kernel: netfilter: nf_tables: reject mismatching sum of field_len with set key length

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: reject mismatching sum of fieldlen with set key length The field length description provides the length of each separated key field in the concatenation, each field gets rounded up to 32-bits to calculate the...

kernel: netfilter: nf_tables: reject mismatching sum of field_len with set key length

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: reject mismatching sum of fieldlen with set key length The field length description provides the length of each separated key field in the concatenation, each field gets rounded up to 32-bits to calculate the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990539)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990539 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: initialize registers in nftdochain Initialize registers to avoid stack leak...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990529)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990529 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: unregister flowtable hooks on netns exit Unregister flowtable hooks before...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990594)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990594 advisory. In the Linux kernel, the following vulnerability has been resolved: ipmr,ip6mr: acquire RTNL before calling ip6mrfreetable on failure path ip6mrfreetable can only be...

Security update for kernel-livepatch-MICRO-6-0_Update_11

This update for kernel-livepatch-MICRO-6-0Update11 fixes the following issues: CVE-2025-38664: ice: Fix a null pointer dereference in icecopyandinitpkg bsc1248631 CVE-2025-38678: nftables: reject duplicate device on updates bsc1249534 Patch Instructions: To install this SUSE update use the SUSE...

SUSE-SU-2025:20979-1 Security update for kernel-livepatch-MICRO-6-0_Update_11

This update for kernel-livepatch-MICRO-6-0Update11 fixes the following issues: - CVE-2025-38664: ice: Fix a null pointer dereference in icecopyandinitpkg bsc1248631 - CVE-2025-38678: nftables: reject duplicate device on updates bsc1249534...

Security update for kernel-livepatch-MICRO-6-0_Update_11

This update for kernel-livepatch-MICRO-6-0Update11 fixes the following issues: CVE-2025-38664: ice: Fix a null pointer dereference in icecopyandinitpkg bsc1248631 CVE-2025-38678: nftables: reject duplicate device on updates bsc1249534 Patch Instructions: To install this SUSE update use the SUSE...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989400)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989400 advisory. In the Linux kernel, the following vulnerability has been resolved: mmmremap.c: avoid pointless invalidaterangestart/end on mremapoldsize=0 If an mremap syscall with...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989238)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989238 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fix percpu memory leak at nftablesaddchain It seems to me that percpu memory...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989368)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989368 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fix nftcountersenabled underflow at nftablesaddchain syzbot is reporting...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989112)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989112 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: don't skip expired elements during walk There is an asymmetry between...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989549)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989549 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: initialize registers in nftdochain Initialize registers to avoid stack leak...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-989779)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989779 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: initialize registers in nftdochain Initialize registers to avoid stack leak...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989463)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989463 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fix memory leak during stateful obj update stateful objects can be updated...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989307)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989307 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: release flow rule object from commit path No need to postpone this to the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990067)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990067 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: don't skip expired elements during walk There is an asymmetry between...

PT-2026-36838

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A transient denial of service DOS occurs when processing target power rate tables during channel configuration. Recommendations At the moment, there is no...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ACPICA: fixed the ACPI operand cache leak in dswstate.c ACPICA commit: 987a3b5cf7175916e2a4b6ea5b8e70f830dfe732 I discovered a ACPI cache leak in cases where ACPI early termination occurs and the boot process continues. When earl...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: mm/ptdump: The memory hotplug lock is now handled within ptdumpwalkpgd. Memory hot removal operations involve unmapping memory and dismantling various kernel page table regions as needed. The ptdump code may race with concurre...