CVE-2023-54065: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: fix out-of-bounds access The probe function sets priv-chipdata to void priv + sizeofpriv with the expectation that priv has enough trailing space. However, only realtek-smi actually allocated this chipdata spac...

PT-2025-52993

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak issue within the wifi subsystem, specifically affecting the rtl8xxxu driver when used with RTL8723BU and RTL8192EU wifi + bluetooth combo chips...

CVE-2025-68255 staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing The Supported Rates IE length from an incoming Association Request frame was used directly as the memcpy length when copying into a fixed-size 16-byte stack...

Vulnerability of the `btc_fw_set_monreg()` function in the `drivers/net/wireless/realtek/rtw89/coex.c` module – This driver is a Realtek wireless adapter support driver for the Linux operating system. It allows a hacker to cause a service failure.

Vulnerability of the btcfwsetmonreg function in the drivers/net/wireless/realtek/rtw89/coex.c module – The Realtek wireless adapter support driver for the Linux operating system is vulnerable due to a pointer manipulation issue. Exploiting this vulnerability could allow an attacker to cause a...

Vulnerability of the rtw_sdio_get_tx_addr() function in the drivers/net/wireless/realtek/rtw88/sdio.c module – The Realtek wireless adapter support driver for the Linux operating system allows a hacker to cause a service failure.

Vulnerability of the rtwsdiogettxaddr function in the drivers/net/wireless/realtek/rtw88/sdio.c module – The Realtek wireless adapter support driver for the Linux operating system is vulnerable due to the lack of control over the size of the requested buffer. Exploiting this vulnerability could...

PT-2025-55396

Уязвимость функции rtl92cu tx fill desc модуля drivers/net/wireless/realtek/rtlwifi/rtl8192cu/trx.c драйвера адаптеров беспроводной связи Realtek ядра операционной системы Linux связана с записью за границами буфера. Эксплуатация уязвимости может позволить нарушителю получить доступ к защищаемой...

CVE-2018-25125

Netis ADSL Router DL4322D (firmware RTK 2.1.1) is affected by a buffer overflow in the embedded FTP service. An authenticated remote user can trigger a denial of service by sending an FTP command (e.g., ABOR) with an excessively long argument after logging in, causing the FTP service and the rout...

kernel: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek()

A NULL pointer access may result in compromised availability...

kernel: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek()

A NULL pointer access may result in compromised availability...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-989993)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989993 advisory. In the Linux kernel, the following vulnerability has been resolved: rtl818x: Prevent using not initialized queues Using not existing queues can panic the kernel with...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989462)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989462 advisory. In the Linux kernel, the following vulnerability has been resolved: rtl818x: Prevent using not initialized queues Using not existing queues can panic the kernel with...

Linux Distros Unpatched Vulnerability : CVE-2025-40000

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtw89: fix use-after-free in rtw89coretxkickoffandwait There is a bug observed when rtw89coretxkickoffandwait tries to access already freed skbdata: BUG:...

Realtek RtkIOAC60.sys 安全漏洞

Realtek RtkIOAC60.sys is a driver from Realtek Semiconductor Realtek, a Chinese company. A security vulnerability exists in Realtek RtkIOAC60.sys version 6.0.5600.16348, which originates from a local authenticated attacker who can send a specially crafted IOCTL request that could result in a deni...

EUVD-2022-54616

In the Linux kernel, the following vulnerability has been resolved: ASoC: rt7-sdw: harden jackdetecthandler Realtek headset codec drivers typically check if the card is instantiated before proceeding with the jack detection. The rt700, rt711 and rt711-sdca are however missing a check on the card...

EUVD-2023-60034

In the Linux kernel, the following vulnerability has been resolved: riscv: ftrace: Fixup panic by disabling preemption In RISCV, we must use an AUIPC + JALR pair to encode an immediate, forming a jump that jumps to an address over 4K. This may cause errors if we want to enable kernel preemption a...

SUSE CVE-2025-40000

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix use-after-free in rtw89coretxkickoffandwait There is a bug observed when rtw89coretxkickoffandwait tries to access already freed skbdata: BUG: KFENCE: use-after-free write in rtw89coretxkickoffandwait...

EUVD-2025-34573

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix use-after-free in rtw89coretxkickoffandwait There is a bug observed when rtw89coretxkickoffandwait tries to access already freed skbdata: BUG: KFENCE: use-after-free write in rtw89coretxkickoffandwait...

UBUNTU-CVE-2025-40000

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix use-after-free in rtw89coretxkickoffandwait There is a bug observed when rtw89coretxkickoffandwait tries to access already freed skbdata: BUG: KFENCE: use-after-free write in rtw89coretxkickoffandwait...

CVE-2025-40000

CVE-2025-40000 concerns the Linux kernel realtek/rtw89 Wi‑Fi driver. A use‑after‑free occurs in rtw89_core_tx_kick_off_and_wait() when accessing skb_data that has already been freed, caused by a race between the waiting and signaling sides of a completion. The issue propagates through related sca...

CVE-2025-40000 wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait()

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix use-after-free in rtw89coretxkickoffandwait There is a bug observed when rtw89coretxkickoffandwait tries to access already freed skbdata: BUG: KFENCE: use-after-free write in rtw89coretxkickoffandwait...