PT-2025-41123

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.14.0+ Description An integer underflow issue exists in the Linux kernel's mt7601u driver, specifically within the 'mt7601u rx skb from seg' function. This underflow can occur due to manipulation of the dma len...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-386613)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-386613 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: add range check for connrspepid in htcconnectservice I found the following bug in my...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986872)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986872 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix use-after-free in chanctx code In ieee80211vifusereservedcontext, when we hav...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-390409)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-390409 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: do not pass a stopped vif to the driver in .gettxpower Avoid potentially crashing...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414368)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414368 advisory. Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers able ...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

CVE-2025-11326

A weakness has been identified in Tenda AC18 15.03.05.196318. This affects an unknown part of the file /goform/WifiMacFilterSet. Executing a manipulation of the argument wifichkHz can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available...

CVE-2025-11326 Tenda AC18 WifiMacFilterSet stack-based overflow

A weakness has been identified in Tenda AC18 15.03.05.196318. This affects an unknown part of the file /goform/WifiMacFilterSet. Executing a manipulation of the argument wifichkHz can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available...

CVE-2025-11326

CVE-2025-11326 affects Tenda AC18 (version 15.03.05.19(6318)). The vulnerability resides in the wifi_chkHz handling of the /goform/WifiMacFilterSet file, where input length validation can cause a stack-based buffer overflow. This can be exploited remotely, and multiple sources note that an exploi...

EUVD-2025-32495

A weakness has been identified in Tenda AC18 15.03.05.196318. This affects an unknown part of the file /goform/WifiMacFilterSet. Executing manipulation of the argument wifichkHz can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available t...

RockyLinux 10 : kernel (RLSA-2025:8669)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:8669 advisory. kernel: vsock/virtio: discard packets if the transport changes CVE-2025-21669 kernel: net: gso: fix ownership in udpgsosegment CVE-2025-21926 kernel: xs...

RockyLinux 9 : kernel (RLSA-2025:9080)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:9080 advisory. kernel: eth: bnxt: fix truesize for mb-xdp-pass case CVE-2025-21961 kernel: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2capsendcmd CVE-2025-21969...

CVE-2025-11301

A weakness has been identified in Belkin F9K1015 1.00.10. This affects an unknown function of the file /goform/formWlanSetupWPS. This manipulation of the argument webpage causes buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be...

SUSE CVE-2022-50508

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt76x0: fix oob access in mt76x0phygettargetpower After 'commit ba45841ca5eb "wifi: mt76: mt76x02: simplify struct mt76x02ratepower"', mt76x02 relies on ht0-7 ratepower data for vht mcs0,7, while it uses vth0-1...

SUSE CVE-2023-53540

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: reject auth/assoc to AP with our address If the AP uses our own address as its MLD address or BSSID, then clearly something's wrong. Reject such connections so we don't try and fail later...

SUSE CVE-2023-53574

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: delete timer and free skb queue when unloading Fix possible crash and memory leak on driver unload by deleting TX purge timer and freeing C2H queue in 'rtwcoredeinit', shrink critical section in the latter by freeing...

SUSE CVE-2023-53602

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix memory leak in WMI firmware stats Memory allocated for firmware pdev, vdev and beacon statistics are not released during rmmod. Fix it by calling ath11kfwstatsfree function before hardware unregister. While at i...

SUSE CVE-2025-39952

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: avoid buffer overflow in WID string configuration Fix the following copy overflow warning identified by Smatch checker. drivers/net/wireless/microchip/wilc1000/wlancfg.c:184 wilcwlanparseresponseframe error:...

wifi: wilc1000: avoid buffer overflow in WID string configuration

...

Belkin F9K1015 安全漏洞

Belkin F9K1015 is a WiFi signal extender from Belkin Canada. A security vulnerability exists in the Belkin F9K1015 version 1.00.10, which stems from incorrect manipulation of the parameter webpage in the file /goform/formSetLanguage, which could result in a buffer overflow...