PT-2026-25393

PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, the Zenoh uORB subscriber allocates a stack VLA directly from the incoming payload length without bounds. A remote Zenoh publisher can send an oversized fragmented message to force an unbounded stack allocation and copy,...

EUVD-2025-9350

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2025-21970

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Bridge, fix the crash caused by LAG state check When removing LAG device from...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix the crash caused by the LAG state check. When removing a LAG device from a bridge, the NETDEVCHANGEUPPER event is triggered. The driver determines which lower devices need to flush all offloaded entries. If one of t...

CVE-2025-21970 net/mlx5: Bridge, fix the crash caused by LAG state check

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Bridge, fix the crash caused by LAG state check When removing LAG device from bridge, NETDEVCHANGEUPPER event is triggered. Driver finds the lower devices PFs to flush all the offloaded entries. And mlx5lagissharedfdb i...

CVE-2025-21970

CVE-2025-21970 affects the Linux kernel mlx5 bridge implementation (net/mlx5) where removing a LAG device from a bridge can crash the system. The root cause is a sequence where, during NETDEV_CHANGEUPPER, the driver checks mlx5_lag_is_shared_fdb and may call mlx5_esw_bridge_lag_rep_get() which re...

CVE-2025-21970 net/mlx5: Bridge, fix the crash caused by LAG state check

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Bridge, fix the crash caused by LAG state check When removing LAG device from bridge, NETDEVCHANGEUPPER event is triggered. Driver finds the lower devices PFs to flush all the offloaded entries. And mlx5lagissharedfdb i...