CVE-2026-23386 gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL

In the Linux kernel, the following vulnerability has been resolved: gve: fix incorrect buffer cleanup in gvetxcleanpendingpackets for QPL In DQ-QPL mode, gvetxcleanpendingpackets incorrectly uses the RDA buffer cleanup path. It iterates numbufs times and attempts to unmap entries in the dma array...

CVE-2026-23379

CVE-2026-23379 affects the Linux kernel net/sched ETS offload path. The root cause was an overflow in WRR weight computation (q_sum, q_psum) due to using 32-bit unsigned integers, which could lead to division by zero. The documented fix is to switch q_sum and q_psum to 64-bit integers, preventing...

CVE-2026-23379 net/sched: ets: fix divide by zero in the offload path

In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: fix divide by zero in the offload path Offloading ETS requires computing each class' WRR weight: this is done by averaging over the sums of quanta as 'qsum' and 'qpsum'. Using unsigned int, the same integer size a...

CVE-2026-23284 net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup()

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtkethsoc: Reset prog ptr to oldprog in case of error in mtkxdpsetup Reset eBPF program pointer to oldprog and do not decrease its ref-count if mtkopen routine in mtkxdpsetup fails...

CVE-2026-23284 net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup()

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtkethsoc: Reset prog ptr to oldprog in case of error in mtkxdpsetup Reset eBPF program pointer to oldprog and do not decrease its ref-count if mtkopen routine in mtkxdpsetup fails...

CVE-2026-23284

Technical details for CVE-2026-23284 are not publicly provided in the supplied documents; none of the connected advisories describe affected product/version or fix for this CVE. Monitor for updates.

CVE-2026-23284

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtkethsoc: Reset prog ptr to oldprog in case of error in mtkxdpsetup Reset eBPF program pointer to oldprog and do not decrease its ref-count if mtkopen routine in mtkxdpsetup fails...

The vulnerability of the be_cmd_read_port_transceiver_data() function in the drivers/net/ethernet/emulex/benet/be_cmds.c module of the Linux kernel’s Ethernet adapter support driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the becmdreadporttransceiverdata function in the drivers/net/ethernet/emulex/benet/becmds.c file, a driver for supporting Ethernet network adapters in the Linux operating system, stems from the copying of buffers without checking the size of the input data a classic buffer...

The vulnerability of the `ice_get_module_eeprom()` function in the `drivers/net/ethernet/intel/ice/ice_ethtool.c` file of the Intel Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the icegetmoduleeeprom function in the drivers/net/ethernet/intel/ice/iceethtool.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attac...

The vulnerability of the atl_resume_common() function in the drivers/net/ethernet/aquantia/atlantic/aq_pci_func.c file of the Ethernet adapter support driver for the AQuantia Atlantic motherboard in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the atlresumecommon function in the drivers/net/ethernet/aquantia/atlantic/aqpcifunc.c file of the Ethernet adapter support driver for the AQuantia Atlantic chipset in the Linux operating system exposes confidential information. Exploiting this vulnerability could allow an...

The vulnerability of the idpf_vport_rel() function in the drivers/net/ethernet/intel/idpf/idpf_lib.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the idpfvportrel function in the drivers/net/ethernet/intel/idpf/idpflib.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause a service...

The vulnerability of the stmmac_adjust_time() function in the drivers/net/ethernet/stmicro/stmmac/stmmac_ptp.c file of the Ethernet adapter support driver from STMicroelectronics’ operating system Linux allows a hacker to cause a service failure.

The vulnerability of the stmmacadjusttime function in the drivers/net/ethernet/stmicro/stmmac/stmmacptp.c file of the Ethernet adapter support driver from STMicroelectronics’ operating system Linux is related to improper locking of resources. Exploiting this vulnerability could allow an attacker ...

The vulnerability of the ixgbe_sw_init() function in the drivers/net/ethernet/intel/ixgbe/ixgbe_main.c file of the Linux kernel’s Ethernet adapter support driver allows a attacker to cause a system crash.

The vulnerability of the ixgbeswinit function in the drivers/net/ethernet/intel/ixgbe/ixgbemain.c file of the Linux Ethernet adapter driver module is related to blocking mechanism errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the igc_rd32() function in the drivers/net/ethernet/intel/igc/igc_main.c file of the Linux kernel’s Ethernet adapter support driver allows a hacker to cause a system failure.

The vulnerability of the igcrd32 function in the drivers/net/ethernet/intel/igc/igcmain.c file of the Linux kernel’s Ethernet adapter support driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the mlx5_init_one_devl_locked() function in the drivers/net/ethernet/mellanox/mlx5/core/main.c file of the Mellanox Ethernet adapter support driver for Linux operating systems allows a attacker to cause a service failure.

The vulnerability of the mlx5initonedevllocked function in the drivers/net/ethernet/mellanox/mlx5/core/main.c file of the Mellanox Ethernet adapter support driver in the Linux operating system is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to caus...

USN-8116-1: Linux kernel (Intel IoTG Real-time) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACPI drivers; - ATM...

The vulnerability of the hclge_set_vlan_filter() function in the drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.c file of the Ethernet network adapter driver for the Hisilicon-based Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hclgesetvlanfilter function in the drivers/net/ethernet/hisilicon/hns3/hns3pf/hclgemain.c file of the Ethernet network adapter driver for the Hisilicon-based Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacke...

The vulnerability of the ice_reset VF() function in the drivers/net/ethernet/intel/ice/iceVFLib.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the icereset VF function in the drivers/net/ethernet/intel/ice/ice VFlib.c file of the Intel Ethernet network adapter driver in the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-23254

CVE-2026-23254 (Linux kernel): The issue affects UDP GRO in the net/ gro path, where the complete stage incorrectly uses the inner network offset when the encapsulation flag is not reliably zeroed by hardware offloads. The root cause is an assumption that all RX-inserted packets have encapsulatio...

Hereta ETH-IMC408M 跨站脚本漏洞

The Hereta ETH-IMC408M is an Ethernet switch device produced by the Hereta company in the United States. Versions of Hereta ETH-IMC408M prior to 1.0.15 contained a cross-site scripting vulnerability. This vulnerability stemmed from improper cleaning of the Device Name field, which could lead to...