SUSE CVE-2025-38186

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix double invocation of bnxtulpstop/bnxtulpstart Before the commit under the Fixes tag below, bnxtulpstop and bnxtulpstart were always invoked in pairs. After that commit, the new bnxtulprestart can be invoked after...

DEBIAN-CVE-2025-38184

In the Linux kernel, the following vulnerability has been resolved: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer The reproduction steps: 1. create a tun interface 2. enable l2 bearer 3. TIPCNLUDPGETREMOTEIP with media name set to tun tipc: Started in network mode tipc: Nod...

CVE-2025-38184

In the Linux kernel, the following vulnerability has been resolved: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer The reproduction steps: 1. create a tun interface 2. enable l2 bearer 3. TIPCNLUDPGETREMOTEIP with media name set to tun tipc: Started in network mode tipc: Nod...

AZL-64785 CVE-2025-38184 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer The reproduction steps: 1. create a tun interface 2. enable l2 bearer 3. TIPCNLUDPGETREMOTEIP with media name set to tun tipc: Started in network mode tipc: Nod...

UBUNTU-CVE-2025-38184

In the Linux kernel, the following vulnerability has been resolved: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer The reproduction steps: 1. create a tun interface 2. enable l2 bearer 3. TIPCNLUDPGETREMOTEIP with media name set to tun tipc: Started in network mode tipc: Nod...

Multiple vulnerabilities in Endress+Hauser MEAC300-FNADE4

Several vulnerabilities in the Endress+Hauser MEAC300-FNADE4 were discovered, that can be accessed via Ethernet...

UBUNTU-CVE-2025-38153

In the Linux kernel, the following vulnerability has been resolved: net: usb: aqc111: fix error handling of usbnet read calls Syzkaller, courtesy of syzbot, identified an error see report 1 in aqc111 driver, caused by incomplete sanitation of usb read calls' results. This problem is quite similar...

Unauthorized Access Vulnerability in MOXA ioLogik E1213

The MOXA ioLogik E1213 is an industrial grade remote Ethernet I/O module. An unauthorized access vulnerability exists in the MOXA ioLogik E1213, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in ioLogik E1210-T of Mosaic Technology (Shanghai) Co.

The ioLogik E1210-T is an industrial Ethernet module. Mosaic Technology Shanghai Co. ioLogik E1210-T suffers from an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information...

Vulnerability of the ice_dpll_init() function in the module drivers/net/ethernet/intel/ice/ice_dpll.c – A driver for supporting Ethernet network adapters in Intel-based Linux operating systems, which allows a hacker to cause a service failure.

Vulnerability of the icedpllinit function in the drivers/net/ethernet/intel/ice/icedpll.c file – The Linux kernel-based Ethernet adapter driver has a vulnerability related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability of the aq_ptp_ring_alloc() function in the drivers/net/ethernet/aquantia/atlantic/aq_ptp.c module – A driver for supporting Ethernet adapter cards with a Quantia Atlantic chipset in the Linux operating system, which allows a hacker to cause a service failure.

Vulnerability of the aqptpringalloc function in the drivers/net/ethernet/aquantia/atlantic/aqptp.c module – The Ethernet adapter driver with the aQuantia Atlantic chipset in the Linux operating system is vulnerable to a vulnerability where previously released memory is reclaimed. Exploiting this...

Vulnerability of the mlxsw_thermal_set_cur_state() function in the drivers/net/ethernet/mellanox/mlxsw/core_thermal.c module – The Mellanox Ethernet network adapter support driver for Linux operating systems, which allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the mlxswthermalsetcurstate function in the drivers/net/ethernet/mellanox/mlxsw/corethermal.c module – The Mellanox Ethernet network adapter driver for Linux operating systems is vulnerable due to buffer overflow attacks. Exploiting this vulnerability could allow attackers to...

Vulnerability of the temac_start_xmit() function in the drivers/net/ethernet/xilinx/ll_temac_main.c module – A driver for supporting Ethernet network adapters in the Linux operating system, which allows a hacker to cause a service failure.

Vulnerability of the temacstartxmit function in the drivers/net/ethernet/xilinx/lltemacmain.c module – The Linux kernel’s Ethernet adapter support driver is vulnerable due to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a system...

Vulnerability of the efx_nic_initinterrupt() function in the drivers/net/ethernet/sfc/nic.c module – A driver for supporting Ethernet network adapters in the Linux kernel, which allows a hacker to cause a service failure.

Vulnerability of the efxnicinitinterrupt function in the drivers/net/ethernet/sfc/nic.c module – The Linux kernel’s Ethernet network adapter support driver has a vulnerability where resources are not released after their useful life has ended. Exploiting this vulnerability could allow an attacker...

Vulnerability of the fec_enet_init() function in the drivers/net/ethernet/freescale/fec_main.c module – The driver for supporting Ethernet adapter devices in the Freescale Linux operating system, which allows an attacker to gain access to protected information.

Vulnerability of the fecenetinit function in the drivers/net/ethernet/freescale/fecmain.c module – The driver for supporting Ethernet adapter devices in the Freescale Linux operating system is vulnerable due to improper memory release before deleting the last reference memory leak. Exploiting thi...

Vulnerability of the xrx200_alloc_skb() function in the drivers/net/ethernet/lantiq_xrx200.c module – This driver for network adapter Ethernet in the Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the xrx200allocskb function in the drivers/net/ethernet/lantiqxrx200.c module – The Linux kernel’s Ethernet adapter driver relies on unconstrained and unrestricted resource allocation. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrit...

The vulnerability of the ec_bhfremove() function in the drivers/net/ethernet/ec_bhf.c file allows a hacker to cause a service failure in Linux-based systems with Ethernet network adapters.

The vulnerability of the ecbhfremove function in the drivers/net/ethernet/ecbhf.c file, which is part of Linux’s Ethernet network adapter support, stems from the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability of the igb_clean_tx_ring() function in the drivers/net/ethernet/intel/igb/igb_main.c module – A driver for supporting Ethernet network adapters in Intel-based Linux operating systems, which allows a hacker to cause a service failure.

Vulnerability of the igbcleantxring function in the drivers/net/ethernet/intel/igb/igbmain.c module – The driver for supporting Intel Ethernet network adapters in the Linux operating system is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability can allow a...

CVE-2022-50220

In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix linkwatch use-after-free on disconnect usbnet uses the work usbnetdeferredkevent to perform tasks which may sleep. On disconnect, completion of the work was originally awaited in -ndostop. But in 2003, that was moved ...

SUSE CVE-2022-50039

In the Linux kernel, the following vulnerability has been resolved: stmmac: intel: Add a missing clkdisableunprepare call in intelethpciremove Commit 09f012e64e4b "stmmac: intel: Fix clock handling on error and remove paths" removed this clkdisableunprepare This was partly revert by commit...