CVE-2026-20936 Windows NDIS Information Disclosure Vulnerability

...

CVE-2026-20936 Windows NDIS Information Disclosure Vulnerability

...

CVE-2025-68779

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Avoid unregistering PSP twice PSP is unregistered twice in: mlx5eremove - mlx5epspunregister mlx5eniccleanup - mlx5epspunregister This leads to a refcount underflow in some conditions: ------------ cut here -----------...

Windows NDIS Information Disclosure Vulnerability

Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack...

CVE-2025-71092

Summary : The CVE-2025-71092 entry corresponds to a Linux kernel issue in RDMA/bnxt_re where an OOB write occurred during hw_stats allocation in bnxt_re_copy_err_stats(). The root cause was that three counters (BNXT_RE_REQ_CQE_ERROR, BNXT_RE_RESP_CQE_ERROR, BNXT_RE_RESP_REMOTE_ACCESS_ERRS) were a...

CVE-2025-71093

CVE-2025-71093 affects the Linux kernel e1000 network driver. The issue was an out-of-bounds read in e1000_tbi_should_accept() where the code unconditionally dereferenced data[length-1] to perform a TBI workaround, potentially accessing memory beyond the RX buffer during NAPI receive path. The fi...

CVE-2025-71087 iavf: fix off-by-one issues in iavf_config_rss_reg()

In the Linux kernel, the following vulnerability has been resolved: iavf: fix off-by-one issues in iavfconfigrssreg There are off-by-one bugs when configuring RSS hash key and lookup table, causing out-of-bounds reads to memory 1 and out-of-bounds writes to device registers. Before commit...

CVE-2025-68770

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix XDPTX path For XDPTX action in bnxtrxxdp, clearing of the event flags is not correct. bnxtpollwork - bnxtrxpkt - bnxtrxxdp may be looping within NAPI and some event flags may be set in earlier iterations. In particula...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: i40e: fixed the validation of VF state in the get resources function. The state I40EVFSTATEACTIVE is not the only state in which a VF is actually active. Therefore, it should not be used to determine whether a VF is allowed to...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: i40e: Fixed the input validation logic for actionmeta. Also, corrected the condition to check for “greater than or equal” to prevent out-of-band dereferencing...

PT-2026-2738

CVE-2026-20936 Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack. https://t.co/LV3E4qMazm...

Microsoft Windows Network Driver Interface Specification 缓冲区错误漏洞

The Microsoft Windows Network Driver Interface Specification is one of the core components of a Windows network architecture from Microsoft Corporation. A buffer error vulnerability exists in the Microsoft Windows Network Driver Interface Specification. An attacker could exploit this vulnerabilit...

PT-2026-2585

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s networking subsystem related to the hns3 driver. The issue stems from inconsistent allocation sizes for hdev-htqp and kinfo-tqp when applying for...

MiracleLinux 9 : kernel-5.14.0-611.9.1.el9_7 (AXSA:2025-11506:95)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-11506:95 advisory. kernel: firmware: armscpi: Ensure scpiinfo is not assigned if the probe fails CVE-2022-50087 kernel: sunrpc: fix client side handling of tls alerts...

hv_netvsc: Fix panic during namespace deletion with VF

...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

kernel: i40e: fix idx validation in config queues msg

A flaw was found in the Linux kernel in the Intel i40e network driver such that in the function i40evcconfigqueuesmsg, when iterating over vf-chidx, the idx value is not properly validated against the range of active/initialized traffic classes TCs. An attacker with local privileges could supply ...

PT-2026-26122

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel where a shared memory region for statistics reporting between the driver and the Network Interface Card NIC is susceptible to corruption. The NIC...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992948)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992948 advisory. In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix aqvec index out of range error The final update statement of the for loop...

CVE-2023-54262

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Don't clone flow post action attributes second time The code already clones post action attributes in mlx5ecloneflowattrforpostact. Creating another copy in mlx5etcpostactadd is a erroneous leftover from original...