Msrc Azl3 Kernel 6.6.112.1-2 On Azure Linux 3.0 vulnerabilities

CVE-2025-40262 [CRITICAL] Input: imx_sc_key - fix memory corruption on unload Input: imx_sc_key - fix memory corruption on unload Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2025-40242 [CRITICAL] gfs2: Fix unlikely race in gdlm_put_lock gfs2: Fix unlikely race in gdlm_put_lock Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2025-40244 [CRITICAL] hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent() hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent() Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2025-40251 [MEDIUM] devlink: rate: Unset parent pointer in devl_rate_nodes_destroy devlink: rate: Unset parent pointer in devl_rate_nodes_destroy Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2025-40266 [HIGH] KVM: arm64: Check the untrusted offset in FF-A memory share KVM: arm64: Check the untrusted offset in FF-A memory share Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2025-40343 [HIGH] nvmet-fc: avoid scheduling association deletion twice nvmet-fc: avoid scheduling association deletion twice Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2025-40297 [HIGH] net: bridge: fix use-after-free due to MST port state bypass net: bridge: fix use-after-free due to MST port state bypass Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2025-40292 [HIGH] virtio-net: fix received length check in big packets virtio-net: fix received length check in big packets Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2025-40277 [HIGH] drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2025-40273 [HIGH] NFSD: free copynotify stateid in nfs4_free_ol_stateid() NFSD: free copynotify stateid in nfs4_free_ol_stateid() Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2025-40312 [HIGH] jfs: Verify inode mode when loading from disk jfs: Verify inode mode when loading from disk Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2025-40331 [HIGH] sctp: Prevent TOCTOU out-of-bounds write sctp: Prevent TOCTOU out-of-bounds write Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2025-40283 [HIGH] Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2025-40281 [HIGH] sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2025-40258 [HIGH] mptcp: fix race condition in mptcp_schedule_work() mptcp: fix race condition in mptcp_schedule_work() Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2025-40329 [HIGH] drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2025-40223 [HIGH] most: usb: Fix use-after-free in hdm_disconnect most: usb: Fix use-after-free in hdm_disconnect Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2025-40314 [HIGH] usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2025-40328 [HIGH] smb: client: fix potential UAF in smb2_close_cached_fid() smb: client: fix potential UAF in smb2_close_cached_fid() Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2025-40322 [HIGH] fbdev: bitblit: bound-check glyph index in bit_putcs* fbdev: bitblit: bound-check glyph index in bit_putcs* Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade