CVE-2026-5107 FRRouting FRR EVPN Type-2 Route bgp_evpn.c process_type2_route access control

A vulnerability has been found in FRRouting FRR up to 10.5.1. This affects the function processtype2route of the file bgpd/bgpevpn.c of the component EVPN Type-2 Route Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The attack is considered to ha...

CVE-2026-5107

FRRouting FRR up to 10.5.1 is affected by CVE-2026-5107 in the EVPN Type-2 Route Handler (bgpd/bgp_evpn.c, process_type2_route). The issue enables improper access controls via manipulation of the EVPN Type-2 Route processing. Access is remote, with a high attack complexity and the exploitability ...

CVE-2026-34472

Unauthenticated credential disclosure in the wizard interface in ZTE ZXHN H188A V6.0.10P2TE and V6.0.10P3N3TE allows unauthenticated attackers on the local network to retrieve sensitive credentials from the router's web management interface, including the default administrator password, WLAN PSK,...

The vulnerability of the macb_get_addr() function in the drivers/net/ethernet/cadence/macb_main.c file of the Ethernet network adapter driver from Cadence’s Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the macbgetaddr function in the drivers/net/ethernet/cadence/macbmain.c file of the Ethernet network adapter driver from Cadence’s Linux kernel lies in the occurrence of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a...

The vulnerability of the mtk_hwlro_get_fdir_all() function in the drivers/net/ethernet/mediatek/mtk_eth_soc.c module of the network adapter driver for Linux kernel allows a hacker to cause a service failure.

The vulnerability of the mtkhwlrogetfdirall function in the drivers/net/ethernet/mediatek/mtkethsoc.c module of the Linux network adapter driver software is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

PT-2026-28761

Name of the Vulnerable Software and Affected Versions FRRouting FRR versions up to 10.5.1 Description A security issue exists in FRRouting FRR related to improper access controls within the EVPN Type-2 Route Handler component. The issue is located in the process type2 route function of the bgpd/b...

The vulnerability of the prestera_devlink_alloc() function in the drivers/net/ethernet/marvell/prestera/prestera_devlink.c file of the Ethernet network adapter driver for the Marvell-based Linux operating system allows a hacker to cause a service failure.

The vulnerability of the presteradevlinkalloc function in the drivers/net/ethernet/marvell/prestera/presteradevlink.c file of the Ethernet network adapter driver for the Linux operating system is related to the passing of pointers. Exploiting this vulnerability could allow a remote attacker to...

net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup()

...

PT-2026-36373

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vxlan na create function where ND options are processed based on lengths provided within the options. A malformed option can cause the parser to advance beyond the...

The vulnerability of the tegra_eqos_probe() function in the drivers/net/ethernet/stmicro/stmmac/dwmac-dwc-qos-eth.c file of the Ethernet adapter support driver from STMicroelectronics’ Linux operating system allows a hacker to cause a service failure.

The vulnerability of the tegraeqosprobe function in the drivers/net/ethernet/stmicro/stmmac/dwmac-dwc-qos-eth.c file of the Ethernet adapter support driver from STMicroelectronics’ Linux operating system is related to the use of insufficiently random values. Exploiting this vulnerability could...

The vulnerability of the igc_setup_rx_resources() function in the drivers/net/ethernet/intel/igc/igc_main.c file of the Linux kernel’s Ethernet adapter support driver allows a hacker to cause a service failure.

The vulnerability of the igcsetuprxresources function in the drivers/net/ethernet/intel/igc/igcmain.c file of the Intel Ethernet network adapter support driver in the Linux operating system exposes confidential information. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the fec_drvremove() function in the drivers/net/ethernet/freescale/fec_main.c file of the Ethernet network adapter driver for the Freescale Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fecdrvremove function in the drivers/net/ethernet/freescale/fecmain.c file of the Ethernet network adapter driver for the Freescale Linux operating system is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability cou...

The vulnerability of the dwmac4_map_mtl_dma() function in the drivers/net/ethernet/stmicro/stmmac/dwmac4_core.c file of the Ethernet adapter support driver from STMicroelectronics’ Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the dwmac4mapmtldma function in the drivers/net/ethernet/stmicro/stmmac/dwmac4core.c file of the Ethernet driver module from STMicroelectronics’ operating system Linux is related to the occurrence of operations outside the buffer boundaries in memory. Exploiting this...

The vulnerability of the ionic_dev_teardown() function in the drivers/net/ethernet/pensando/ionic/ionic_dev.c file of the Pensando Ethernet adapter support driver in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ionicdevteardown function in the drivers/net/ethernet/pensando/ionic/ionicdev.c file of the Pensando Ethernet adapter support driver in the Linux operating system is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability...

CVE-2026-23284

A flaw was found in the Linux kernel's mtkethsoc driver. This vulnerability occurs when an error in the mtkopen routine within mtkxdpsetup leads to an incorrect reset of the eBPF Extended Berkeley Packet Filter program pointer without properly decreasing its reference count. This improper resourc...

SUSE CVE-2026-23284

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtkethsoc: Reset prog ptr to oldprog in case of error in mtkxdpsetup Reset eBPF program pointer to oldprog and do not decrease its ref-count if mtkopen routine in mtkxdpsetup fails...

CVE-2026-23343

A flaw was found in the Linux kernel's eXpress Data Path XDP component. This vulnerability arises from incorrect buffer size calculations in certain ethernet drivers, such as ixgbevf, which can lead to memory corruption. An attacker could exploit this flaw to cause system instability, potentially...

EUVD-2026-15208

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtkethsoc: Reset prog ptr to oldprog in case of error in mtkxdpsetup Reset eBPF program pointer to oldprog and do not decrease its ref-count if mtkopen routine in mtkxdpsetup fails...

UBUNTU-CVE-2026-23284

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtkethsoc: Reset prog ptr to oldprog in case of error in mtkxdpsetup Reset eBPF program pointer to oldprog and do not decrease its ref-count if mtkopen routine in mtkxdpsetup fails...

CVE-2026-23284

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtkethsoc: Reset prog ptr to oldprog in case of error in mtkxdpsetup Reset eBPF program pointer to oldprog and do not decrease its ref-count if mtkopen routine in mtkxdpsetup fails...