Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001746)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001746 advisory. net/netfilter/nftablesapi.c in the Linux kernel through 5.18.1 allows a local user able to create user/net namespaces to escalate privileges to root because an...

CVE-2025-68768

This CVE (CVE-2025-68768) affects the Linux kernel and is documented as a fix for a fragmentation-related deadlock: the code path in inet: frags: flush pending skbs in fqdir_pre_exit() flushes fragment queue SKBs to release conntrack references before nf_conntrack_cleanup_net_list() runs. The roo...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: reject duplicate device on updates CVE-2025-38678 In the Linux kernel, the following vulnerability has been resolved: mm/ksm: fix flag-dropping behavior in ksmmadvise CVE-2025-40040 In the Lin...

PT-2026-27757

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where a flowtable is not properly released after an error, potentially leading to a use-after-free condition. This can occur when unregistering hooks...

PT-2026-26577

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter nf tables component where set-nelems is unconditionally incremented before insertion. If the set is full, a new element is published and subsequently...

PT-2026-27750

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the netfilter subsystem, specifically in the nf tables component, related to set cloning during flushing operations. A Syzbot, utilizing fault...

SUSE CVE-2023-54200

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: always release netdev hooks from notifier This reverts "netfilter: nftables: skip netdev events generated on netns removal". The problem is that when a veth device is released, the veth release callback will...

Linux Distros Unpatched Vulnerability : CVE-2023-54200

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nftables: always release netdev hooks from notifier This reverts netfilter: nftables: skip netdev events generated on netns removal. The problem is...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993247)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993247 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: do not allow SETID to refer to another table When doing lookups for sets on...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992785)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992785 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: double hook unregistration in netns path nftreleasehooks is called from...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993171)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993171 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: adapt set backend to use GC transaction API Use the GC transaction API to...

EUVD-2023-60441

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: always release netdev hooks from notifier This reverts "netfilter: nftables: skip netdev events generated on netns removal". The problem is that when a veth device is released, the veth release callback will...

CVE-2023-54200

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: always release netdev hooks from notifier This reverts "netfilter: nftables: skip netdev events generated on netns removal". The problem is that when a veth device is released, the veth release callback will...

UBUNTU-CVE-2023-54200

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: always release netdev hooks from notifier This reverts "netfilter: nftables: skip netdev events generated on netns removal". The problem is that when a veth device is released, the veth release callback will...

CVE-2023-54200

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: always release netdev hooks from notifier This reverts "netfilter: nftables: skip netdev events generated on netns removal". The problem is that when a veth device is released, the veth release callback will...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992689)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992689 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: double hook unregistration in netns path nftreleasehooks is called from...

CVE-2023-54035

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fix underflow in chain reference counter Set element addition error path decrements reference counter on chains twice: once on element release and again via nftdatarelease. Then, d6b478666ffa "netfilter:...

CVE-2023-54035

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fix underflow in chain reference counter Set element addition error path decrements reference counter on chains twice: once on element release and again via nftdatarelease. Then, d6b478666ffa "netfilter:...

CVE-2023-54035

The CVE-2023-54035 issue in the Linux kernel was a netfilter nf_tables underflow/incorrect reference counting for chain references during element addition and release, where a stateful object reference count was decremented twice and then corrected by restoring the proper decrement path to be per...

CVE-2023-54035 netfilter: nf_tables: fix underflow in chain reference counter

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fix underflow in chain reference counter Set element addition error path decrements reference counter on chains twice: once on element release and again via nftdatarelease. Then, d6b478666ffa "netfilter:...