CVE-2026-74623

A flaw was found in the Linux kernel's atlantic network driver. When a network interface using this driver is deinitialized while under transmit TX or XDPTX load, certain transmit buffers are not properly released. This oversight leads to a memory leak, which can prevent the proper shutdown of...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/meson: Reordered the driver deinit sequence to fix a use-after-free bug. Unloading the driver triggers the following KASAN warnings: +0.006275 ============================================================= +0.000029 BUG:...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ath11k: Disable spectral scan during spectral deinit. When ath11k modules are removed using rmmod with spectral scan enabled, a crash occurs. Different crash traces are observed for each instance of the crash. Send a command to...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: avoid null dereference in deinit. If venusprobe fails at pmruntimeputsync, it first calls hfiDestroy, and then hficoredeinit. Since hfiDestroy sets core-ops to NULL, hficoredeinit can no longer call the...

SUSE CVE-2026-74622

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: free RX pages of consumed but not refilled buffers aqringrxdeinit only walks swhead, swtail, the region posted to hardware. Since the page reuse strategy was added, a cleaned RX buffer keeps its page and its DMA...

SUSE CVE-2026-74623

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: free stranded TX buffers on ring deinit aqvecdeinit drains the TX rings with a single aqringtxclean call, which frees at most AQCFGTXCLEANBUDGET 256 descriptors and stops at hwhead, which no longer moves once...

AZL-97068 CVE-2026-74622 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: free RX pages of consumed but not refilled buffers aqringrxdeinit only walks swhead, swtail, the region posted to hardware. Since the page reuse strategy was added, a cleaned RX buffer keeps its page and its DMA...

CVE-2026-74623

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: free stranded TX buffers on ring deinit aqvecdeinit drains the TX rings with a single aqringtxclean call, which frees at most AQCFGTXCLEANBUDGET 256 descriptors and stops at hwhead, which no longer moves once...

AZL-97170 CVE-2026-74623 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: free stranded TX buffers on ring deinit aqvecdeinit drains the TX rings with a single aqringtxclean call, which frees at most AQCFGTXCLEANBUDGET 256 descriptors and stops at hwhead, which no longer moves once...

CVE-2026-74623 net: atlantic: free stranded TX buffers on ring deinit

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: free stranded TX buffers on ring deinit aqvecdeinit drains the TX rings with a single aqringtxclean call, which frees at most AQCFGTXCLEANBUDGET 256 descriptors and stops at hwhead, which no longer moves once...

CVE-2026-74623 net: atlantic: free stranded TX buffers on ring deinit

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: free stranded TX buffers on ring deinit aqvecdeinit drains the TX rings with a single aqringtxclean call, which frees at most AQCFGTXCLEANBUDGET 256 descriptors and stops at hwhead, which no longer moves once...

CVE-2026-74623

CVE-2026-74623 affects the Aquantia Atlantic network driver in the Linux kernel. The root cause is that aq_vec_deinit() drains TX rings with a single aq_ring_tx_clean() call limited to 256 descriptors and stops at hw_head, which no longer advances after hardware and NAPI are stopped. Completed de...

EUVD-2026-64560

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: free stranded TX buffers on ring deinit aqvecdeinit drains the TX rings with a single aqringtxclean call, which frees at most AQCFGTXCLEANBUDGET 256 descriptors and stops at hwhead, which no longer moves once...

CVE-2026-74622 net: atlantic: free RX pages of consumed but not refilled buffers

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: free RX pages of consumed but not refilled buffers aqringrxdeinit only walks swhead, swtail, the region posted to hardware. Since the page reuse strategy was added, a cleaned RX buffer keeps its page and its DMA...

Linux Distros Unpatched Vulnerability : CVE-2026-74623

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: atlantic: free stranded TX buffers on ring deinit aqvecdeinit drains the TX rings with a single aqringtxclean call, which frees at most AQCFGTXCLEANBUDGET...

PT-2026-79627

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: free RX pages of consumed but not refilled buffers aq ring rx deinit only walks sw head, sw tail, the region posted to hardware. Since the page reuse strategy was added, a cleaned RX buffer keeps its page and its D...

PT-2026-79628

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: free stranded TX buffers on ring deinit aq vec deinit drains the TX rings with a single aq ring tx clean call, which frees at most AQ CFG TX CLEAN BUDGET 256 descriptors and stops at hw head, which no longer moves...

EUVD-2026-55433

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix potential use-after-free in airohappedeinit airohappedeinit replaces the NPU pointer with NULL via rcureplacepointer but does not wait for existing RCU readers to exit before calling ppedeinit and airohanpuput...

CVE-2026-68332 net: airoha: Fix potential use-after-free in airoha_ppe_deinit()

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix potential use-after-free in airohappedeinit airohappedeinit replaces the NPU pointer with NULL via rcureplacepointer but does not wait for existing RCU readers to exit before calling ppedeinit and airohanpuput...

CVE-2026-68332

The CVE concerns a Linux kernel net/airoha issue where airoha_ppe_deinit() replaces the NPU pointer with NULL via rcu_replace_pointer() but does not wait for existing RCU readers, risking use-after-free when a reader still holds a reference. The fix adds synchronize_rcu() before ppe_deinit() to e...