CVE-2025-39898 e1000e: fix heap overflow in e1000_set_eeprom

In the Linux kernel, the following vulnerability has been resolved: e1000e: fix heap overflow in e1000seteeprom Fix a possible heap overflow in e1000seteeprom function by adding input validation for the requested length of the change in the EEPROM. In addition, change the variable type from int t...

PT-2025-40249

Name of the Vulnerable Software and Affected Versions Storage Performance Development Kit SPDK version 25.05 Description The Storage Performance Development Kit SPDK version 25.05 contains a buffer overflow in the NVMe-oF target component, specifically within lib/nvmf. Recommendations At the...

USN-7769-3: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACP...

nvme: apple: fix device reference counting

...

nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid()

...

nvme-tcp: sanitize request list handling

...

USN-7704-4: Linux kernel (NVIDIA) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Arm Firmware Framework for ARMv8-AFFA; - Multiple devices driver; - Media drivers; - Network...

USN-7704-3: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Arm Firmware Framework for ARMv8-AFFA; - Multiple devices driver; - Media drivers; - Network...

USN-7704-1 linux, linux-aws, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-gkeop, linux-hwe-5.15, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx, linux-oracle-5.15, linux-realtime, linux-xilinx-zynqmp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Arm Firmware Framework for ARMv8-AFFA; - Multiple devices driver; - Media drivers; - Network...

USN-7704-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Arm Firmware Framework for ARMv8-AFFA; - Multiple devices driver; - Media drivers; - Network...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-7704-1)

"The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7704-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

Linux Distros Unpatched Vulnerability : CVE-2023-0122

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmetsetupauth, allows an attacker to perform a Pre-Auth Denial of Service D...

Linux Distros Unpatched Vulnerability : CVE-2022-49436

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: powerpc/paprscm: Fix leaking nvdimmeventsmap elements Right now 'char ' elements allocated f...

Linux Distros Unpatched Vulnerability : CVE-2025-38264

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-tcp: sanitize request list handling Validate the request in nvmetcphandler2t to ensure it's not part of any list, otherwise a malicious R2T PDU might injec...

acpi: nfit: fix narrowing conversion in acpi_nfit_ctl

...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from nvme-tcp unvalidated request lists, which could lead to a request processing loop...

Vulnerabilities of components such as drivers, NVMe, and host kernels of the Linux operating system, which allow attackers to cause service failures

The vulnerability of components such as drivers, NVMe, and host kernels in the Linux operating system is related to errors during thread blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `nvme_loop_create_ctrl()` function in the drivers/nvme/target/loop.c module of the Linux operating system allows a hacker to gain access to protected information.

The vulnerability of the nvmeloopcreatectrl function in the drivers/nvme/target/loop.c module of the Linux operating system is related to improper memory release before deleting the last reference „memory leak“. Exploiting this vulnerability may allow an attacker to access protected information...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: rtc: pcf85063: Fixed the potential out-of-bounds write issue during NVMEM read operations in PCF85063. The nvmem interface supports variable buffer sizes, while the regmap interface operates with fixed-size storage. If an nvmem...

Important: kernel-livepatch-6.1.134-152.225

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix potential memory corruption in nvmetcprecvpdu CVE-2025-21927 Affected Packages: kernel-livepatch-6.1.134-152.225 Issue Correction: Please ensure you have live patching enabled. Run dnf update...