Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102107)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102107 advisory. In the Linux kernel, the following vulnerability has been resolved: ethtool: Avoid overflowing userspace buffer on stats query The ethtool -S command operates across...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099711)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099711 advisory. In the Linux kernel, the following vulnerability has been resolved: net: macb: use the current queue number for stats There's a potential mismatch between the memory...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100390)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100390 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mvpp2main: fix possible OOB write in mvpp2ethtoolgetrxnfc rules is allocated in...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099914)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099914 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mvpp2main: fix possible OOB write in mvpp2ethtoolgetrxnfc rules is allocated in...

SUSE CVE-2026-68440

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...

CVE-2026-68440

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...

DEBIAN-CVE-2026-68440

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...

CVE-2026-68440

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...

PT-2026-70954

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbe read eeprom hostif always copies round uplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...

CVE-2026-68293

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads The MCIA register can return up to 32 dwords 128 bytes when the device advertises the mcia32dwords capability, but struct mlx5ifcmciaregbits only defines dword0..11,...

CVE-2026-68293

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads The MCIA register can return up to 32 dwords 128 bytes when the device advertises the mcia32dwords capability, but struct mlx5ifcmciaregbits only defines dword0..11,...

CVE-2026-68293: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads The MCIA register can return up to 32 dwords 128 bytes when the device advertises the mcia32dwords capability, but struct mlx5ifcmciaregbits only defines dword0..11,...

CVE-2026-64526

A flaw was found in the Linux kernel's ethtool tsconfig component. A missing cleanup function call after an operation could lead to resource exhaustion. This vulnerability may allow a local attacker to cause a Denial of Service DoS by depleting system resources...

CVE-2026-64228

A flaw was found in the Linux kernel's ethtool PHY Physical Layer driver. A local attacker can trigger a null pointer dereference by unbinding a PHY driver via sysfs while the device is still attached. This can lead to a kernel crash, resulting in a denial of service...

CVE-2026-64526

In the Linux kernel, the following vulnerability has been resolved: ethtool: tsconfig: fix missing ethnlopscomplete tsconfigpreparedata calls ethnlopsbegin, we need to call ethnlopscomplete before returning the error...

CVE-2026-64228

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NULL deref when PHY driver is unbound phydev-drv can become NULL while the phydevice is still attached to its netdevice, namely after the PHY driver is unbound via sysfs: echo...

Linux Distros Unpatched Vulnerability : CVE-2026-64228

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NULL deref when PHY driver is unbound phydev-drv can become NULL...

UBUNTU-CVE-2026-64228

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NULL deref when PHY driver is unbound phydev-drv can become NULL while the phydevice is still attached to its netdevice, namely after the PHY driver is unbound via sysfs: echo...

UBUNTU-CVE-2026-64526

In the Linux kernel, the following vulnerability has been resolved: ethtool: tsconfig: fix missing ethnlopscomplete tsconfigpreparedata calls ethnlopsbegin, we need to call ethnlopscomplete before returning the error...

Linux Distros Unpatched Vulnerability : CVE-2026-64526

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ethtool: tsconfig: fix missing ethnlopscomplete tsconfigpreparedata calls ethnlopsbegin, we...