Linux Distros Unpatched Vulnerability : CVE-2025-38109

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix ECVF vports unload on shutdown flow Fix shutdown flow UAF when a virtual...

SUSE CVE-2025-38109

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix ECVF vports unload on shutdown flow Fix shutdown flow UAF when a virtual function is created on the embedded chip ECVF of a BlueField device. In such case the vport acl ingress table is not properly destroyed. ECVF...

AZL-64517 CVE-2025-38109 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix ECVF vports unload on shutdown flow Fix shutdown flow UAF when a virtual function is created on the embedded chip ECVF of a BlueField device. In such case the vport acl ingress table is not properly destroyed. ECVF...

DEBIAN-CVE-2025-38109

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix ECVF vports unload on shutdown flow Fix shutdown flow UAF when a virtual function is created on the embedded chip ECVF of a BlueField device. In such case the vport acl ingress table is not properly destroyed. ECVF...

UBUNTU-CVE-2025-38109

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix ECVF vports unload on shutdown flow Fix shutdown flow UAF when a virtual function is created on the embedded chip ECVF of a BlueField device. In such case the vport acl ingress table is not properly destroyed. ECVF...

CVE-2025-38109 net/mlx5: Fix ECVF vports unload on shutdown flow

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix ECVF vports unload on shutdown flow Fix shutdown flow UAF when a virtual function is created on the embedded chip ECVF of a BlueField device. In such case the vport acl ingress table is not properly destroyed. ECVF...

CVE-2025-38109 net/mlx5: Fix ECVF vports unload on shutdown flow

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix ECVF vports unload on shutdown flow Fix shutdown flow UAF when a virtual function is created on the embedded chip ECVF of a BlueField device. In such case the vport acl ingress table is not properly destroyed. ECVF...

CVE-2025-38109

CVE-2025-38109 — Linux kernel : Affected component is the mlx5/eswitch path used for ECVF vports on BlueField devices. The issue is a use-after-free (UAF) during shutdown when a virtual function is created on the embedded BlueField chip, causing the vport ACL ingress table to not be properly dest...

CVE-2025-38109 net/mlx5: Fix ECVF vports unload on shutdown flow

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix ECVF vports unload on shutdown flow Fix shutdown flow UAF when a virtual function is created on the embedded chip ECVF of a BlueField device. In such case the vport acl ingress table is not properly destroyed. ECVF...

PT-2025-27695

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free vulnerability has been identified in the Linux kernel, specifically in the net/mlx5 component. This issue occurs when a virtual function is created on the embedded chi...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: net/mlx5: Fixed ECVF vports unload on shutdown flow. Fixed the issue where the UAF occurs during shutdown flow when a virtual function is created on the embedded chip ECVF of a BlueField device. In such cases, the vport acl...

The vulnerability of the data processing driver (drivers/edac/bluefield_edac.c) in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the data processing driver drivers/edac/bluefieldedac.c in Linux operating systems is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

kernel: EDAC/bluefield: Fix potential integer overflow

In the Linux kernel, the following vulnerability has been resolved: EDAC/bluefield: Fix potential integer overflow The 64-bit argument for the "get DIMM info" SMC call consists of memctrlidx left-shifted 16 bits and OR-ed with DIMM index. With memctrlidx defined as 32-bits wide the left-shift...

CVE-2025-37866

In the Linux kernel, the following vulnerability has been resolved: mlxbf-bootctl: use sysfsemitat in securebootfusestateshow A warning is seen when running the latest kernel on a BlueField SOC: 251.512704 ------------ cut here ------------ 251.512711 invalid sysfsemit: buf:0000000003aa32ae...

UBUNTU-CVE-2025-37866

In the Linux kernel, the following vulnerability has been resolved: mlxbf-bootctl: use sysfsemitat in securebootfusestateshow A warning is seen when running the latest kernel on a BlueField SOC: 251.512704 ------------ cut here ------------ 251.512711 invalid sysfsemit: buf:0000000003aa32ae...

CVE-2025-37866

CVE-2025-37866: Linux kernel vulnerability in mlxbf-bootctl where sysfs_emit() is used with a non-page-aligned buffer in secure_boot_fuse_state_show(), triggering a warning on BlueField SOCs. The driver should use sysfs_emit_at() to support non-zero offsets; the issue is mitigated by the patch th...

CVE-2025-37866 mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show()

In the Linux kernel, the following vulnerability has been resolved: mlxbf-bootctl: use sysfsemitat in securebootfusestateshow A warning is seen when running the latest kernel on a BlueField SOC: 251.512704 ------------ cut here ------------ 251.512711 invalid sysfsemit: buf:0000000003aa32ae...

CVE-2025-37866 mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show()

In the Linux kernel, the following vulnerability has been resolved: mlxbf-bootctl: use sysfsemitat in securebootfusestateshow A warning is seen when running the latest kernel on a BlueField SOC: 251.512704 ------------ cut here ------------ 251.512711 invalid sysfsemit: buf:0000000003aa32ae...

PT-2025-20516 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A warning occurs when running the latest kernel on a BlueField SOC due to the mlxbf-bootctl driver invoking sysfs emit with a buffer pointer that is not aligned to the start of the pag...

CVE-2023-0881

Running DDoS on tcp port 22 will trigger a kernel crash. This issue is introduced by the backport of a commit regarding nftlookup without the subsequent fixes that were introduced after this commit. The resolution of this CVE introduces those commits to the linux-bluefield package...