SUSE-SU-2025:20653-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-46733: btrfs: fix qgroup reserve leaks in cowfilerange bsc1230708. - CVE-2025-38006: net: mctp: Do not access ifaindex when missing bsc1244930. -...

PT-2025-36256

Name of the Vulnerable Software and Affected Versions affected versions not specified Description Some payload elements of the messages sent between two stations in a networking architecture are not properly checked on the receiving station, potentially allowing an attacker to execute unauthorize...

ROS-20250905-02

A vulnerability in the twisted.web component of the Twisted networking framework is related to inconsistent interpretation of HTTP requests. interpretation of HTTP requests. Exploitation of the vulnerability could allow an attacker acting remotely affect the integrity of protected information as ...

CVE-2025-54914

Azure Networking Elevation of Privilege Vulnerability...

CVE-2025-54914 Azure Networking Elevation of Privilege Vulnerability

...

CVE-2025-54914 Azure Networking Elevation of Privilege Vulnerability

...

CVE-2025-54914

Azure Networking Elevation of Privilege (CVE-2025-54914) affects Microsoft Azure Networking services. The root cause is an access-control gap in the GetRouteTable API that lets a caller with read permissions on a virtual network create new route objects in the same subnet without proper authoriza...

DEBIAN-CVE-2025-38730

In the Linux kernel, the following vulnerability has been resolved: iouring/net: commit partial buffers on retry Ring provided buffers are potentially only valid within the single execution context in which they were acquired. iouring deals with this and invalidates them on retry. But on the...

AZL-66830 CVE-2025-38730 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: iouring/net: commit partial buffers on retry Ring provided buffers are potentially only valid within the single execution context in which they were acquired. iouring deals with this and invalidates them on retry. But on the...

net/mlx5e: Remove skb secpath if xfrm state is not found

...

usb: net: sierra: check for no status endpoint

...

RDMA/hns: Fix UAF for cq async event

...

wifi: wfx: fix memory leak when starting AP

...

KLA87341 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Bot Service can be exploited remotely to gain privileges. 2. An elevation ...

Microsoft Azure Networking 访问控制错误漏洞

Microsoft Azure Networking is a collection of network-related service features from Microsoft Corporation in the United States. An access control error vulnerability exists in Microsoft Azure Networking that stems from a potential elevation of privilege...

PT-2025-36095

Name of the Vulnerable Software and Affected Versions Azure Networking affected versions not specified Description An elevation of privilege issue exists in Azure Networking. This allows for unauthorized access and potential compromise of network resources. Recommendations At the moment, there is...

igc: avoid returning frame twice in XDP_REDIRECT

...

Memory corruption in the networking stack could have led to a potentially exploitable crash. This vulnerability affects Firefox < 125, Firefox ESR < 115.12, and Thunderbird < 115.12.

...

USN-7737-1 linux-azure, linux-azure-6.8, linux-azure-nvidia vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - S390 architecture; - x86 architecture; - Block layer subsystem; -...

Linux Distros Unpatched Vulnerability : CVE-2021-32575

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Nomad and Nomad Enterprise up to version 1.0.4 bridge networking mode allows ARP spoofing from other bridged tasks on the same node. Fixed in 0.12.12,...