SUSE CVE-2025-39769

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix lockdep warning during rmmod The commit under the Fixes tag added a netdevassertlocked in bnxtfreentpfltrs. The lock should be held during normal run-time but the assert will be triggered see below during bnxtremoveon...

CVE-2025-39769

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix lockdep warning during rmmod The commit under the Fixes tag added a netdevassertlocked in bnxtfreentpfltrs. The lock should be held during normal run-time but the assert will be triggered see below during bnxtremoveon...

CVE-2025-8007

A security issue exists in the protected mode of 1756-EN4TR and 1756-EN2TR communication modules, where a Concurrent Forward Close operation can trigger a Major Non-Recoverable MNFR fault. This condition may lead to unexpected system crashes and loss of device availability...

PT-2025-37227

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.16.0 Description: The Linux kernel contained a lockdep warning within the bnxt en module during device removal rmmod. A netdev assertion was incorrectly triggered during the bnxt remove one function, which...

CVE-2025-40757

A vulnerability has been identified in APOGEE PXC Series BACnet All versions, APOGEE PXC Series P2 Ethernet All versions, TALON TC Series BACnet All versions. Affected devices connected to the network allow unrestricted access to sensitive files, such as databases. This could allow an attacker to...

PT-2025-36680

Name of the Vulnerable Software and Affected Versions: APOGEE PXC Series BACnet affected versions not specified APOGEE PXC Series P2 Ethernet affected versions not specified TALON TC Series BACnet affected versions not specified Description: A vulnerability exists that allows unrestricted access ...

Rockwell Automation多款产品 安全漏洞

Rockwell Automation 1756-EN4 and others are products of Rockwell Automation, Inc.Rockwell Automation 1756-EN4 is a controller.Rockwell Automation 1756-ENT2R is an Ethernet communication The Rockwell Automation 1756-ENT4R is an Ethernet communication module. A security vulnerability exists in...

Linux Distros Unpatched Vulnerability : CVE-2025-39703

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net, hsr: reject HSR frame if skb can't hold tag Receiving HSR frame with insufficient space to hold HSR tag in the skb can result in a crash kernel BUG:...

SUSE-SU-2025:20653-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-46733: btrfs: fix qgroup reserve leaks in cowfilerange bsc1230708. - CVE-2025-38006: net: mctp: Do not access ifaindex when missing bsc1244930. -...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the possibility that gve may perform ethtool operations after shutdown...

net: phy: Don't register LEDs for genphy

...

net: bridge: xmit: make sure we have at least eth header len bytes

...

net: dsa: b53: do not enable EEE on bcm63xx

...

eth: bnxt: fix truesize for mb-xdp-pass case

...

net: ethernet: bgmac: Fix refcount leak in bcma_mdio_mii_register

...

eth: bnxt: always recalculate features after XDP clearing, fix null-deref

...

CVE-2025-56752

A vulnerability in the Ruijie RG-ES series switch firmware ESW1.01B1P39 enables remote attackers to fully bypass authentication mechanisms, providing them with unrestricted access to alter administrative settings and potentially seize control of affected devices via crafted HTTP POST request to...

An Earth-Shattering Kaboom: Bringing a Physical ICS Penetration Testing Environment to Life (Part 2)

Program Vulnerabilities and Manual Assessment This is the second in a three-part series on building and using a testing bench for Industrial Control Systems ICS. In this series, we will build a physical test bench, review program logic to find flaws, perform manual exploitation of commonly used I...

kernel: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()

In the Linux kernel, the following vulnerability has been resolved: bpf, testrun: Fix use-after-free issue in ethskbpkttype KMSAN reported a use-after-free issue in ethskbpkttype1. The cause of the issue was that ethskbpkttype accessed skb's data that didn't contain an Ethernet header. This occur...

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netsched: hfsc: Fix a potential UAF in hfscdequeue too CVE-2025-37823 kernel: i40e: fix MMIO write access to an invalid page in i40eclearhw CVE-2025-38200 kernel: RDMA/iwcm: Fix...