Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: A possible memory leak has been fixed in stmmacdvrprobe. The bitmapfree function should be called to release priv-afxdpzcqps when createsinglethreadworkqueue fails. Otherwise, a memory leak will occur. Therefore, we...

PT-2026-94428

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the octeontx2-pf driver when setting up representors. The af xdp zc qidx pointer, which tracks receive queues using AF XDP zero-copy, remains NULL fo...

PT-2026-94490

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the virtio net driver where the virtnet rx resize function fails to resize the rq-xsk buffs XSK buffer array when an AF XDP socket is attached. If the ring size...

PT-2026-90132

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the xdp convert zc to xdp frame function where an XSK packet is cloned into an order-0 page and incorrectly advertises PAGE SIZE as its frame size. This allows the...

PT-2026-83015

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the interface fails to go down when an AF XDP zero-copy application is killed abruptly. In this scenario, the XSK pool is torn down while NAPI New API, a mechanism...

PT-2026-79715

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description AF XDP accepts a TX metadata length as small as eight bytes, whereas every supported request requires flags and at least one eight-byte request field. This allows the kernel to read beyo...

PT-2026-73012

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer leak exists in the xsk drop skb function during AF XDP multi-buffer Tx operations. The issue occurs when a partially built multi-buffer skb is discarded in three scenarios: when...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: xsk: Fixed a race condition in the AFXDP generic RX path. The rxlock function was moved from xsksocket to xskbuffpool. Synchronization issues were fixed for the shared umem mode in the generic RX path, where multiple sockets...

SUSE CVE-2026-43092

In the Linux kernel, the following vulnerability has been resolved: xsk: validate MTU against usable frame size on bind AFXDP bind currently accepts zero-copy pool configurations without verifying that the device MTU fits into the usable frame space provided by the UMEM chunk. This becomes a...

CVE-2026-43093

A flaw was found in the Linux kernel's xsk AFXDP subsystem due to insufficient validation of the User Memory UMEM headroom. This vulnerability could lead to memory corruption, specifically the skbsharedinfo data structure, if multi-buffer is enabled. Such corruption could result in system...

CVE-2026-43092

In the Linux kernel, the following vulnerability has been resolved: xsk: validate MTU against usable frame size on bind AFXDP bind currently accepts zero-copy pool configurations without verifying that the device MTU fits into the usable frame space provided by the UMEM chunk. This becomes a...

SUSE CVE-2026-31691

In the Linux kernel, the following vulnerability has been resolved: igb: remove napisynchronize in igbdown When an AFXDP zero-copy application terminates abruptly e.g., kill -9, the XSK buffer pool is destroyed but NAPI polling continues. igbcleanrxirqzc repeatedly returns the full budget,...

Linux Distros Unpatched Vulnerability : CVE-2026-31691

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - igb: remove napisynchronize in igbdown When an AFXDP zero-copy application terminates abruptly e.g., kill -9, the XSK buffer pool is destroyed but NAPI polling...

CVE-2026-31691

In the Linux kernel, the following vulnerability has been resolved: igb: remove napisynchronize in igbdown When an AFXDP zero-copy application terminates abruptly e.g., kill -9, the XSK buffer pool is destroyed but NAPI polling continues. igbcleanrxirqzc repeatedly returns the full budget,...

EUVD-2026-25888

In the Linux kernel, the following vulnerability has been resolved: igb: remove napisynchronize in igbdown When an AFXDP zero-copy application terminates abruptly e.g., kill -9, the XSK buffer pool is destroyed but NAPI polling continues. igbcleanrxirqzc repeatedly returns the full budget,...

Security update for tcpreplay (important)

openSUSE Security Update: Security update for tcpreplay Announcement ID: openSUSE-SU-2026:0044-1 Rating: important References: 1218249 1221324 1222131 1243845 1247919 1248322 1248595 1248596 1248597 1248964 1250356 Cross-References: CVE-2023-4256 CVE-2023-43279 CVE-2024-22654 CVE-2024-3024...

openSUSE 16 Security Update : tcpreplay (openSUSE-SU-2025-20119-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025-20119-1 advisory. - update to 4.5.2: features added since 4.4.4 - fix/recalculate header checksum for ipv6-frag - IPv6 frag checksum support - AFXDP socket suppor...

EUVD-2025-27908

Malicious code in bioql PyPI...

xsk: Fix race condition in AF_XDP generic RX path

...

Linux Distros Unpatched Vulnerability : CVE-2025-38570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: unlink NAPIs from queues on error to open CI hit a UaF in fbnic in the AFXDP...