Linux Distros Unpatched Vulnerability : CVE-2025-37917

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll Use spinlockirqsav...

Linux Distros Unpatched Vulnerability : CVE-2024-39286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect execution-assigned permissions in the Linux kernel mode driver for the IntelR 800 Series Ethernet Driver before version 1.15.4 may allow an...

SUSE CVE-2025-38331

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Use TOE/TSO on all TCP It is desireable to push the hardware accelerator to also process non-segmented TCP frames: we pass the skb-len to the "TOE/TSO" offloader and it will handle them. Without this quirk...

UBUNTU-CVE-2025-38331

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Use TOE/TSO on all TCP It is desireable to push the hardware accelerator to also process non-segmented TCP frames: we pass the skb-len to the "TOE/TSO" offloader and it will handle them. Without this quirk...

CVE-2025-38331 net: ethernet: cortina: Use TOE/TSO on all TCP

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Use TOE/TSO on all TCP It is desireable to push the hardware accelerator to also process non-segmented TCP frames: we pass the skb-len to the "TOE/TSO" offloader and it will handle them. Without this quirk...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix iasize underflow CVE-2022-48828 In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsocket: fix sk refcount leaks CVE-2024-46855 In the Linux kernel, the following...

Vulnerability of the ice_dpll_init() function in the module drivers/net/ethernet/intel/ice/ice_dpll.c – A driver for supporting Ethernet network adapters in Intel-based Linux operating systems, which allows a hacker to cause a service failure.

Vulnerability of the icedpllinit function in the drivers/net/ethernet/intel/ice/icedpll.c file – The Linux kernel-based Ethernet adapter driver has a vulnerability related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability of the mlxsw_thermal_set_cur_state() function in the drivers/net/ethernet/mellanox/mlxsw/core_thermal.c module – The Mellanox Ethernet network adapter support driver for Linux operating systems, which allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the mlxswthermalsetcurstate function in the drivers/net/ethernet/mellanox/mlxsw/corethermal.c module – The Mellanox Ethernet network adapter driver for Linux operating systems is vulnerable due to buffer overflow attacks. Exploiting this vulnerability could allow attackers to...

Vulnerability of the aq_ptp_ring_alloc() function in the drivers/net/ethernet/aquantia/atlantic/aq_ptp.c module – A driver for supporting Ethernet adapter cards with a Quantia Atlantic chipset in the Linux operating system, which allows a hacker to cause a service failure.

Vulnerability of the aqptpringalloc function in the drivers/net/ethernet/aquantia/atlantic/aqptp.c module – The Ethernet adapter driver with the aQuantia Atlantic chipset in the Linux operating system is vulnerable to a vulnerability where previously released memory is reclaimed. Exploiting this...

Vulnerability of the temac_start_xmit() function in the drivers/net/ethernet/xilinx/ll_temac_main.c module – A driver for supporting Ethernet network adapters in the Linux operating system, which allows a hacker to cause a service failure.

Vulnerability of the temacstartxmit function in the drivers/net/ethernet/xilinx/lltemacmain.c module – The Linux kernel’s Ethernet adapter support driver is vulnerable due to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a system...

Vulnerability of the efx_nic_initinterrupt() function in the drivers/net/ethernet/sfc/nic.c module – A driver for supporting Ethernet network adapters in the Linux kernel, which allows a hacker to cause a service failure.

Vulnerability of the efxnicinitinterrupt function in the drivers/net/ethernet/sfc/nic.c module – The Linux kernel’s Ethernet network adapter support driver has a vulnerability where resources are not released after their useful life has ended. Exploiting this vulnerability could allow an attacker...

Vulnerability of the xrx200_alloc_skb() function in the drivers/net/ethernet/lantiq_xrx200.c module – This driver for network adapter Ethernet in the Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the xrx200allocskb function in the drivers/net/ethernet/lantiqxrx200.c module – The Linux kernel’s Ethernet adapter driver relies on unconstrained and unrestricted resource allocation. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrit...

Vulnerability of the fec_enet_init() function in the drivers/net/ethernet/freescale/fec_main.c module – The driver for supporting Ethernet adapter devices in the Freescale Linux operating system, which allows an attacker to gain access to protected information.

Vulnerability of the fecenetinit function in the drivers/net/ethernet/freescale/fecmain.c module – The driver for supporting Ethernet adapter devices in the Freescale Linux operating system is vulnerable due to improper memory release before deleting the last reference memory leak. Exploiting thi...

SUSE CVE-2022-50039

In the Linux kernel, the following vulnerability has been resolved: stmmac: intel: Add a missing clkdisableunprepare call in intelethpciremove Commit 09f012e64e4b "stmmac: intel: Fix clock handling on error and remove paths" removed this clkdisableunprepare This was partly revert by commit...

CVE-2022-50039

In the Linux kernel, the following vulnerability has been resolved: stmmac: intel: Add a missing clkdisableunprepare call in intelethpciremove Commit 09f012e64e4b "stmmac: intel: Fix clock handling on error and remove paths" removed this clkdisableunprepare This was partly revert by commit...

CVE-2022-50039 stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove()

In the Linux kernel, the following vulnerability has been resolved: stmmac: intel: Add a missing clkdisableunprepare call in intelethpciremove Commit 09f012e64e4b "stmmac: intel: Fix clock handling on error and remove paths" removed this clkdisableunprepare This was partly revert by commit...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fixed an out-of-bound memcpy call during ethtool -w When retrieving the FW core dump using ethtool, memory corruption can sometimes occur. BUG: KFENCE: Memory corruption in bnxtgetcoredump+0x3ef/0x670 bnxten Corrupted...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: return fail if interface is down in bnxtqueuememalloc The bnxtqueuememalloc function is called to allocate new queue memory when a queue is restarted. It internally accesses the rx buffer descriptor corresponding to th...

USN-7540-1: Linux kernel (Raspberry Pi) vulnerabilities

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2024-23848 Attila Szász discovered that the HFS+ file system...

The vulnerability of the ice_vsi_free() function in the Intel Ethernet driver for Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the icevsifree function in the Intel Ethernet driver for Linux operating systems is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...