (\"serial: qcom-geni: Enable PM runtime for\nserial driver\") and its dependent commit 86fa39dd6fb7 (\"serial:\nqcom-geni: Enable Serial on SA8255p Qualcomm platforms\") because the\nfirst one causes regression - hang task on Qualcomm RB1 board (QRB2210)\nand unable to use serial at all during normal boot:\n\n  INFO: task kworker/u16:0:12 blocked for more than 42 seconds.\n        Not tainted 6.17.0-rc1-00004-g53e760d89498 #9\n  \"echo 0 > /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\n  task:kworker/u16:0   state:D stack:0     pid:12    tgid:12    ppid:2      task_flags:0x4208060 flags:0x00000010\n  Workqueue: async async_run_entry_fn\n  Call trace:\n   __switch_to+0xe8/0x1a0 (T)\n   __schedule+0x290/0x7c0\n   schedule+0x34/0x118\n   rpm_resume+0x14c/0x66c\n   rpm_resume+0x2a4/0x66c\n   rpm_resume+0x2a4/0x66c\n   rpm_resume+0x2a4/0x66c\n   __pm_runtime_resume+0x50/0x9c\n   __driver_probe_device+0x58/0x120\n   driver_probe_device+0x3c/0x154\n   __driver_attach_async_helper+0x4c/0xc0\n   async_run_entry_fn+0x34/0xe0\n   process_one_work+0x148/0x290\n   worker_thread+0x2c4/0x3e0\n   kthread+0x118/0x1c0\n   ret_from_fork+0x10/0x20\n\nThe issue was reported on 12th of August and was ignored by author of\ncommits introducing issue for two weeks.  Only after complaining author\nproduced a fix which did not work, so if original commits cannot be\nreliably fixed for 5 weeks, they obviously are buggy and need to be\ndropped.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-40108"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/1e810d81769e16637bcd845ba37fbc1eba5d4bd2"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/a699213d4e6ef4286348c6439837990f121e0c03"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-11-09T05:15:35Z"
+  }
+}