Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989824)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989824 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ipv6: ensure we call ipv6mcdown at most once There are two reasons for addrconfnotify to be...

rose: fix dangling neighbour pointers in rose_rt_device_down()

...

Linux Distros Unpatched Vulnerability : CVE-2025-38377

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rose: fix dangling neighbour pointers in rosertdevicedown There are two bugs in rosertdevicedown that can cause use-after-free: 1. The loop bound t-count is...

Linux Distros Unpatched Vulnerability : CVE-2022-49008

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: can: can327: can327feedframetonetdev: fix potential skb leak when netdev is down In...

The vulnerability of the ax25_dev_device_down() function in the net/ax25/ax25_dev.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ax25devdevicedown function in the net/ax25/ax25dev.c module of the Linux operating system is related to a resource leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE CVE-2022-49008

In the Linux kernel, the following vulnerability has been resolved: can: can327: can327feedframetonetdev: fix potential skb leak when netdev is down In can327feedframetonetdev, it did not free the skb when netdev is down, and all callers of can327feedframetonetdev did not free allocated skb too...

UBUNTU-CVE-2024-50040

In the Linux kernel, the following vulnerability has been resolved: igb: Do not bring the device up after non-fatal error Commit 004d25060c78 "igb: Fix igbdown hung on surprise removal" changed igbioerrordetected to ignore non-fatal pcie errors in order to avoid hung task that can happen when...

CVE-2024-50040

CVE-2024-50040 concerns the igb driver in the Linux kernel. The issue stemmed from igb_io_error_detected() treating transient non-fatal PCIe errors as non-fatal, which could lead igb_io_resume() to assume the device was still up and attempt a bring-up, causing a kernel panic during recovery from ...

DEBIAN-CVE-2022-48910

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: ensure we call ipv6mcdown at most once There are two reasons for addrconfnotify to be called with NETDEVDOWN: either the network device is actually going down, or IPv6 was disabled on the interface. If either of them...

UBUNTU-CVE-2022-48910

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: ensure we call ipv6mcdown at most once There are two reasons for addrconfnotify to be called with NETDEVDOWN: either the network device is actually going down, or IPv6 was disabled on the interface. If either of them...

SUSE CVE-2024-38554

In the Linux kernel, the following vulnerability has been resolved: ax25: Fix reference count leak issue of netdevice There is a reference count leak issue of the object "netdevice" in ax25devdevicedown. When the ax25 device is shutting down, the ax25devdevicedown drops the reference count of...

SUSE CVE-2024-38602

In the Linux kernel, the following vulnerability has been resolved: ax25: Fix reference count leak issues of ax25dev The ax25addrax25dev and ax25devdevicedown exist a reference count leak issue of the object "ax25dev". Memory leak issue in ax25addrax25dev: The reference count of the object...

UBUNTU-CVE-2024-38602

In the Linux kernel, the following vulnerability has been resolved: ax25: Fix reference count leak issues of ax25dev The ax25addrax25dev and ax25devdevicedown exist a reference count leak issue of the object "ax25dev". Memory leak issue in ax25addrax25dev: The reference count of the object...

The vulnerability of the ax25_dev_device_down() function in the implementation of the Amateur Radio X.25 PLP (Rose) protocol in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ax25devdevicedown function in the net/ax25/ax25dev.c module, which is part of the Amateur Radio X.25 PLP Rose protocol implementation in the Linux operating system, relates to the reutilization of previously freed memory due to concurrent access to resources. Exploiting...

SUSE CVE-2024-26803

In the Linux kernel, the following vulnerability has been resolved: net: veth: clear GRO when clearing XDP even when down veth sets NETIFFGRO automatically when XDP is enabled, because both features use the same NAPI machinery. The logic to clear NETIFFGRO sits in vethdisablexdp which is called...