CVE-2025-40050 bpf: Skip scalar adjustment for BPF_NEG if dst is a pointer

In the Linux kernel, the following vulnerability has been resolved: bpf: Skip scalar adjustment for BPFNEG if dst is a pointer In checkaluop, the verifier currently calls checkregarg and adjustscalarminmaxvals unconditionally for BPFNEG operations. However, if the destination register holds a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987576)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987576 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Add oversize check before call kvcalloc Commit 7661809d493b mm: don't allow oversized kvmall...

CVE-2025-39990

In the Linux kernel, the following vulnerability has been resolved: bpf: Check the helper function is valid in gethelperproto kernel test robot reported verifier bug 1 where the helper func pointer could be NULL due to disabled config option. As Alexei suggested we could check on that in...

CVE-2025-39990

In the Linux kernel, the following vulnerability has been resolved: bpf: Check the helper function is valid in gethelperproto kernel test robot reported verifier bug 1 where the helper func pointer could be NULL due to disabled config option. As Alexei suggested we could check on that in...

PT-2025-42264

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the BPF Berkeley Packet Filter subsystem related to helper function validation within the get helper proto function. A kernel test robot identified a...

EUVD-2021-20301

Malware in sbrugna...

EUVD-2018-10173

Malware in sbrugna...

EUVD-2021-26770

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414672)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414672 advisory. An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out- of-bounds speculation on pointer arithmetic, leading to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414518)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414518 advisory. The checkaluop function in kernel/bpf/verifier.c in the Linux kernel through v5.16-rc5 did not properly update bounds while handling the mov32 instruction, which...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414610)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414610 advisory. kernel/bpf/verifier.c in the Linux kernel through 5.12.1 performs undesirable speculative loads, leading to disclosure of stack content via side-channel attacks, aka...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414598)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414598 advisory. The bpf verifier in the Linux kernel did not properly handle mod32 destination register truncation when the source register was known to be 0. A local attacker with...

EUVD-2022-54990

Malicious code in bioql PyPI...

EUVD-2025-12886

Malicious code in bioql PyPI...

EUVD-2022-55243

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2025-39748

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Forget ranges when refining tnum after JSET Syzbot reported a kernel warning due to a range invariant violation on the following BPF program. 0: call...

AZL-67208 CVE-2025-39748 affecting package kernel for versions less than 6.6.130.1-3

In the Linux kernel, the following vulnerability has been resolved: bpf: Forget ranges when refining tnum after JSET Syzbot reported a kernel warning due to a range invariant violation on the following BPF program. 0: call bpfgetnetnscookie 1: if r0 == 0 goto 2: if r0 & Oxffffffff goto The issue ...

DEBIAN-CVE-2025-39748

In the Linux kernel, the following vulnerability has been resolved: bpf: Forget ranges when refining tnum after JSET Syzbot reported a kernel warning due to a range invariant violation on the following BPF program. 0: call bpfgetnetnscookie 1: if r0 == 0 goto 2: if r0 & Oxffffffff goto The issue ...

AZL-70819 CVE-2025-39748 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Forget ranges when refining tnum after JSET Syzbot reported a kernel warning due to a range invariant violation on the following BPF program. 0: call bpfgetnetnscookie 1: if r0 == 0 goto 2: if r0 & Oxffffffff goto The issue ...

CVE-2025-39748

In the Linux kernel, the following vulnerability has been resolved: bpf: Forget ranges when refining tnum after JSET Syzbot reported a kernel warning due to a range invariant violation on the following BPF program. 0: call bpfgetnetnscookie 1: if r0 == 0 goto 2: if r0 & Oxffffffff goto The issue ...