Msrc Azl3 Kernel 6.6.119.3-1 On Azure Linux 3.0 vulnerabilities

CVE-2025-68206 [CRITICAL] netfilter: nft_ct: add seqadj extension for natted connections netfilter: nft_ct: add seqadj extension for natted connections Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2025-68188 [HIGH] tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2025-68255 [HIGH] staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2025-68174 [HIGH] amd/amdkfd: enhance kfd process check in switch partition amd/amdkfd: enhance kfd process check in switch partition Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2025-68380 [HIGH] wifi: ath11k: fix peer HE MCS assignment wifi: ath11k: fix peer HE MCS assignment Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2025-68196 [HIGH] drm/amd/display: Cache streams targeting link when performing LT automation drm/amd/display: Cache streams targeting link when performing LT automation Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2025-68729 [HIGH] wifi: ath12k: Fix MSDU buffer types handling in RX error path wifi: ath12k: Fix MSDU buffer types handling in RX error path Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2025-68254 [HIGH] staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2025-68315 [HIGH] f2fs: fix to detect potential corrupted nid in free_nid_list f2fs: fix to detect potential corrupted nid in free_nid_list Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2025-68265 [HIGH] nvme: fix admin request_queue lifetime nvme: fix admin request_queue lifetime Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2025-68190 [HIGH] drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2025-68256 [HIGH] staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2025-68346 [HIGH] ALSA: dice: fix buffer overflow in detect_stream_formats() ALSA: dice: fix buffer overflow in detect_stream_formats() Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2025-68304 [HIGH] Bluetooth: hci_core: lookup hci_conn on RX path on protocol side Bluetooth: hci_core: lookup hci_conn on RX path on protocol side Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2025-68367 [HIGH] macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2025-68266 [HIGH] bfs: Reconstruct file type when loading from disk bfs: Reconstruct file type when loading from disk Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2025-68261 [HIGH] ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2025-68311 [HIGH] tty: serial: ip22zilog: Use platform device for probing tty: serial: ip22zilog: Use platform device for probing Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2025-68372 [MEDIUM] nbd: defer config put in recv_work nbd: defer config put in recv_work Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2025-68724 [MEDIUM] crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade