ROS-20260306-73-0014

A vulnerability in the seg6 component of the Linux kernel is related to access to an uninitialized pointer. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38310)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38310 advisory. - In the Linux kernel, the following vulnerability has been resolved: seg6: Fix validation of nexthop addresse...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990428)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990428 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ipv6: unexport init-annotated seg6hmacinit EXPORTSYMBOL and init is a bad combination becaus...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989143)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989143 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ipv6: unexport init-annotated seg6hmacinit EXPORTSYMBOL and init is a bad combination becaus...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990074)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990074 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ipv6: unexport init-annotated seg6hmacinit EXPORTSYMBOL and init is a bad combination becaus...

Siemens SIMATIC Devices Missing Release of Memory after Effective Lifetime (CVE-2024-39489)

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix memleak in seg6hmacinitalgo seg6hmacinitalgo returns without cleaning up the previous allocations if one fails, so it's going to leak all that memory and the crypto tfms. Update seg6hmacexit to only free the memory...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987650)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987650 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ipv6: unexport init-annotated seg6hmacinit EXPORTSYMBOL and init is a bad combination becaus...

Unity Linux 20.1050a / 20.1070a Security Update: kernel (UTSA-2025-429435)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-429435 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix invalid unregister error path The error path of seg6init is wrong in case...

EUVD-2025-5155

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2025-38310

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - seg6: Fix validation of nexthop addresses The kernel currently validates that the length of the provided nexthop address does not exceed the specified length...

Linux Distros Unpatched Vulnerability : CVE-2024-39489

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: sr: fix memleak in seg6hmacinitalgo seg6hmacinitalgo returns without cleaning up the previous allocations if one fails, so it's going to leak all that...

SUSE CVE-2025-38310

In the Linux kernel, the following vulnerability has been resolved: seg6: Fix validation of nexthop addresses The kernel currently validates that the length of the provided nexthop address does not exceed the specified length. This can lead to the kernel reading uninitialized memory if user space...

AZL-64958 CVE-2025-38310 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: seg6: Fix validation of nexthop addresses The kernel currently validates that the length of the provided nexthop address does not exceed the specified length. This can lead to the kernel reading uninitialized memory if user space...

DEBIAN-CVE-2025-38310

In the Linux kernel, the following vulnerability has been resolved: seg6: Fix validation of nexthop addresses The kernel currently validates that the length of the provided nexthop address does not exceed the specified length. This can lead to the kernel reading uninitialized memory if user space...

UBUNTU-CVE-2025-38310

In the Linux kernel, the following vulnerability has been resolved: seg6: Fix validation of nexthop addresses The kernel currently validates that the length of the provided nexthop address does not exceed the specified length. This can lead to the kernel reading uninitialized memory if user space...

CVE-2025-38310: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: seg6: Fix validation of nexthop addresses The kernel currently validates that the length of the provided nexthop address does not exceed the specified length. This can lead to the kernel reading uninitialized memory if user space...

PT-2025-29030

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contained a flaw in the seg6 module where the validation of nexthop addresses was insufficient. The kernel validated that the length of the provided nexthop address di...

SUSE CVE-2022-49339

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: unexport init-annotated seg6hmacinit EXPORTSYMBOL and init is a bad combination because the .init.text section is freed up after the initialization. Hence, modules cannot use symbols annotated init. The access to a fre...

PT-2025-8869

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been resolved, specifically related to dst refleaks in rpl, seg6, and ioam6 lwtunnels. The dst cache get function gives a reference that needs to be...

DEBIAN-CVE-2022-49339

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: unexport init-annotated seg6hmacinit EXPORTSYMBOL and init is a bad combination because the .init.text section is freed up after the initialization. Hence, modules cannot use symbols annotated init. The access to a fre...