Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a premature call to devlinkfree in the ixgberemove function, which could lead to reuse after release...

smc: Fix use-after-free in __pnet_find_base_ndev().

...

CVE-2025-40053

In the Linux kernel, the following vulnerability has been resolved: net: dlink: handle copythresh allocation failure The driver did not handle failure of netdevallocskbipalign. If the allocation failed, dereferencing skb-protocol could lead to a NULL pointer dereference. This patch tries to...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Use After Free (CVE-2024-39502)

ionic: use after netifnapidel. When queues are started, netifnapiadd and napienable are called. If there are 4 queues and only 3 queues are used for the current configuration, only 3 queues' napi should be registered and enabled. The ionicqcqenable checks whether the .poll pointer is not NULL for...

OESA-2025-2532 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: net: ravb: Fix missing rtnl lock in suspend/resume path Fix the suspend/resume path by ensuring the rtnl lock is held where required. Calls to ravbopen, ravbclos...

CVE-2025-60419

An issue was discovered in the NDIS Usermode IO driver RtkIOAC60.sys, version 6.0.5600.16348 allowing local authenticated attackers to send a crafted IOCTL request to the driver to cause a denial of service...

CVE-2025-60419

A security vulnerability exists in the NDIS Usermode IO driver (RtkIOAC60.sys ) version 6.0.5600.16348 , developed by Realtek Semiconductor . A local authenticated attacker can cause a denial of service by sending a specially crafted IOCTL request to the driver via the RtkIOAC60.sys file. To miti...

The vulnerability of the NDIS Network Driver Interface Specification driver in the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows Network Driver Interface Specification driver is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987645)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987645 advisory. In the Linux kernel, the following vulnerability has been resolved: qede: confirm skb is allocated before using qedebuildskb assumes buildskb always works and goes...

CVE-2025-40003 net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work

In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work The origin code calls canceldelayedwork in ocelotstatsdeinit to cancel the cyclic delayed work item ocelot-statswork. However, canceldelayedwork may fail to canc...

i40e: fix idx validation in i40e_validate_queue_map

...

i40e: fix idx validation in config queues msg

...

i40e: fix input validation logic for action_meta

...

can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow

...

CVE-2025-55339

Out-of-bounds read in Windows NDIS allows an authorized attacker to elevate privileges locally...

CVE-2025-20712

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00422323; Issue ID:...

EUVD-2025-34587

In the Linux kernel, the following vulnerability has been resolved: can: mcbausb: populate ndochangemtu to prevent buffer overflow Sending an PFPACKET allows to bypass the CAN framework logic and to directly reach the xmit function of a CAN driver. The only check which is performed by the PFPACKE...

EUVD-2025-34588

In the Linux kernel, the following vulnerability has been resolved: net: tun: Update napi-skb after XDP process The syzbot report a UAF issue: BUG: KASAN: slab-use-after-free in skbresetmacheader include/linux/skbuff.h:3150 inline BUG: KASAN: slab-use-after-free in napifragsskb net/core/gro.c:723...

CVE-2025-39968

In the Linux kernel, the following vulnerability has been resolved: i40e: add max boundary check for VF filters There is no check for max filters that VF can request. Add it...

CVE-2025-39973

The CVE-2025-39973 issue affects the Linux kernel i40e driver. The ring_len parameter provided by the virtual function (VF) could be assigned to hardware memory context (HMC) without validation. A patch was introduced to add an upper-bound check for both Tx and Rx queue lengths, with hardware sup...