UBUNTU-CVE-2025-39968

In the Linux kernel, the following vulnerability has been resolved: i40e: add max boundary check for VF filters There is no check for max filters that VF can request. Add it...

UBUNTU-CVE-2025-39992

In the Linux kernel, the following vulnerability has been resolved: mm: swap: check for stable address space before operating on the VMA It is possible to hit a zero entry while traversing the vmas in unusemm called from swapoff path and accessing it causes the OOPS: Unable to handle kernel NULL...

CVE-2025-39992

CVE-2025-39992 pertains to a race in the Linux kernel between fork() and swapoff where a partially built mm is exposed, allowing traversal to hit a XA_ZERO_ENTRY and trigger a NULL pointer dereference in unuse_mm(). The public description states the bug arises from a race while duplicating the mm...

CVE-2025-39992 mm: swap: check for stable address space before operating on the VMA

In the Linux kernel, the following vulnerability has been resolved: mm: swap: check for stable address space before operating on the VMA It is possible to hit a zero entry while traversing the vmas in unusemm called from swapoff path and accessing it causes the OOPS: Unable to handle kernel NULL...

CVE-2025-39992 mm: swap: check for stable address space before operating on the VMA

In the Linux kernel, the following vulnerability has been resolved: mm: swap: check for stable address space before operating on the VMA It is possible to hit a zero entry while traversing the vmas in unusemm called from swapoff path and accessing it causes the OOPS: Unable to handle kernel NULL...

CVE-2025-39973 i40e: add validation for ring_len param

In the Linux kernel, the following vulnerability has been resolved: i40e: add validation for ringlen param The ringlen parameter provided by the virtual function VF is assigned directly to the hardware memory context HMC without any validation. To address this, introduce an upper boundary check f...

CVE-2025-39968 i40e: add max boundary check for VF filters

In the Linux kernel, the following vulnerability has been resolved: i40e: add max boundary check for VF filters There is no check for max filters that VF can request. Add it...

CVE-2025-39969 i40e: fix validation of VF state in get resources

In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40EVFSTATEACTIVE is not the only state in which VF is actually active so it should not be used to determine if a VF is allowed to obtain resources. Use...

CVE-2025-39968 i40e: add max boundary check for VF filters

In the Linux kernel, the following vulnerability has been resolved: i40e: add max boundary check for VF filters There is no check for max filters that VF can request. Add it...

CVE-2025-39969 i40e: fix validation of VF state in get resources

In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40EVFSTATEACTIVE is not the only state in which VF is actually active so it should not be used to determine if a VF is allowed to obtain resources. Use...

CVE-2025-39968

CVE-2025-39968 affects the Linux kernel i40e component. The root cause is absence of a max boundary check for VF (Virtual Function) filter requests, allowing out-of-range filter handling. The connected notes confirm a patch that adds a maximum boundary check for VF filters, mitigating potential i...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update as...

VMM Component DoS

The vulnerability of the VMM component in the Linux operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause a service failure...

F5 BIG-IP security vulnerabilities

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A security vulnerability exists in F5 BIG-IP that originates from a virtual server configured with an iRule that uses the ILX::call command...

F5 Networks BIG-IP : BIG-IP iRules vulnerability (K000151611)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.6 / 17.1.2.2 / 17.5.0. It is, therefore, affected by a vulnerability as referenced in the K000151611 advisory. When an iRule containing theHTTP::respondcommand is configured on a virtual server, undisclosed requests c...

F5 BIG-IPI and F5 SSL Orchestrator buffer error vulnerabilities

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A memory corruption vulnerability exists in the Explicit Forward Proxy module of the BIG-IP SSL Orchestrator. The vulnerabilit...

PT-2025-42243

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue in the i40e driver where there is no check for the maximum number of filters that a Virtual Function VF can request. A boundary check has been added to...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from incorrectly verifying VF status, which could lead to improper resource acquisition...

F5 BIG-IP security vulnerabilities

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A denial-of-service vulnerability exists in the ePVA module of BIG-IP. The vulnerability arises due to undisclosed traffic tha...

PT-2025-42244

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the i40e network driver. The issue involves incorrect validation of Virtual Function VF state when obtaining resources. Specifically, the I40...