CVE-2025-68779 net/mlx5e: Avoid unregistering PSP twice

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Avoid unregistering PSP twice PSP is unregistered twice in: mlx5eremove - mlx5epspunregister mlx5eniccleanup - mlx5epspunregister This leads to a refcount underflow in some conditions: ------------ cut here -----------...

CVE-2025-68775 net/handshake: duplicate handshake cancellations leak socket

In the Linux kernel, the following vulnerability has been resolved: net/handshake: duplicate handshake cancellations leak socket When a handshake request is cancelled it is removed from the handshakenet-hnrequests list, but it is still present in the handshakerhashtbl until it is destroyed. If a...

CVE-2025-68775

CVE-2025-68775 affects the Linux kernel’s net/handshake code. A duplicate handshake cancellation can leave the handshake entry in the rhashtbl and, if a second cancellation occurs without HANDSHAKE_F_REQ_COMPLETED being set, lead to a refcount underflow on the socket. The issue arises when a canc...

CVE-2025-68774 hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create

In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix missing hfsbnodeget in hfsbnodecreate When sync and link are called concurrently, both threads may enter hfsbnodefind without finding the node in the hash table and proceed to create it. Thread A: hfspluswriteinode -...

CVE-2025-68774

CVE-2025-68774 is a race in the Linux kernel’s hfsplus code where concurrent sync() and link() can create the same bnode, both threads end with refcnt=1 due to missing hfs_bnode_get(). When the second thread reuses the node from the hash, a BUG_ON triggers on refcnt. The fix is to call hfs_bnode_...

CVE-2025-68774

In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix missing hfsbnodeget in hfsbnodecreate When sync and link are called concurrently, both threads may enter hfsbnodefind without finding the node in the hash table and proceed to create it. Thread A: hfspluswriteinode -...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: In tcpconnrequest, do not call reqskfastopenremove. The syzbot reported the following issue in tcpconnrequest: 0 If a listener is closed while a TFO socket is being processed in tcpconnrequest, inetcskreqskqueueadd does not set...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: nfsd: Fixed the reference count leak in nfsdsetfhdentry. nfsd exports a “pseudo root filesystem” which is used by NFSv4 to find the various exported filesystems using LOOKUP requests from a known root filehandle. NFSv3 uses th...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: ext4: Mitigated the risk of underflow of the EA inode refcount during xattr updates. Syzkaller identified a path in ext4xattrinodeupdateref where the refcount of EA inodes is checked, and if it is already ref underflow:...

MiracleLinux 9 : grub2-2.06-104.el9_6.ML.1 (AXSA:2025-10402:07)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10402:07 advisory. grub2: reader/jpeg: Heap OOB Write during JPEG parsing CVE-2024-45774 grub2: commands/extcmd: Missing check for failed allocation CVE-2024-45775...

Linux Distros Unpatched Vulnerability : CVE-2025-68775

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/handshake: duplicate handshake cancellations leak socket When a handshake request is...

MiracleLinux 8 : kernel-4.18.0-553.52.1.el8_10 (AXSA:2025-9961:32)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-9961:32 advisory. kernel: hwmon: coretemp fix pci device refcount leak in nv1aramnew CVE-2022-49011 kernel: netfilter: ipset: add missing range check in bitmapipuadt...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000433)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000433 advisory. A vulnerability was found in Linux Kernel, where a refcount leak in llcpsockconnect causing use-after- free which might lead to privilege escalations. Tenable has...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000429)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000429 advisory. A vulnerability was found in Linux Kernel where refcount leak in llcpsockbind causing use-after-free which might lead to privilege escalations. Tenable has extracted...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000254)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000254 advisory. The Linux kernel before 5.1-rc5 allows page-refcount reference count overflow, with resultant use-after- free issues, if about 140 GiB of RAM exists. This is related...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000322)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000322 advisory. In the Linux kernel through 5.0.2, the function inotifyupdateexistingwatch in fs/notify/inotify/inotifyuser.c neglects to call fsnotifyputmark with INMASKCREATE afte...

CLSA-2026-1767629031 mod_md: Fix of CVE-2025-55753

CVE-2025-55753: fix integer overflow in ACME backoff timer - Fix test failure on i686 for boolean refcount assertion...

Linux Distros Unpatched Vulnerability : CVE-2023-54205

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pinctrl: stm32: Fix refcount leak in stm32pctrlgetirqdomain ofirqfindparent returns a node pointer with refcount incremented, We should use ofnodeput on it when...

Linux Distros Unpatched Vulnerability : CVE-2022-50810

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rapidio: devices: fix missing putdevice in mportcdevopen When kfifoalloc fails, the refcount of chdev-dev is left incremental. We should use putdevice&chdev-dev...

Linux Distros Unpatched Vulnerability : CVE-2022-50874

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/erdma: Fix refcount leak in erdmammap rdmausermmapentryget take reference, we should release it when not need anymore, add the missing rdmausermmapentryput...