PT-2026-43714

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the networking subsystem where the use of WARN ON ONCE when accessing the forward path array could be triggered. The introduction of support for IPIP tunnels a method ...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56783)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56783 advisory. - In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsocket: remove WARNONONCE ...

CVE-2025-71080

CVE-2025-71080 concerns a race in Linux kernel IPv6 PREEMPT_RT code. On PREEMPT_RT kernels, after rt6_get_pcpu_route() returns NULL, a preemption can allow another task on the same CPU to install a pcpu_rt entry; when the first task resumes, the cmpxchg() in rt6_make_pcpu_route() may fail and tri...

CVE-2025-71080 ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix a BUG in rt6getpcpuroute under PREEMPTRT On PREEMPTRT kernels, after rt6getpcpuroute returns NULL, the current task can be preempted. Another task running on the same CPU may then execute rt6makepcpuroute and successful...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid using NULL after WARNONONCE. There is a WARNONONCE to catch an unlikely situation where domainremovedevpasid cannot find the pasid. If this still happens, we must avoid using a NULL pointer...

PT-2026-2601

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s IPv6 implementation within the rt6 get pcpu route function when operating under the PREEMPT RT kernel configuration. Specifically, after rt6 get pcpu...

SUSE CVE-2025-68221

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix address removal logic in mptcppmnlrmaddr Fix inverted WARNONONCE condition that prevented normal address removal counter updates. The current code only executes decrement logic when the counter is already 0 abnormal...

EUVD-2025-203675

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix address removal logic in mptcppmnlrmaddr Fix inverted WARNONONCE condition that prevented normal address removal counter updates. The current code only executes decrement logic when the counter is already 0 abnormal...

CVE-2025-68221

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix address removal logic in mptcppmnlrmaddr Fix inverted WARNONONCE condition that prevented normal address removal counter updates. The current code only executes decrement logic when the counter is already 0 abnormal...

CVE-2025-68221 mptcp: fix address removal logic in mptcp_pm_nl_rm_addr

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix address removal logic in mptcppmnlrmaddr Fix inverted WARNONONCE condition that prevented normal address removal counter updates. The current code only executes decrement logic when the counter is already 0 abnormal...

CVE-2025-68214 timers: Fix NULL function pointer race in timer_shutdown_sync()

In the Linux kernel, the following vulnerability has been resolved: timers: Fix NULL function pointer race in timershutdownsync There is a race condition between timershutdownsync and timer expiration that can lead to hitting a WARNON in expiretimers. The issue occurs when timershutdownsync clear...

CVE-2025-40359

CVE-2025-40359 concerns a kernel KASAN global-out-of-bounds read triggered by perf/x86/intel on non-hybrid platforms. The initial description notes the issue arises from __grt_latency_data() accessing hybrid_pmu(event->pmu) unconditionally and warns with WARN_ON_ONCE for hybrid PMU types, caus...

CVE-2023-53831

A data race was found in the Linux kernel's networking stack. The skmcloop function reads sk-skfamily without proper synchronization while another thread may be changing it via IPV6ADDRFORM socket option. This race can cause the function to take an unexpected code path, triggering a WARNONONCE or...

SUSE CVE-2022-50661

In the Linux kernel, the following vulnerability has been resolved: seccomp: Move copyseccomp to no failure path. Our syzbot instance reported memory leaks in doseccomp 0, similar to the report 1. It shows that we miss freeing struct seccompfilter and some objects included in it. We can reproduce...

EUVD-2023-60165

In the Linux kernel, the following vulnerability has been resolved: net: read sk-skfamily once in skmcloop syzbot is playing with IPV6ADDRFORM quite a lot these days, and managed to hit the WARNONONCE1 in skmcloop We have many more similar issues to fix. WARNING: CPU: 1 PID: 1593 at...

CVE-2023-53831

In the Linux kernel, the following vulnerability has been resolved: net: read sk-skfamily once in skmcloop syzbot is playing with IPV6ADDRFORM quite a lot these days, and managed to hit the WARNONONCE1 in skmcloop We have many more similar issues to fix. WARNING: CPU: 1 PID: 1593 at...

DEBIAN-CVE-2022-50661

In the Linux kernel, the following vulnerability has been resolved: seccomp: Move copyseccomp to no failure path. Our syzbot instance reported memory leaks in doseccomp 0, similar to the report 1. It shows that we miss freeing struct seccompfilter and some objects included in it. We can reproduce...

CVE-2023-53831 net: read sk->sk_family once in sk_mc_loop()

In the Linux kernel, the following vulnerability has been resolved: net: read sk-skfamily once in skmcloop syzbot is playing with IPV6ADDRFORM quite a lot these days, and managed to hit the WARNONONCE1 in skmcloop We have many more similar issues to fix. WARNING: CPU: 1 PID: 1593 at...

CVE-2023-53831

CVE-2023-53831: In the Linux kernel, the issue concerns reading sk->sk_family multiple times in sk_mc_loop(), which syzbot has used to trigger a WARN_ON_ONCE(1) in net/core/sock.c. The vulnerability is described as resolved in the initial document, but no concrete patch details (such as fixed ...

CVE-2023-53831

In the Linux kernel, the following vulnerability has been resolved: net: read sk-skfamily once in skmcloop syzbot is playing with IPV6ADDRFORM quite a lot these days, and managed to hit the WARNONONCE1 in skmcloop We have many more similar issues to fix. WARNING: CPU: 1 PID: 1593 at...