CVE-2023-54251 net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.

In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: Limit TCATAPRIOATTRSCHEDCYCLETIME to INTMAX. syzkaller found zero division error 0 in divs64rem called from getcycletimeelapsed, where sched-cycletime is the divisor. We have tests in parsetaprioschedule so tha...

CVE-2023-54236

CVE-2023-54236 is a Linux kernel vulnerability related to the net_failover path, where the transmit queue (txq) count could exceed the number of available TX queues, leading to a warning such as “eth0 selects TX queue 18, but real number of TX queues is 16.” The provided documents confirm that th...

CVE-2023-54236 net/net_failover: fix txq exceeding warning

In the Linux kernel, the following vulnerability has been resolved: net/netfailover: fix txq exceeding warning The failover txq is inited as 16 queues. when a packet is transmitted from the failover device firstly, the failover device will select the queue which is returned from the primary devic...

CVE-2023-54231 net: libwx: fix memory leak in wx_setup_rx_resources

In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix memory leak in wxsetuprxresources When wxallocpagepool failed in wxsetuprxresources, it doesn't release DMA buffer. Add dmafreecoherent in the error path to release the DMA buffer...

CVE-2023-54206 net/sched: flower: fix filter idr initialization

In the Linux kernel, the following vulnerability has been resolved: net/sched: flower: fix filter idr initialization The cited commit moved idr initialization too early in flchange which allows concurrent users to access the filter that is still being initialized and is in inconsistent state,...

CVE-2023-54206

In the Linux kernel, the following vulnerability has been resolved: net/sched: flower: fix filter idr initialization The cited commit moved idr initialization too early in flchange which allows concurrent users to access the filter that is still being initialized and is in inconsistent state,...

CVE-2023-54206 net/sched: flower: fix filter idr initialization

In the Linux kernel, the following vulnerability has been resolved: net/sched: flower: fix filter idr initialization The cited commit moved idr initialization too early in flchange which allows concurrent users to access the filter that is still being initialized and is in inconsistent state,...

CVE-2023-54200 netfilter: nf_tables: always release netdev hooks from notifier

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: always release netdev hooks from notifier This reverts "netfilter: nftables: skip netdev events generated on netns removal". The problem is that when a veth device is released, the veth release callback will...

CVE-2023-54193

CVE-2023-54193 affects the Linux kernel net/sched cls_api flow: when tcf_block_bind() errors, flow_block_cb objects were still in the driver_list, causing use-after-free. The fix removes flow_block_cb entries from driver_list before deallocation (the patch references show the changes). Affected: ...

CVE-2023-54193 net/sched: cls_api: remove block_cb from driver_list before freeing

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: remove blockcb from driverlist before freeing Error handler of tcfblockbind frees the whole bo-cblist on error. However, by that time the flowblockcb instances are already in the driver list because driver...

CVE-2023-54193

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: remove blockcb from driverlist before freeing Error handler of tcfblockbind frees the whole bo-cblist on error. However, by that time the flowblockcb instances are already in the driver list because driver...

OESA-2025-2886 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3-sva: Fix mm use-after-free We currently call arm64mmcontextput without holding a reference to the mm, which can result in use-after-free. Call...

WordPress Payment Gateway Authorize.Net CIM for WooCommerce plugin <= 2.1.2 - Arbitrary Content Deletion vulnerability

Arbitrary Content Deletion vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Payment Gateway Authorize.Net CIM for WooCommerce versions = 2.1.2...

PT-2025-54022

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the net/sched subsystem related to the handling of traffic control blocks. Specifically, the error handler in tcf block bind frees the cb list without...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992683)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992683 advisory. In the Linux kernel, the following vulnerability has been resolved: net/iucv: Fix size of interrupt data iucvirqdata needs to be 4 bytes larger. These bytes are not...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992641)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992641 advisory. In the Linux kernel, the following vulnerability has been resolved: netsched: hfsc: Fix a potential UAF in hfscdequeue too Similarly to the previous patch, we need t...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992335)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992335 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: fix WARNING in ipvsappnetcleanup During the initialization of ipvsappnetinit, if file ipvsa...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992523)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992523 advisory. In the Linux kernel, the following vulnerability has been resolved: net: fec: Better handle pmruntimeget failing in .remove In the unlikely event that pmruntimeget...

PT-2025-54105

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s Network File System daemon nfsd related to the initialization of per-CPU reply cache statistics counters. A previous commit moved the initialization o...

PT-2025-54152

In the Linux kernel, the following vulnerability has been resolved: net: tls: avoid hanging tasks on the tx lock syzbot sent a hung task report and Eric explains that adversarial receiver may keep RWIN at 0 for a long time, so we are not guaranteed to make forward progress. Thread which took tx...