Linux Distros Unpatched Vulnerability : CVE-2023-54129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - octeontx2-af: Add validation for lmac type Upon physical link change, firmware reports to the kernel about the change along with the details like speed,...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues were fixed: CVE-2022-50253: bpf: make sure skb-len != 0 when redirecting to a tunneling device bsc1249912. CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in...

Vulnerability of the otx2vfremove() function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2 VF.c module – This is a driver for supporting Ethernet network adapters in Linux kernel-based operating systems. It allows a hacker to cause service failure.

Vulnerability of the otx2vfremove function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2 VF.c module – The Marvell Ethernet network adapter driver for Linux operating systems has a vulnerability where resources are not released after their useful life has ended. Exploiting this...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues The following security issues were fixed: CVE-2022-50327: ACPI: processor: idle: Check acpifetchacpidev return value bsc1249859. CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfsparseparam bsc1249857...

octeontx2-pf: Fix SQE threshold checking

...

Linux Distros Unpatched Vulnerability : CVE-2025-39978

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - octeontx2-pf: Fix potential use after free in otx2tcaddflow This code calls kfreercunewnode, rcu and then dereferences newnode and then dereferences it on the...

EUVD-2023-60013

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex Apparently the hex passphrase mechanism does not work on newer chips/firmware e.g. BCM4387. It seems there was a simple way of passing it in binary all along, so use...

SUSE CVE-2025-39978

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix potential use after free in otx2tcaddflow This code calls kfreercunewnode, rcu and then dereferences "newnode" and then dereferences it on the next line. Two lines later, we take a mutex so I don't think this is...

CVE-2025-39978

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix potential use after free in otx2tcaddflow This code calls kfreercunewnode, rcu and then dereferences "newnode" and then dereferences it on the next line. Two lines later, we take a mutex so I don't think this is...

octeontx2-pf: Fix potential use after free in otx2_tc_add_flow()

...

EUVD-2025-34594

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix potential use after free in otx2tcaddflow This code calls kfreercunewnode, rcu and then dereferences "newnode" and then dereferences it on the next line. Two lines later, we take a mutex so I don't think this is...

CVE-2025-39978

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix potential use after free in otx2tcaddflow This code calls kfreercunewnode, rcu and then dereferences "newnode" and then dereferences it on the next line. Two lines later, we take a mutex so I don't think this is...

UBUNTU-CVE-2025-39978

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix potential use after free in otx2tcaddflow This code calls kfreercunewnode, rcu and then dereferences "newnode" and then dereferences it on the next line. Two lines later, we take a mutex so I don't think this is...

CVE-2025-39978 octeontx2-pf: Fix potential use after free in otx2_tc_add_flow()

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix potential use after free in otx2tcaddflow This code calls kfreercunewnode, rcu and then dereferences "newnode" and then dereferences it on the next line. Two lines later, we take a mutex so I don't think this is...

CVE-2025-39978 octeontx2-pf: Fix potential use after free in otx2_tc_add_flow()

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix potential use after free in otx2tcaddflow This code calls kfreercunewnode, rcu and then dereferences "newnode" and then dereferences it on the next line. Two lines later, we take a mutex so I don't think this is...

CVE-2025-39978

The CVE-2025-39978 issue involves the octeontx2-pf driver (Linux kernel) in otx2_tc_add_flow(): after calling kfree_rcu(new_node, rcu), the code dereferences new_node on subsequent lines and then acquires a mutex, which is not within a safe RCU region. This is a use-after-free/root cause: freed m...

octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c

...

Linux Distros Unpatched Vulnerability : CVE-2025-39944

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - octeontx2-pf: Fix use-after-free bugs in otx2synctstamp The original code relies on canceldelayedwork in otx2ptpdestroy, which does not ensure that the delayed...

UBUNTU-CVE-2023-53654

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Add validation before accessing cgx and lmac with the addition of new MAC blocks like CN10K RPM and CN10KB RPMUSX, LMACs are noncontiguous and CGX blocks are also noncontiguous. But during RVU driver initialization,...

CVE-2023-53654

CVE-2023-53654 affects the Linux kernel’s octeontx2-af/RVU initialization. The issue occurs because CN10K RPM and CN10KB RPM_USX LMAC blocks are noncontiguous, and CGX blocks are noncontiguous, but RVU initialization assumed contiguity and accessed cgx/lmac by id, causing kernel panic. A patch ad...