Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992948)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992948 advisory. In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix aqvec index out of range error The final update statement of the for loop...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992513)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992513 advisory. In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix aqvec index out of range error The final update statement of the for loop...

net: atlantic: fix fragment overflow handling in RX path

...

SUSE CVE-2025-68301

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix fragment overflow handling in RX path The atlantic driver can receive packets with more than MAXSKBFRAGS 17 fragments when handling large multi-descriptor packets. This causes an out-of-bounds write in...

EUVD-2025-203779

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix fragment overflow handling in RX path The atlantic driver can receive packets with more than MAXSKBFRAGS 17 fragments when handling large multi-descriptor packets. This causes an out-of-bounds write in...

CVE-2025-68301

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix fragment overflow handling in RX path The atlantic driver can receive packets with more than MAXSKBFRAGS 17 fragments when handling large multi-descriptor packets. This causes an out-of-bounds write in...

AZL-72652 CVE-2025-68301 affecting package kernel for versions less than 6.6.119.3-1

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix fragment overflow handling in RX path The atlantic driver can receive packets with more than MAXSKBFRAGS 17 fragments when handling large multi-descriptor packets. This causes an out-of-bounds write in...

CVE-2025-68301

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix fragment overflow handling in RX path The atlantic driver can receive packets with more than MAXSKBFRAGS 17 fragments when handling large multi-descriptor packets. This causes an out-of-bounds write in...

UBUNTU-CVE-2025-68301

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix fragment overflow handling in RX path The atlantic driver can receive packets with more than MAXSKBFRAGS 17 fragments when handling large multi-descriptor packets. This causes an out-of-bounds write in...

CVE-2025-68301 net: atlantic: fix fragment overflow handling in RX path

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix fragment overflow handling in RX path The atlantic driver can receive packets with more than MAXSKBFRAGS 17 fragments when handling large multi-descriptor packets. This causes an out-of-bounds write in...

CVE-2025-68301

CVE-2025-68301 affects the Linux kernel net:atlantic RX path. The vulnerability arises when the Atlantic driver receives large multi-descriptor packets that exceed MAX_SKB_FRAGS, causing an out-of-bounds write in skb_add_rx_frag_netmem() and a kernel panic. The fix adds an assumption of an extra ...

CVE-2025-68301 net: atlantic: fix fragment overflow handling in RX path

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix fragment overflow handling in RX path The atlantic driver can receive packets with more than MAXSKBFRAGS 17 fragments when handling large multi-descriptor packets. This causes an out-of-bounds write in...

PT-2025-51705

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The atlantic network driver in the Linux kernel is susceptible to a fragment overflow when handling large, multi-descriptor packets in the receive RX path. This occurs because the driver...

Linux Distros Unpatched Vulnerability : CVE-2025-68301

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: atlantic: fix fragment overflow handling in RX path The atlantic driver can receive packets with more than MAXSKBFRAGS 17 fragments when handling large...

LSN-0116-1: Kernel Live Patch Security Notice

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: eliminate double free in error handling logic Driver has a logic leak in ring data allocation/free, where aqringfree could be called multiple times on same ring, if system is under stress and got memory allocation...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989767)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989767 advisory. In the Linux kernel, the following vulnerability has been resolved: net: atlantic: remove aqnicdeinit when resume aqnicdeinit has been called while suspending, so we...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988703)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988703 advisory. In the Linux kernel, the following vulnerability has been resolved: net: atlantic: remove aqnicdeinit when resume aqnicdeinit has been called while suspending, so we...

Oracle Linux 7 : kernel (ELSA-2025-17161)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-17161 advisory. - ALSA: usb-audio: Fix an out-of-bounds bug in sndusbparseaudiointerface CVE-2022-48701 Orabug: 38493400 - md-raid10: fix KASAN warning CVE-2022-50211...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414522)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414522 advisory. In the Linux kernel through 5.15.2, hwatlutilsfwrpcwait in drivers/net/ethernet/aquantia/atlantic/hwatl/hwatlutils.c allows an attacker who can introduce a crafted...

Friday Squid Blogging: Squid Overfishing in the Southwest Atlantic

Article. Report...