33 matches found
PT-2026-122055
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry With AF XDP on a striding RQ, mlx5e defers releasing XSK buffers until an MPWQE is refilled. If XSK allocation then returns -ENOMEM, actual wq head is not advanced...
PT-2026-122023
In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak on error descriptor When the error bit is set in the RX completion descriptor, the buf state and its attached buffer should be freed. In the case of AF XDP ZC, the XSK buffer was not freed, leading to a...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: net: stmmac: A possible memory leak has been fixed in stmmacdvrprobe. The bitmapfree function should be called to release priv-afxdpzcqps when createsinglethreadworkqueue fails. Otherwise, a memory leak will occur. Therefore, we...
PT-2026-94428
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the octeontx2-pf driver when setting up representors. The af xdp zc qidx pointer, which tracks receive queues using AF XDP zero-copy, remains NULL fo...
PT-2026-94490
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the virtio net driver where the virtnet rx resize function fails to resize the rq-xsk buffs XSK buffer array when an AF XDP socket is attached. If the ring size...
PT-2026-90132
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the xdp convert zc to xdp frame function where an XSK packet is cloned into an order-0 page and incorrectly advertises PAGE SIZE as its frame size. This allows the...
PT-2026-83015
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the interface fails to go down when an AF XDP zero-copy application is killed abruptly. In this scenario, the XSK pool is torn down while NAPI New API, a mechanism...
PT-2026-79715
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description AF XDP accepts a TX metadata length as small as eight bytes, whereas every supported request requires flags and at least one eight-byte request field. This allows the kernel to read beyo...
PT-2026-73012
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer leak exists in the xsk drop skb function during AF XDP multi-buffer Tx operations. The issue occurs when a partially built multi-buffer skb is discarded in three scenarios: when...
Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: xsk: Fixed a race condition in the AFXDP generic RX path. The rxlock function was moved from xsksocket to xskbuffpool. Synchronization issues were fixed for the shared umem mode in the generic RX path, where multiple sockets...
SUSE CVE-2026-43092
In the Linux kernel, the following vulnerability has been resolved: xsk: validate MTU against usable frame size on bind AFXDP bind currently accepts zero-copy pool configurations without verifying that the device MTU fits into the usable frame space provided by the UMEM chunk. This becomes a...
CVE-2026-43093
A flaw was found in the Linux kernel's xsk AFXDP subsystem due to insufficient validation of the User Memory UMEM headroom. This vulnerability could lead to memory corruption, specifically the skbsharedinfo data structure, if multi-buffer is enabled. Such corruption could result in system...
CVE-2026-43092
In the Linux kernel, the following vulnerability has been resolved: xsk: validate MTU against usable frame size on bind AFXDP bind currently accepts zero-copy pool configurations without verifying that the device MTU fits into the usable frame space provided by the UMEM chunk. This becomes a...
SUSE CVE-2026-31691
In the Linux kernel, the following vulnerability has been resolved: igb: remove napisynchronize in igbdown When an AFXDP zero-copy application terminates abruptly e.g., kill -9, the XSK buffer pool is destroyed but NAPI polling continues. igbcleanrxirqzc repeatedly returns the full budget,...
Linux Distros Unpatched Vulnerability : CVE-2026-31691
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - igb: remove napisynchronize in igbdown When an AFXDP zero-copy application terminates abruptly e.g., kill -9, the XSK buffer pool is destroyed but NAPI polling...
CVE-2026-31691
In the Linux kernel, the following vulnerability has been resolved: igb: remove napisynchronize in igbdown When an AFXDP zero-copy application terminates abruptly e.g., kill -9, the XSK buffer pool is destroyed but NAPI polling continues. igbcleanrxirqzc repeatedly returns the full budget,...
EUVD-2026-25888
In the Linux kernel, the following vulnerability has been resolved: igb: remove napisynchronize in igbdown When an AFXDP zero-copy application terminates abruptly e.g., kill -9, the XSK buffer pool is destroyed but NAPI polling continues. igbcleanrxirqzc repeatedly returns the full budget,...
Security update for tcpreplay (important)
openSUSE Security Update: Security update for tcpreplay Announcement ID: openSUSE-SU-2026:0044-1 Rating: important References: 1218249 1221324 1222131 1243845 1247919 1248322 1248595 1248596 1248597 1248964 1250356 Cross-References: CVE-2023-4256 CVE-2023-43279 CVE-2024-22654 CVE-2024-3024...
openSUSE 16 Security Update : tcpreplay (openSUSE-SU-2025-20119-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025-20119-1 advisory. - update to 4.5.2: features added since 4.4.4 - fix/recalculate header checksum for ipv6-frag - IPv6 frag checksum support - AFXDP socket suppor...