CVE-2026-93265 PCI/pwrctrl: tc9563: Fix parsing the integrated Ethernet MAC Endpoint node

In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: tc9563: Fix parsing the integrated Ethernet MAC Endpoint node DSP3 has an integrated Ethernet MAC Endpoint which has its own set of config registers for configuring settings such as ASPM. The Endpoint device has two...

CVE-2026-93265: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: tc9563: Fix parsing the integrated Ethernet MAC Endpoint node DSP3 has an integrated Ethernet MAC Endpoint which has its own set of config registers for configuring settings such as ASPM. The Endpoint device has two...

ROS-20260924-73-0069

The vulnerability of the i40evcconfigqueuesmsg function in the drivers/net/ethernet/intel/i40e/i40evirtchnlpf.c module of the Intel Ethernet network adapter driver for the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an...

ROS-20260924-73-0068

The vulnerability of the i40evalidatecloudfilter function in the drivers/net/ethernet/intel/i40e/i40evirtchnlpf.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacke...

ROS-20260924-73-0046

The vulnerability of the macbgetaddr function in the drivers/net/ethernet/cadence/macbmain.c file of the Ethernet network adapter driver from Cadence’s Linux kernel lies in the occurrence of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a...

ROS-20260924-73-0078

The vulnerability of the otx2tcaddflow function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2tc.c file of the Ethernet network adapter driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker t...

ROS-20260924-73-0049

The vulnerability of the mtkhwlrogetfdirall function in the drivers/net/ethernet/mediatek/mtkethsoc.c module of the Linux network adapter driver software is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260924-73-0064

The vulnerability of the mlx5eptpopen function in the drivers/net/ethernet/mellanox/mlx5/core/en/ptp.c driver for Mellanox Ethernet network adapters in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failur...

CVE-2026-93265

In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: tc9563: Fix parsing the integrated Ethernet MAC Endpoint node DSP3 has an integrated Ethernet MAC Endpoint which has its own set of config registers for configuring settings such as ASPM. The Endpoint device has two...

ROS-20260924-73-0081

The vulnerability of the i40evalidatequeuemap function in the drivers/net/ethernet/intel/i40e/i40evirtchnlpf.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacke...

PT-2026-97952

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds OOB access issue exists in the PCI power control component for tc9563. The problem occurs when parsing the integrated Ethernet MAC Endpoint node under DSP3. Because the...

USN-8793-2 linux-azure-fde-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Bluetooth drivers; - GPU drivers; - Hardware monitoring drivers; - SPI subsystem; - NTFS3 file system; - iouring...

USN-8793-2: Linux kernel (Azure CVM) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Bluetooth drivers; - GPU drivers; - Hardware monitoring drivers; - SPI subsystem; - NTFS3 file system; - iouring...

USN-8793-1: Linux kernel (Azure CVM) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Bluetooth drivers; - GPU drivers; - Hardware monitoring drivers; - SPI subsystem; - NTFS3 file system; - iouring...

EUVD-2026-82948

gptpmiqualifyannounce in subsys/net/l2/ethernet/gptp/gptpmi.c walks the Path Trace TLV of a received IEEE 802.1AS Announce message, comparing each clock identity against the local one. The loop bound was taken solely from the attacker-controlled wire field announce-stepsremoved accepted up to 254...

CVE-2026-16514 Out-of-bounds read in gPTP Announce path-trace validation via unvalidated stepsRemoved

gptpmiqualifyannounce in subsys/net/l2/ethernet/gptp/gptpmi.c walks the Path Trace TLV of a received IEEE 802.1AS Announce message, comparing each clock identity against the local one. The loop bound was taken solely from the attacker-controlled wire field announce-stepsremoved accepted up to 254...

CVE-2026-16512

CVE-2026-16512 is an out-of-bounds read in the Zephyr RTOS gPTP (generalized Precision Time Protocol) receive path. In gptp_handle_msg() (subsys/net/l2/ethernet/gptp/gptp.c), the gPTP header is dereferenced without verifying the frame carries at least 34 bytes of payload. The GPTP_VALID_LEN() che...

CVE-2026-15579

An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the username field length during Web login processing. This may allow a remote attacker to submit a specially crafted overly long input, triggering a buffer overflow that can cause the...

CVE-2026-15579

Moxa Ethernet switches are affected by an out-of-bounds write vulnerability caused by improper validation of the username field length during Web login processing. A remote, unauthenticated attacker can submit a specially crafted overly long input , triggering a buffer overflow that crashes the a...

CVE-2026-15579

An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the username field length during Web login processing. This may allow a remote attacker to submit a specially crafted overly long input, triggering a buffer overflow that can cause the...