Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Avoid unregistering devlink regions that were never registered. Russell King reported that a system with mv88e6xxx dereferenced a NULL pointer when unbinding this driver:...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fixed a memory leak in sja1105setupdevlinkregions. When dsadevlinkregioncreate fails in sja1105setupdevlinkregions, priv-regions is not released...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix buffer overflow in sja1105setupdevlinkregions If an error occurs in dsadevlinkregioncreate, then the array ‘priv-regions’ will be accessed using a negative index -1. This issue was identified by the Linux...

The vulnerability of the sja1105_setup_devlink_regions() function in the drivers/net/dsa/sja1105/sja1105_devlink.c file of the NXP SJA1105 series switch driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the sja1105setupdevlinkregions function in the drivers/net/dsa/sja1105/sja1105devlink.c file of the NXP SJA1105 series switch driver for the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attac...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37787)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37787 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: avoid unregistering...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993078)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993078 advisory. In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix buffer overflow in sja1105setupdevlinkregions If an error occurs in...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992478)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992478 advisory. In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix buffer overflow in sja1105setupdevlinkregions If an error occurs in...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-988899)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988899 advisory. In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix memory leak in sja1105setupdevlinkregions When dsadevlinkregioncreate fail...

EUVD-2025-13013

Malicious code in bioql PyPI...

EUVD-2022-55311

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2025-37787

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered Russell...

Linux Distros Unpatched Vulnerability : CVE-2022-48959

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix memory leak in sja1105setupdevlinkregions When dsadevlinkregioncreate...

SUSE CVE-2022-50040

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix buffer overflow in sja1105setupdevlinkregions If an error occurs in dsadevlinkregioncreate, then 'priv-regions' array will be accessed by negative index '-1'. Found by Linux Verification Center...

DEBIAN-CVE-2022-50040

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix buffer overflow in sja1105setupdevlinkregions If an error occurs in dsadevlinkregioncreate, then 'priv-regions' array will be accessed by negative index '-1'. Found by Linux Verification Center...

UBUNTU-CVE-2022-50040

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix buffer overflow in sja1105setupdevlinkregions If an error occurs in dsadevlinkregioncreate, then 'priv-regions' array will be accessed by negative index '-1'. Found by Linux Verification Center...

SUSE CVE-2025-37787

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered Russell King reports that a system with mv88e6xxx dereferences a NULL pointer when unbinding this driver:...

DEBIAN-CVE-2025-37787

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered Russell King reports that a system with mv88e6xxx dereferences a NULL pointer when unbinding this driver:...

UBUNTU-CVE-2025-37787

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered Russell King reports that a system with mv88e6xxx dereferences a NULL pointer when unbinding this driver:...

CVE-2025-37787

CVE-2025-37787 affects the Linux kernel in the mv88e6xxx DSA driver. The issue arises when unbinding the driver: a NULL devlink global region pointer is passed to devlink_region_destroy(), causing a NULL-tolerant crash. The root cause is that some devlink regions (MV88E6XXX_REGION_STU and MV88E6X...

CVE-2025-37787 net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered Russell King reports that a system with mv88e6xxx dereferences a NULL pointer when unbinding this driver:...