Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the lack of netlink policy validation, potentially leading to out-of-bound access...

CVE-2026-31407

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: add missing netlink policy validations Hyunwoo Kim reports out-of-bounds access in sctp and ctnetlink. These attributes are used by the kernel without any validation. Extend the netlink policies accordingly...

kernel: net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing

In the Linux kernel, the following vulnerability has been resolved: net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing TCAMQPRIOTCENTRYINDEX is validated using NLAPOLICYMAXNLAU32, TCQOPTMAXQUEUE, which allows the value TCQOPTMAXQUEUE 16. This leads to a 4-byte out-of-bounds stac...

Azure Linux 3.0 Security Update: kernel (CVE-2025-22055)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22055 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: fix geneveopt length integer overfl...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004066)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004066 advisory. An issue was discovered in the Linux kernel before 5.8. lib/nlattr.c allows attackers to cause a denial of service unbounded recursion via a nested Netlink policy wi...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004521)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004521 advisory. An issue was discovered in the Linux kernel before 5.8. lib/nlattr.c allows attackers to cause a denial of service unbounded recursion via a nested Netlink policy wi...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002965)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002965 advisory. The XFRM dump policy implementation in net/xfrm/xfrmuser.c in the Linux kernel before 4.13.11 allows local users to gain privileges or cause a denial of service...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992792)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992792 advisory. In the Linux kernel, the following vulnerability has been resolved: net: genl: fix error path memory leak in policy dumping If construction of the array of policies...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992888)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992888 advisory. In the Linux kernel, the following vulnerability has been resolved: net: fix geneveopt length integer overflow struct geneveopt uses 5 bit length for each single...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992444)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992444 advisory. In the Linux kernel, the following vulnerability has been resolved: net: genl: fix error path memory leak in policy dumping If construction of the array of policies...

Linux Distros Unpatched Vulnerability : CVE-2023-54031

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vdpa: Add queue index attr to vdpanlpolicy for nlattr length check The vdpanlpolicy structure is used to validate the nlattr when parsing the incoming nlmsg. It...

PT-2025-52988

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the vdpa Virtual Data Path Acceleration component. The vdpa nl policy structure, used for validating attributes during network message nlmsg...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989355)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989355 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: actmpls: Fix warning during failed attribute validation The 'TCAMPLSLABEL' attribute i...

Linux Distros Unpatched Vulnerability : CVE-2023-53516

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: macvlan: add forgotten nlapolicy for IFLAMACVLANBCCUTOFF The previous commit 954d1fa1ac93...

EUVD-2020-24133

Malware in sbrugna...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the lack of nlapolicy validation of the vdpa functional attribute, which could lead to out-of-bounds reads...

CVE-2023-53543

Technical details for CVE-2023-53543 are not publicly provided in the supplied documents; monitor SUSE/kernel advisories for updates.

EUVD-2025-31879

Malicious code in bioql PyPI...

SUSE CVE-2023-53516

In the Linux kernel, the following vulnerability has been resolved: macvlan: add forgotten nlapolicy for IFLAMACVLANBCCUTOFF The previous commit 954d1fa1ac93 "macvlan: Add netlink attribute for broadcast cutoff" added one additional attribute named IFLAMACVLANBCCUTOFF to allow broadcast cutfoff...

CVE-2023-53516

In the Linux kernel, the following vulnerability has been resolved: macvlan: add forgotten nlapolicy for IFLAMACVLANBCCUTOFF The previous commit 954d1fa1ac93 "macvlan: Add netlink attribute for broadcast cutoff" added one additional attribute named IFLAMACVLANBCCUTOFF to allow broadcast cutfoff...