Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: sched: actconnmark: Initialize struct tcife to prevent kernel leaks. In tcfconnmarkdump, the variable ‘opt’ was partially initialized using a specified initializer. As a result, the padding bytes remained uninitialized. The...

CVE-2026-72347

A flaw was found in the Linux kernel's netfilter xtconnmark module. This vulnerability occurs because the CONNMARK target, specifically revision 2, accepts user-controlled shift parameters without proper validation. An attacker with the ability to create netfilter rules could provide a shiftbits...

CVE-2026-72347

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtconnmark: reject invalid shift parameters Revision 2 of the CONNMARK target accepts user-controlled shift parameters and applies them to 32-bit mark values in connmarktgshift. A shiftbits value of 32 or more triggers...

CVE-2026-72347

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtconnmark: reject invalid shift parameters Revision 2 of the CONNMARK target accepts user-controlled shift parameters and applies them to 32-bit mark values in connmarktgshift. A shiftbits value of 32 or more triggers...

PT-2026-72535

In the Linux kernel, the following vulnerability has been resolved: netfilter: xt connmark: reject invalid shift parameters Revision 2 of the CONNMARK target accepts user-controlled shift parameters and applies them to 32-bit mark values in connmark tg shift. A shift bits value of 32 or more...

The vulnerability of the tcf_connmark_dump() function in the net/sched/act_connmark.c module of the network/sched subsystem of the Linux operating system allows a attacker to access protected information or cause service interruptions.

The vulnerability of the tcfconnmarkdump function in the net/sched/actconnmark.c module of the net/sched/actconnmark subsystem of the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to access protected information or...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: reject duplicate device on updates CVE-2025-38678 In the Linux kernel, the following vulnerability has been resolved: mm/ksm: fix flag-dropping behavior in ksmmadvise CVE-2025-40040 In the Lin...

SUSE CVE-2025-40279

In the Linux kernel, the following vulnerability has been resolved: net: sched: actconnmark: initialize struct tcife to fix kernel leak In tcfconnmarkdump, the variable 'opt' was partially initialized using a designatied initializer. While the padding bytes are reamined uninitialized. nlaput copi...

Linux Distros Unpatched Vulnerability : CVE-2025-40279

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: sched: actconnmark: initialize struct tcife to fix kernel leak In tcfconnmarkdump, the variable 'opt' was partially initialized using a designatied...

CVE-2025-40279

In the Linux kernel, the following vulnerability has been resolved: net: sched: actconnmark: initialize struct tcife to fix kernel leak In tcfconnmarkdump, the variable 'opt' was partially initialized using a designatied initializer. While the padding bytes are reamined uninitialized. nlaput copi...

EUVD-2025-201576

In the Linux kernel, the following vulnerability has been resolved: net: sched: actconnmark: initialize struct tcife to fix kernel leak In tcfconnmarkdump, the variable 'opt' was partially initialized using a designatied initializer. While the padding bytes are reamined uninitialized. nlaput copi...

CVE-2025-40279

In the Linux kernel, the following vulnerability has been resolved: net: sched: actconnmark: initialize struct tcife to fix kernel leak In tcfconnmarkdump, the variable 'opt' was partially initialized using a designatied initializer. While the padding bytes are reamined uninitialized. nlaput copi...

DEBIAN-CVE-2025-40279

In the Linux kernel, the following vulnerability has been resolved: net: sched: actconnmark: initialize struct tcife to fix kernel leak In tcfconnmarkdump, the variable 'opt' was partially initialized using a designatied initializer. While the padding bytes are reamined uninitialized. nlaput copi...

CVE-2025-40279

In the Linux kernel, the following vulnerability has been resolved: net: sched: actconnmark: initialize struct tcife to fix kernel leak In tcfconnmarkdump, the variable 'opt' was partially initialized using a designatied initializer. While the padding bytes are reamined uninitialized. nlaput copi...

CVE-2025-40279

CVE-2025-40279 : Linux kernel issue in net: sched: act_connmark. The patch fixes a kernel information leak by correcting initialization of a tc_ife-like structure in tcf_connmark_dump() – the code previously partially initialized an opt struct via designated initializers, leaving padding uninitia...

CVE-2025-40279 net: sched: act_connmark: initialize struct tc_ife to fix kernel leak

In the Linux kernel, the following vulnerability has been resolved: net: sched: actconnmark: initialize struct tcife to fix kernel leak In tcfconnmarkdump, the variable 'opt' was partially initialized using a designatied initializer. While the padding bytes are reamined uninitialized. nlaput copi...

CVE-2025-40279 net: sched: act_connmark: initialize struct tc_ife to fix kernel leak

In the Linux kernel, the following vulnerability has been resolved: net: sched: actconnmark: initialize struct tcife to fix kernel leak In tcfconnmarkdump, the variable 'opt' was partially initialized using a designatied initializer. While the padding bytes are reamined uninitialized. nlaput copi...

PT-2025-49380

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel information leak exists in the networking subsystem, specifically within the tcf connmark dump function. The tc ife structure was not fully initialized, leading to uninitialized...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the net sched actconnmark uninitialized structure, which could lead to the disclosure of kernel information...