Important: kernel-livepatch-6.1.147-172.266

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix backlog accounting in qdiscdequeueinternal CVE-2025-39677 In the Linux kernel, the following vulnerability has been resolved: fs/buffer: fix use-after-free when call bhread helper CVE-2025-39691 In...

USN-7853-3 linux-azure, linux-azure-4.15 vulnerabilities

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this t...

CVE-2025-10259

Improper Validation of Specified Quantity in Input vulnerability in TCP Communication Function on Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote attacker to disconnect the connection by sending specially crafted TCP packets to cause a denial-of-service DoS condition...

EUVD-2025-37980

Improper Validation of Specified Quantity in Input vulnerability in TCP Communication Function on Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote attacker to disconnect the connection by sending specially crafted TCP packets to cause a denial-of-service DoS condition...

Mitsubishi Electric MELSEC iQ-F Series CPU 安全漏洞

The Mitsubishi Electric MELSEC iQ-F Series CPU is a series of CPU modules from Mitsubishi Electric Japan. A security vulnerability exists in the Mitsubishi Electric MELSEC iQ-F Series CPUs that originates from improper validation of the number of inputs in the TCP communication function, which...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990409)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990409 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: do not accept ACK of bytes we never sent This patch is based on a detailed report and ideas...

Malicious code in wayspiritmcp-tpa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 523cbbda7a0fda2addfcd432b1bfcc1df072ee67a593ffce535b7da7005caae8 Package seems to provide an MCP server, but in fact contains attempts to make an LLM agent break safeguards. As the request is about leaves just a flag, it see...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988839)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988839 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: tcprtxsynack can be called from process context Laurent reported the enclosed report 1 This...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990022)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990022 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctltcpminsndmss. While reading sysctltcpminsndmss, it can be change...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989862)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989862 advisory. In the Linux kernel, the following vulnerability has been resolved: ppp: reject claimed-as-LCP but actually malformed packets Since 'pppasyncencode' assumes valid LC...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990228)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990228 advisory. In the Linux kernel, the following vulnerability has been resolved: ppp: reject claimed-as-LCP but actually malformed packets Since 'pppasyncencode' assumes valid LC...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: TCP: Proper signedness in the calculation of remaining space in an skb object. Syzkaller reported a bug 1 where sk-skforwardalloc could overflow. When we send data, if an skb object exists at the end of the write queue, the kerne...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: Net: Ethernet: Cortina: Use TOE/TSO for all TCP protocols. It is desirable to enable the hardware accelerator to also process non-segmented TCP frames. We can pass the skb-len value to the “TOE/TSO” offloader, which will handle...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Added freetransport operations in ksmbd connections. The freetransport function for TCP connections can be called from smdbdirect. This can cause a kernel error. This patch adds freetransport operations in ksmbd connection...

CVE-2025-61234

Incorrect access control on Dataphone A920 v2025.07.161103 exposes a service on port 8888 by default on the local network without authentication. This allows an attacker to interact with the device via a TCP socket without credentials. Additionally, sending an HTTP request to the service on port...

nbd: restrict sockets to TCP and UDP

...

kernel: sctp: linearize cloned gso packets in sctp_rcv

A flaw use of uninitialized memory uncontrolled and invisible by attacker in the Linux kernel SCTP transport protocol was found in the way user triggers malicious SCTP packets. A remote user could use this flaw to crash the system. The bug actual only for systems where SCTP protocol being enabled...

Moderate: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Vulnerabilities of the functions nvme_tcpFetchRequest(), nvme_tcpInitRequest(), nvme_tcpHandleR2T(), and nvme_tcpSubmitAsyncEvent() in the Linux operating system’s kernel, allowing a hacker to cause a service failure

The vulnerabilities of the functions nvmetcpFetchRequest, nvmetcpInitRequest, nvmetcpHandleR2T, and nvmetcpSubmitAsyncEvent driver/nvme/host/tcp.c in the Linux kernel involve executing a loop with an unreachable exit condition. Exploiting these vulnerabilities can allow an attacker to cause servi...

CVE-2025-40080

In the Linux kernel, the following vulnerability has been resolved: nbd: restrict sockets to TCP and UDP Recently, syzbot started to abuse NBD with all kinds of sockets. Commit cf1b2326b734 "nbd: verify socket is supported during setup" made sure the socket supported a shutdown method. Explicitel...