kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts

A flaw was found in the Linux kernel's CAKE Common Applications Kept Enhanced network queue scheduler. A missing bounds check allows an internal traffic counter to underflow when processing network flows. A local attacker can exploit this vulnerability by sending crafted network traffic on a syst...

kernel: RDMA/core: Don't expose hw_counters outside of init net namespace

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access subsystem. Hardware counter sysfs attributes were unintentionally exposed to non-initial network namespaces. A local user operating within a non-initial network namespace could read these attributes, triggering an invalid...

kernel: RDMA/core: Don't expose hw_counters outside of init net namespace

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access subsystem. Hardware counter sysfs attributes were unintentionally exposed to non-initial network namespaces. A local user operating within a non-initial network namespace could read these attributes, triggering an invalid...

kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts

A flaw was found in the Linux kernel's CAKE Common Applications Kept Enhanced network queue scheduler. A missing bounds check allows an internal traffic counter to underflow when processing network flows. A local attacker can exploit this vulnerability by sending crafted network traffic on a syst...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990619)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990619 advisory. In the Linux kernel, the following vulnerability has been resolved: blk-iolatency: Fix inflight count imbalances and IO hangs on offline iolatency needs to track the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988773)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988773 advisory. In the Linux kernel, the following vulnerability has been resolved: blk-iolatency: Fix inflight count imbalances and IO hangs on offline iolatency needs to track the...

PT-2025-42267

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc1-syzkaller Description The iMON driver does not properly manage USB device references during disconnection, leading to a potential use-after-free condition. Specifically, the usb device reference count i...

Improper Rate Limiting

ethyca-fides is vulnerable to Improper Rate Limiting. The vulnerability is due to the webserver API incorrectly applying rate limits based on infrastructure IPs instead of client IPs and storing counters in-memory rather than in a shared store, which allows an attacker to bypass rate limiting...

PT-2025-49053

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the SCMI debug subsystem. If the subsystem fails to initialize, the debug root may be missing, leading to a NULL descriptor. This condition is not...

SUSE CVE-2023-53646

In the Linux kernel, the following vulnerability has been resolved: drm/i915/perf: add sentinel to xehpoabcounters Arrays passed to reginrangetable should end with empty record. The patch solves KASAN detected bug with signature: BUG: KASAN: global-out-of-bounds in...

jetty: HTTP/2 (including DNS over HTTPS) contains a design flaw and is vulnerable to "MadeYouReset" DoS attack through HTTP/2 control frames

A flaw was found in Jetty where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts...

Linux Distros Unpatched Vulnerability : CVE-2023-53488

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IB/hfi1: Fix possible panic during hotplug remove During hotplug remove it is possible that the update counters work might be pending, and may run after memory...

Linux Distros Unpatched Vulnerability : CVE-2023-53646

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/i915/perf: add sentinel to xehpoabcounters Arrays passed to reginrangetable should end...

SUSE CVE-2022-50541

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma: Reset UDMACHANRT byte counters to prevent overflow UDMACHANRTBCNTREG stores the real-time channel bytecount statistics. These registers are 32-bit hardware counters and the driver uses these counters to...

CVE-2023-53646

In the Linux kernel, the following vulnerability has been resolved: drm/i915/perf: add sentinel to xehpoabcounters Arrays passed to reginrangetable should end with empty record. The patch solves KASAN detected bug with signature: BUG: KASAN: global-out-of-bounds in...

CVE-2022-50541

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma: Reset UDMACHANRT byte counters to prevent overflow UDMACHANRTBCNTREG stores the real-time channel bytecount statistics. These registers are 32-bit hardware counters and the driver uses these counters to...

UBUNTU-CVE-2022-50541

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma: Reset UDMACHANRT byte counters to prevent overflow UDMACHANRTBCNTREG stores the real-time channel bytecount statistics. These registers are 32-bit hardware counters and the driver uses these counters to...

EUVD-2025-32779

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma: Reset UDMACHANRT byte counters to prevent overflow UDMACHANRTBCNTREG stores the real-time channel bytecount statistics. These registers are 32-bit hardware counters and the driver uses these counters to...

CVE-2022-50541

CVE-2022-50541 affects the Linux kernel dmaengine: ti: k3-udma driver. The vulnerability arises from 32-bit UDMA_CHAN_RT real-time bytecount counters (BCNT_REG) overflowing when transferring more than 4GB, which corrupts completion status. The fix resets/decreases the per-transaction byte count a...

CVE-2022-50541 dmaengine: ti: k3-udma: Reset UDMA_CHAN_RT byte counters to prevent overflow

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma: Reset UDMACHANRT byte counters to prevent overflow UDMACHANRTBCNTREG stores the real-time channel bytecount statistics. These registers are 32-bit hardware counters and the driver uses these counters to...