OSV-2026-144 Use-of-uninitialized-value in initFilter

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=478301104 Crash type: Use-of-uninitialized-value Crash state: initFilter ffswsinitsinglecontext mpswsreinit...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004411)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004411 advisory. A vulnerability was found in the Linux Kernel where the function sunkbdreinit having been scheduled by sunkbdinterrupt before sunkbd being freed. Though the dangling...

SUSE CVE-2025-71073

In the Linux kernel, the following vulnerability has been resolved: Input: lkkbd - disable pending work before freeing device lkkbdinterrupt schedules lk-tq via schedulework, and the work handler lkkbdreinit dereferences the lkkbd structure and its serio/inputdev fields. lkkbddisconnect and error...

CVE-2025-71073

In the Linux kernel, the following vulnerability has been resolved: Input: lkkbd - disable pending work before freeing device lkkbdinterrupt schedules lk-tq via schedulework, and the work handler lkkbdreinit dereferences the lkkbd structure and its serio/inputdev fields. lkkbddisconnect and error...

UBUNTU-CVE-2025-71073

In the Linux kernel, the following vulnerability has been resolved: Input: lkkbd - disable pending work before freeing device lkkbdinterrupt schedules lk-tq via schedulework, and the work handler lkkbdreinit dereferences the lkkbd structure and its serio/inputdev fields. lkkbddisconnect and error...

CVE-2025-71073 Input: lkkbd - disable pending work before freeing device

In the Linux kernel, the following vulnerability has been resolved: Input: lkkbd - disable pending work before freeing device lkkbdinterrupt schedules lk-tq via schedulework, and the work handler lkkbdreinit dereferences the lkkbd structure and its serio/inputdev fields. lkkbddisconnect and error...

Linux Distros Unpatched Vulnerability : CVE-2025-71073

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: lkkbd - disable pending work before freeing device lkkbdinterrupt schedules lk-tq via schedulework, and the work handler lkkbdreinit dereferences the lkk...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000446)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000446 advisory. A vulnerability was found in the Linux Kernel where the function sunkbdreinit having been scheduled by sunkbdinterrupt before sunkbd being freed. Though the dangling...

PT-2026-8110

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s ice driver related to devlink reloading. Specifically, a missing call to ice deinit hw in the ice devlink reinit down function, introduced by a previo...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993212)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993212 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL pointer dereference in tipcmonreinitself syzbot reported: tipc: Node number set t...

UBUNTU-CVE-2023-54166

In the Linux kernel, the following vulnerability has been resolved: igc: Fix Kernel Panic during ndotxtimeout callback The Xeon validation group has been carrying out some loaded tests with various HW configurations, and they have seen some transmit queue time out happening during the test. This...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992673)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992673 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL pointer dereference in tipcmonreinitself syzbot reported: tipc: Node number set t...

tipc: Fix use-after-free in tipc_mon_reinit_self().

...

CVE-2025-40280

CVE-2025-40280 concerns the Linux kernel tipc subsystem. A use-after-free in tipc_mon_reinit_self() occurs when iterating over tipc_net(net)->monitors[] without holding RTNL, even though the array is RTNL-protected. This can lead to a slab-use-after-free condition observed under KASAN. The iss...

The vulnerability of the /var/system/linux_vlan_reinit file in the microprogramming software for D-link DIR-823G routers allows a hacker to execute arbitrary commands.

The vulnerability of the /var/system/linuxvlanreinit file in the microprogramming-based routing software of D-link DIR-823G routers is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

D-Link DIR-823G Command Injection Vulnerability

The D-Link DIR-823G is a home dual-band Gigabit wireless router with second-generation 802.11ac Wi-Fi5 technology designed for medium- to high-speed broadband networks. The D-Link DIR-823G suffers from a command injection vulnerability that stems from the failure of timelycheck and sysconf binari...

TOTOLINK A720R Command Injection Vulnerability (CNVD-2025-29711)

TOTOLINK A720R is a wireless router from China's Gion Electronics TOTOLINK with dual-band Wi-Fi capabilities, focusing on high-speed internet and signal coverage. The TOTOLINK A720R suffers from a command injection vulnerability that stems from insufficient validation of the sysconf binary when...

CVE-2025-60683

A command injection vulnerability exists in the ToToLink A720R Router firmware V4.1.5cu.614B20230630 within the sysconf binary, specifically in the sub40BFA4 function that handles network interface reinitialization from '/var/system/linuxvlanreinit'. Input is only partially validated by checking...

EUVD-2025-175310

A command injection vulnerability exists in the ToToLink A720R Router firmware V4.1.5cu.614B20230630 within the sysconf binary, specifically in the sub40BFA4 function that handles network interface reinitialization from '/var/system/linuxvlanreinit'. Input is only partially validated by checking...

CVE-2025-60671

A command injection vulnerability exists in the D-Link DIR-823G router firmware DIR823GV1.0.2B0520181207.bin in the timelycheck and sysconf binaries, which process the /var/system/linuxvlanreinit file. The vulnerability occurs because content read from this file is only partially validated for a...