Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/broadcom: Fixed a potential NULL dereferencing in srthermalprobe. The platformgetresource function may return NULL; proper checks should be added to avoid potential NULL dereferencings...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: cpufreq: brcmstb-avs-cpufreq – added a check for the return value of cpufreqcpuget. cpufreqcpuget may return NULL. To avoid NULL-reference checks, it should return 0 in case of an error. This issue was identified by the Linux...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

A problem with out-of-bound reading was detected in brcmfmac/cfg80211.c within the drivers/net/wireless/broadcom/brcm80211 directory of the Linux kernel. This issue can occur when the associnfo-reqlen data is larger than the size of the buffer, which is defined as WLEXTRABUFMAX, resulting in a...

The vulnerability of the `bnxt_init_one()` function in the `drivers/net/ethernet/broadcom/bnxt/bnxt.c` file of the Broadcom Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the bnxtinitone function in the drivers/net/ethernet/broadcom/bnxt/bnxt.c file of the Broadcom Ethernet network adapter driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause a service...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001426)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001426 advisory. In the Linux kernel, the following vulnerability has been resolved: bnx2x: Fix multiple UBSAN array-index-out-of-bounds Fix UBSAN warnings that occur when using a...

PT-2026-85031

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 25H2 through 26H1 VMware Fusion versions 25H2 through 26H1 Description An integer overflow exists in the VMXNET3 virtual network adapter within the hypervisor. A malicious actor with local administrative privileges...

The vulnerability of the `bnxt_async_event_process()` function in the `drivers/net/ethernet/broadcom/bnxt/bnxt.c` file of the Ethernet network adapter driver for Broadcom’s Linux operating system, which allows a hacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the bnxtasynceventprocess function in the drivers/net/ethernet/broadcom/bnxt/bnxt.c file of the Ethernet network adapter driver for Broadcom’s Linux operating system is related to the occurrence of operations outside of the buffer in memory. Exploiting this vulnerability coul...

The vulnerability of the `bcma_mdio_mii_register()` function in the `drivers/net/ethernet/broadcom/bgmac-bcma-mdio.c` driver code of the Linux kernel’s Ethernet adapter support module allows a hacker to cause a service failure.

The vulnerability of the bcmamdiomiiregister function in the drivers/net/ethernet/broadcom/bgmac-bcma-mdio.c driver for supporting Ethernet network adapters in the Linux operating system is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerabilities in the functions bcmaspremove() and bcmaspprobe() of the drivers/net/ethernet/broadcom/asp2/bcmasp.c driver, which is part of the Ethernet Broadcom network adapter driver for the Linux operating system, allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions bcmaspremove and bcmaspprobe in the drivers/net/ethernet/broadcom/asp2/bcmasp.c driver for Broadcom Ethernet network adapters in the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability could allo...

ROS-20260825-73-0027

The vulnerability of the bnxtgetnvramdirectory function in the drivers/net/ethernet/broadcom/bnxt/bnxtethtool.c file of the Broadcom Ethernet network adapter driver for the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer...

ROS-20260821-73-0072

The vulnerability of the cniccmstopbnx2xhw function in the drivers/net/ethernet/broadcom/cnic.c module of the Broadcom Ethernet network adapter driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote...

CVE-2026-72116

A flaw was found in the Linux kernel's Broadcom Controller Area Network CAN bus driver. When a CAN device is removed, the driver may fail to properly manage its receive and transmit operations. This can lead to receive filters not being correctly re-enabled after updates, preventing expected data...

CVE-2026-68192 wifi: brcmfmac: make release_scratchbuffers idempotent

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: make releasescratchbuffers idempotent brcmfpciereleasescratchbuffers frees the shared.scratch and shared.ringupd DMA buffers with dmafreecoherent but does not clear the pointers afterwards, unlike the sibling...

SUSE CVE-2026-64583

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: bdc: free IRQ and drain funcwakenotify before teardown The Broadcom BDC UDC driver registers its IRQ handler with devmrequestirq in bdcudcinit, so the IRQ is released by devm only after bdcremove returns. devm...

UBUNTU-CVE-2026-64583

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: bdc: free IRQ and drain funcwakenotify before teardown The Broadcom BDC UDC driver registers its IRQ handler with devmrequestirq in bdcudcinit, so the IRQ is released by devm only after bdcremove returns. devm...

CVE-2026-64583 usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: bdc: free IRQ and drain funcwakenotify before teardown The Broadcom BDC UDC driver registers its IRQ handler with devmrequestirq in bdcudcinit, so the IRQ is released by devm only after bdcremove returns. devm...

EUVD-2026-53770

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: bdc: free IRQ and drain funcwakenotify before teardown The Broadcom BDC UDC driver registers its IRQ handler with devmrequestirq in bdcudcinit, so the IRQ is released by devm only after bdcremove returns. devm...

CVE-2026-64583

Summary: CVE-2026-64583 affects the Linux kernel usb gadget Broadcom BDC UDC driver. The issue arises from the irq handling window after devm_request_irq() but before teardown, allowing a shared IRQ to dereference freed memory and cause NULL-deref or use-after-free in bdc_udc_interrupt and relate...

PT-2026-68416

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Broadcom BDC UDC driver contains a race condition during the removal process. The driver uses devm request irq in the bdc udc init function, which means the interrupt request IRQ is...

The vulnerability of the bnxt_shutdown() function in the drivers/net/ethernet/broadcom/bnxt/bnxt.c file of the Broadcom Ethernet network adapter driver in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bnxtshutdown function in the drivers/net/ethernet/broadcom/bnxt/bnxt.c file of the Broadcom Ethernet network adapter driver in the Linux operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an...