PT-2025-22196

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been resolved, specifically in the mtk eth soc component of the Ethernet network driver. The problem occurs when the mtk poll rx function detects the MTK...

Ubuntu 24.04 LTS : Linux kernel (Azure, N-Series) vulnerabilities (USN-7468-1)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7468-1 advisory. Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker...

kernel: asix: fix uninit-value in asix_mdio_read()

In the Linux kernel, the following vulnerability has been resolved: asix: fix uninit-value in asixmdioread asixreadcmd may read less than sizeofsmsr bytes and in this case smsr will be uninitialized. Fail log: BUG: KMSAN: uninit-value in asixcheckhostenable drivers/net/usb/asixcommon.c:82 inline...

Vulnerability of the nfp_cpp_area_cache_add() function in the drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c file – a driver for supporting Ethernet network adapters in the Linux operating system, which allows an attacker to cause a service failure.

Vulnerability of the nfpcppareacacheadd function in the drivers/net/ethernet/netronome/nfp/nfpcore/nfpcppcore.c file – The Linux kernel’s Ethernet adapter support driver has a vulnerability related to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to caus...

Vulnerability of the igb_clean_tx_ring() function in the drivers/net/ethernet/intel/igb/igb_main.c module – a driver for supporting Ethernet adapter support in Linux operating systems. This vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the igbcleantxring function in the drivers/net/ethernet/intel/igb/igbmain.c module – The Linux kernel’s Ethernet adapter support driver relies on the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Vulnerability of the mlx5_coredestroy_cq() function in the drivers/net/ethernet/mellanox/mlx5/core/cq.c file – a driver for supporting Mellanox Ethernet network adapters in the Linux operating system, which allows an attacker to cause a service failure.

Vulnerability of the mlx5coredestroycq function in the drivers/net/ethernet/mellanox/mlx5/core/cq.c module – The drivers for Mellanox Ethernet network adapters in Linux operating systems are vulnerable to a memory leak before the last reference is freed. Exploiting this vulnerability could allow ...

Vulnerability of the sun8i_dwmac_dmainterrupt() function in the drivers/net/ethernet/stmicro/stmmac/dwmac-sun8i.c module – A driver for supporting Ethernet network adapters in the Linux operating system, which allows an attacker to compromise the integrity of protected information.

Vulnerability of the sun8idwmacdmainterrupt function in the drivers/net/ethernet/stmicro/stmmac/dwmac-sun8i.c module – The Linux kernel’s Ethernet adapter support driver has a vulnerability related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability cou...

PT-2025-20523

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, related to the bnxt Ethernet driver. The issue arises from a missing ring index trim on the error path, which can cause a crash...

Vulnerability of the mlx5_cmd_init() function in the drivers/net/ethernet/mellanox/mlx5/core/cmd.c file – This is a driver for supporting Mellanox Ethernet network adapters in Linux operating systems. It allows a hacker to cause a service failure.

Vulnerability of the mlx5cmdinit function in the drivers/net/ethernet/mellanox/mlx5/core/cmd.c file – The Mellanox Ethernet network adapter driver for Linux operating systems is vulnerable due to a reliance on the NULL pointer dereferencing mechanism. Exploiting this vulnerability could allow an...

Vulnerability of the hclgeFetchRegPfReg() function in the drivers/net/ethernet/hisilicon/hns3/hns3pf/hclgeRegs.c module – Linux kernel’s Ethernet adapter support driver, which allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the hclgeFetchRegPfReg function in the drivers/net/ethernet/hisilicon/hns3/hns3pf/hclgeRegCs.c module – The Linux kernel’s Ethernet adapter support driver has a vulnerability related to buffer overflow attacks. Exploiting this vulnerability could allow attackers to compromise the...

Vulnerability of the iavf_init_module() function in the drivers/net/ethernet/intel/iavf/iavf_main.c module – This is a driver for supporting Ethernet network adapters in Linux kernel-based operating systems. It allows attackers to gain access to protected information.

The vulnerability of the iavfinitmodule function in the drivers/net/ethernet/intel/iavf/iavfmain.c module exists. This vulnerability in the Linux kernel’s Ethernet driver code allows attackers to access protected information...

Vulnerability of the qlcnic_83xx_add_rings() function in the drivers/net/ethernet/qlogic/qlcnic/qlcnic_83xx_hw.c module – A driver for supporting QLogic Ethernet network adapters in Linux kernels, which allows a hacker to cause service failure.

Vulnerability of the qlcnic83xxaddrings function in the drivers/net/ethernet/qlogic/qlcnic/qlcnic83xxhw.c module – The Linux operating system’s Ethernet adapter support driver is vulnerable due to a reliance on the NULL pointer pointer. Exploiting this vulnerability could allow an attacker to cau...

USN-7413-1: Linux kernel (IoT) vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. CVE-2022-38096 Ye Zhang and Nicolas Wu discovered th...

CVE-2025-22006

CVE-2025-22006 affects the Linux kernel net/ethernet ti am65 cpsw driver: registering TX/RX DMA interrupts before their NAPI callbacks can cause a NULL pointer dereference. The issue has been fixed in kernel commits (see kernel.org references) and Astra/Oracle advisories indicate the vulnerabilit...

The vulnerability of the mlx5ehandle Rx_cqe_mpwrq_shampo() function in the Ethernet adapter driver of Mellanox’s Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mlx5ehandlerxcqempwrqshampo function in the Mellanox Ethernet network adapter driver for Linux operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

USN-7401-1: Linux kernel (AWS) vulnerabilities

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2024-23848 Attila Szász discovered that the HFS+ file system...

CVE-2025-21961

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix truesize for mb-xdp-pass case When mb-xdp is set and return is XDPPASS, packet is converted from xdpbuff to skbuff with xdpupdateskbsharedinfo in bnxtxdpbuildskb. bnxtxdpbuildskb passes incorrect truesize argument ...

Vulnerability of the ice_bridge_setlink() function in the drivers/net/ethernet/intel/ice/ice_main.c module – A driver for supporting Ethernet network adapters in Intel-based Linux operating systems, which allows a hacker to cause a service failure.

Vulnerability of the icebridgesetlink function in the drivers/net/ethernet/intel/ice/icemain.c module – The driver for supporting Ethernet network adapters in Linux operating systems is vulnerable due to the use of a NULL pointer dereferencing. Exploiting this vulnerability could allow an attacke...

Ubuntu 20.04 LTS : Linux kernel (FIPS) vulnerabilities (USN-7393-1)

"The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7393-1 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cau...

SUSE CVE-2023-52998

In the Linux kernel, the following vulnerability has been resolved: net: fec: Use pagepoolputfullpage when freeing rx buffers The pagepoolreleasepage was used when freeing rx buffers, and this function just unmaps the page if mapped and does not recycle the page. So after hundreds of down/up the...