net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null

...

tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().

...

CVE-2025-40149 tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().

In the Linux kernel, the following vulnerability has been resolved: tls: Use skdstget and dstdevrcu in getnetdevforsock. getnetdevforsock is called during setsockopt, so not under RCU. Using skdstgetsk-dev could trigger UAF. Let's use skdstget and dstdevrcu. Note that the only -ndoskgetlowerdev...

kernel: idpf: check error for register_netdev() on init

In the Linux kernel, the following vulnerability has been resolved: idpf: check error for registernetdev on init Current init logic ignores the error code from registernetdev, which will cause WARNON on attempt to unregister it, if there was one, and there is no info for the user that the creatio...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-989997)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989997 advisory. In the Linux kernel, the following vulnerability has been resolved: um: net: Do not use drvdata in release The drvdata is not available in release. Let's just use...

SUSE CVE-2025-12464

A stack-based buffer overflow was found in the QEMU e1000 network device. The code for padding short frames was dropped from individual network devices and moved to the net core code. The issue stems from the device's receive code still being able to process a short frame in loopback mode. This...

CVE-2025-12464

A stack-based buffer overflow was found in the QEMU e1000 network device. The code for padding short frames was dropped from individual network devices and moved to the net core code. The issue stems from the device's receive code still being able to process a short frame in loopback mode. This...

UBUNTU-CVE-2025-12464

A stack-based buffer overflow was found in the QEMU e1000 network device. The code for padding short frames was dropped from individual network devices and moved to the net core code. The issue stems from the device's receive code still being able to process a short frame in loopback mode. This...

CVE-2025-12464

A stack-based buffer overflow was found in the QEMU e1000 network device. The code for padding short frames was dropped from individual network devices and moved to the net core code. The issue stems from the device's receive code still being able to process a short frame in loopback mode. This...

CVE-2025-40064

In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in pnetfindbasendev. syzbot reported use-after-free of netdevice in pnetfindbasendev, which was called during connect. 0 smcpnetfindismresource fetches skdstgetsk-dev and passes down to pnetfindbasendev,...

CVE-2025-40053 net: dlink: handle copy_thresh allocation failure

In the Linux kernel, the following vulnerability has been resolved: net: dlink: handle copythresh allocation failure The driver did not handle failure of netdevallocskbipalign. If the allocation failed, dereferencing skb-protocol could lead to a NULL pointer dereference. This patch tries to...

net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx()

...

EUVD-1999-0505

Malware in sbrugna...

EUVD-2019-8161

Malware in sbrugna...

EUVD-2020-24662

Malware in sbrugna...

EUVD-2020-8059

Malware in sbrugna...

EUVD-2014-7876

Malware in sbrugna...

EUVD-2011-1582

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987020)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987020 advisory. In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939netdevstart: fix UAF for rxkref of j1939priv It will trigger UAF for rxkref of...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986882)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986882 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix handling of wrong devices during bond netevent Current implementation of bond...