kernel: i40e: Fix DMA mappings leak

A DMA mapping leak vulnerability was found in the Intel i40e network driver in the Linux kernel. During reallocation of RX buffers when changing ring parameters via ethtool, DMA mappings are not properly cleaned up before creating new ones. Repeated ring size changes can exhaust DMA resources,...

PT-2025-49658

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the ethtool interface related to uninitialized memory. Specifically, the number of lanes is not initialized when setting link modes using the...

CLSA-2023-1682416329 Fix CVE(s): CVE-2023-26545, CVE-2022-3903, CVE-2023-1281

Ubuntu: 4.15.0-209.220 bionic/linux: 4.15.0-209.220 -proposed tracker LP: 2011989 CVE-2023-26545 - net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-1281 - rcu: Upgrade rcuswapprotected to rcureplacepointer - net/sched: tcindex: update imperfect hash filters respectin...

kernel security and bug fix update

An update is available for kernel. This update affects Rocky Linux SIG Cloud 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux...

SUSE CVE-2010-2478

Integer overflow in the ethtoolgetrxnfc function in net/core/ethtool.c in the Linux kernel before 2.6.33.7 on 32-bit platforms allows local users to cause a denial of service or possibly have unspecified other impact via an ETHTOOLGRXCLSRLALL ethtool command with a large info.rulecnt value that...

SUSE CVE-2010-3084

Buffer overflow in the niugetethtooltcamall function in drivers/net/niu.c in the Linux kernel before 2.6.36-rc4 allows local users to cause a denial of service or possibly have unspecified other impact via the ETHTOOLGRXCLSRLALL ethtool command...

SUSE CVE-2010-3861

The ethtoolgetrxnfc function in net/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize a certain block of heap memory, which allows local users to obtain potentially sensitive information via an ETHTOOLGRXCLSRLALL ethtool command with a large info.rulecnt value, a different...

SUSE CVE-2010-4655

net/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize certain data structures, which allows local users to obtain potentially sensitive information from kernel heap memory by leveraging the CAPNETADMIN capability for an ethtool ioctl call...

SUSE CVE-2014-9900

The ethtoolgetwol function in net/core/ethtool.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not initialize a certain data structure, which allows local users to obtain sensitive information via a crafted application, aka Android...

SUSE CVE-2022-3107

An issue was discovered in the Linux kernel through 5.16-rc6. netvscgetethtoolstats in drivers/net/hyperv/netvscdrv.c lacks check of the return value of kvmallocarray and will cause the null pointer dereference...

PT-2023-36679

Уязвимость функции bnxt ethtool init модуля drivers/net/ethernet/broadcom/bnxt/bnxt ethtool.c драйвера поддержки сетевых адаптеров Ethernet Broadcom ядра операционной системы Linux связана с копированием буфера без проверки размера входных данных классическое переполнение буфера. Эксплуатация...

GSD-2023-1001324 ethtool: avoiding integer overflow in ethtool_phys_id()

ethtool: avoiding integer overflow in ethtoolphysid This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1000996 ethtool: avoiding integer overflow in ethtool_phys_id()

ethtool: avoiding integer overflow in ethtoolphysid This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000556 ethtool: avoiding integer overflow in ethtool_phys_id()

ethtool: avoiding integer overflow in ethtoolphysid This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

PT-2023-33633 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to avoiding integer overflow in the ethtool phys id function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-34073 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue is related to avoiding integer overflow in the ethtool phys id function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

OESA-2023-1035 kernel security update

Security Fixes: An out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way a user triggers the I2CSMBUSBLOCKDATA with the ioctl I2CSMBUS with malicious input data. This flaw allows a local user to crash the system.CVE-2022-2873 An...

PT-2025-40216

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.4.182+ 202104120910+6d1da174272d.61x Description The Linux kernel contains a flaw within the qed driver related to the qed mcp trace dump function. The qed mcp cmd and union function can cause delays exceeding ...

DEBIAN-CVE-2022-3107

An issue was discovered in the Linux kernel through 5.16-rc6. netvscgetethtoolstats in drivers/net/hyperv/netvscdrv.c lacks check of the return value of kvmallocarray and will cause the null pointer dereference...

CVE-2022-3107

An issue was discovered in the Linux kernel through 5.16-rc6. netvscgetethtoolstats in drivers/net/hyperv/netvscdrv.c lacks check of the return value of kvmallocarray and will cause the null pointer dereference...