35 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-68440
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool...
CVE-2026-68440
A flaw was found in the Linux kernel's txgbe network driver. When reading module EEPROM Electrically Erasable Programmable Read-Only Memory, the txgbereadeepromhostif function can attempt to copy more data than the allocated buffer size if the data length is not a multiple of four. This...
CVE-2026-68440
In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...
CVE-2026-68440
In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...
CVE-2026-68440 net: txgbe: fix heap overflow when reading module EEPROM
In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...
CVE-2026-68440
CVE-2026-68440 affects the Linux kernel txgbe driver: when reading module EEPROM via txgbe_read_eeprom_hostif(), the function copies round_up(length, 4) bytes into an ethtool caller buffer allocated with exactly length bytes. If length is not 4-byte aligned, this causes an out-of-bounds write (he...
CVE-2026-68440 net: txgbe: fix heap overflow when reading module EEPROM
In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...
CVE-2026-68440
In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...
CVE-2026-68440
In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...
EUVD-2026-57048
In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...
PT-2026-70954
In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbe read eeprom hostif always copies round uplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...
CVE-2026-68293
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads The MCIA register can return up to 32 dwords 128 bytes when the device advertises the mcia32dwords capability, but struct mlx5ifcmciaregbits only defines dword0..11,...
EUVD-2025-150385
In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Fix lost EEPROM read timeout error-ETIMEDOUT in lan78xxreadraweeprom Syzbot reported read of uninitialized variable BUG with following call stack. lan78xx 8-1:1.0 unnamed netdevice uninitialized: EEPROM read...
CVE-2025-40189 net: usb: lan78xx: Fix lost EEPROM read timeout error(-ETIMEDOUT) in lan78xx_read_raw_eeprom
In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Fix lost EEPROM read timeout error-ETIMEDOUT in lan78xxreadraweeprom Syzbot reported read of uninitialized variable BUG with following call stack. lan78xx 8-1:1.0 unnamed netdevice uninitialized: EEPROM read...
CVE-2025-40189
The CVE-2025-40189 issue affects the Linux kernel’s LAN78xx USB Ethernet driver (drivers/net/usb/lan78xx.c). A read_raw_eeprom timeout (-ETIMEDOUT) could be obscured in the fallthrough path after attempting to restore LED pin configurations, causing the data buffer to be treated as valid despite ...
Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990145)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990145 advisory. In the Linux kernel, the following vulnerability has been resolved: ath5k: fix OOB in ath5keepromreadpcalinfo5111 The bug was found during fuzzing. Stacktrace locate...
kernel: Fix of 39 CVEs
nfs: fix UAF in direct writes CVE-2024-26958 - NFSD: Fix the behavior of READ near OFFSETMAX CVE-2022-48827 - thermal: core: prevent potential string overflow CVE-2023-52868 - ath5k: fix OOB in ath5keepromreadpcalinfo5111 CVE-2021-47633 - RDMA/cma: Ensure rdmaaddrcancel happens before issuing...
CLSA-2025-1761139764 kernel: Fix of 39 CVEs
nfs: fix UAF in direct writes CVE-2024-26958 - NFSD: Fix the behavior of READ near OFFSETMAX CVE-2022-48827 - thermal: core: prevent potential string overflow CVE-2023-52868 - ath5k: fix OOB in ath5keepromreadpcalinfo5111 CVE-2021-47633 - RDMA/cma: Ensure rdmaaddrcancel happens before issuing...