Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098812)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098812 advisory. In the Linux kernel, the following vulnerability has been resolved: ethtool: Avoid overflowing userspace buffer on stats query The ethtool -S command operates across...

ROS-20260825-73-0027

The vulnerability of the bnxtgetnvramdirectory function in the drivers/net/ethernet/broadcom/bnxt/bnxtethtool.c file of the Broadcom Ethernet network adapter driver for the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer...

The vulnerabilities of the functions iavf_get_sset_count() and iavf_get_ethtool_stats() in the driver/net/ethernet/intel/iavf/iavf_ethtool.c file of the Ethernet network adapter driver for Linux kernel allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of the functions iavfgetssetcount and iavfgetethtoolstats in the driver/net/ethernet/intel/iavf/iavfethtool.c file of the Ethernet network adapter driver for Intel-based Linux operating systems are related to the occurrence of operations outside the buffer in memory. Exploitin...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: net: sfc: added re initialization of missing xdp queues When the size of the RX/TX ring buffer is changed, a kernel panic occurs when it acts as XDPTX or XDPREDIRECT. When the size of the TX/RX ring buffer is changed using...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: igc: Avoid kernel warnings when changing RX ring parameters Calling ethtool to change RX ring parameters like this: $ ethtool -G eth0 rx 1024 triggers kernel warnings like this: 225.198467 ------------ Cut here 225.198473 Missing...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Drivers: Ethernet: cpsw – Fixed a panic that occurs when the coalece interrupt is set using ethtool. The cpswethtoolbegin function directly returns the result of pmruntimegetsync when it is successful. pmruntimegetsync returns...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102107)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102107 advisory. In the Linux kernel, the following vulnerability has been resolved: ethtool: Avoid overflowing userspace buffer on stats query The ethtool -S command operates across...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099914)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099914 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mvpp2main: fix possible OOB write in mvpp2ethtoolgetrxnfc rules is allocated in...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100390)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100390 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mvpp2main: fix possible OOB write in mvpp2ethtoolgetrxnfc rules is allocated in...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099711)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099711 advisory. In the Linux kernel, the following vulnerability has been resolved: net: macb: use the current queue number for stats There's a potential mismatch between the memory...

SUSE CVE-2026-68440

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...

DEBIAN-CVE-2026-68440

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...

CVE-2026-68440

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...

CVE-2026-68440

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...

PT-2026-70954

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A heap overflow occurs in the txgbe read eeprom hostif function when reading the module EEPROM. The function copies round uplength, 4 bytes into a buffer allocated by ethtool with exactl...

CVE-2026-68293

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads The MCIA register can return up to 32 dwords 128 bytes when the device advertises the mcia32dwords capability, but struct mlx5ifcmciaregbits only defines dword0..11,...

CVE-2026-68293

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads The MCIA register can return up to 32 dwords 128 bytes when the device advertises the mcia32dwords capability, but struct mlx5ifcmciaregbits only defines dword0..11,...

CVE-2026-68293: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads The MCIA register can return up to 32 dwords 128 bytes when the device advertises the mcia32dwords capability, but struct mlx5ifcmciaregbits only defines dword0..11,...

CVE-2026-64526

A flaw was found in the Linux kernel's ethtool tsconfig component. A missing cleanup function call after an operation could lead to resource exhaustion. This vulnerability may allow a local attacker to cause a Denial of Service DoS by depleting system resources...

CVE-2026-64228

A flaw was found in the Linux kernel's ethtool PHY Physical Layer driver. A local attacker can trigger a null pointer dereference by unbinding a PHY driver via sysfs while the device is still attached. This can lead to a kernel crash, resulting in a denial of service...