84 matches found
EUVD-2026-32619
GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that when foundational flows were enabled at the group level, could have allowed an authenticated user with developer-role permissions to bypass flow...
Astra Linux - уязвимость в linux-5.10, linux-6.1, linux, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Properly linking new fs rules into the tree Previously, addrulefg would only add newly created rules from the handle into the tree when their refcount was 1. On the other hand, createflowhandle attempts to find and...
CVE-2026-23024
In the Linux kernel, the following vulnerability has been resolved: idpf: fix memory leak of flow steer list on rmmod The flow steering list maintains entries that are added and removed as ethtool creates and deletes flow steering rules. Module removal with active entries causes memory leak as th...
UBUNTU-CVE-2023-54216
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Fix using eswitch mapping in nic mode Cited patch is using the eswitch object mapping pool while in nic mode where it isn't initialized. This results in the trace below 0. Fix that by using either nic or eswitch...
CVE-2023-53999
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Fix internal port memory leak The flow rule can be splited, and the extra postact rules are added to postact table. It's possible to trigger memleak when the rule forwards packets from internal port and over tunnel...
CVE-2023-53999 net/mlx5e: TC, Fix internal port memory leak
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Fix internal port memory leak The flow rule can be splited, and the extra postact rules are added to postact table. It's possible to trigger memleak when the rule forwards packets from internal port and over tunnel...
CVE-2023-53999
CVE-2023-53999 concerns a memory leak in the Linux kernel mlx5_core/mlx5e flow offload path. The issue arises when a flow rule forwards packets from an internal port through a tunnel and CT new offload is allowed; an int_port object is associated with the post_act flow attribute and its refcnt is...
PT-2025-52956
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the net/mlx5e module related to Traffic Control TC. Specifically, when flow rules are split and extra post act rules are added to the post act...
CVE-2025-39979
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fs, fix UAF in flow counter release Fix a kernel trace 1 caused by releasing an HWS action of a local flow counter in mlx5cmdhwsdeletefte, where the HWS action refcount and mutex were not initialized and the counter...
CVE-2025-39979
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fs, fix UAF in flow counter release Fix a kernel trace 1 caused by releasing an HWS action of a local flow counter in mlx5cmdhwsdeletefte, where the HWS action refcount and mutex were not initialized and the counter...
EUVD-2019-1992
Malware in sbrugna...
EUVD-2019-1991
Malware in sbrugna...
EUVD-2021-24817
Malware in sbrugna...
EUVD-2019-1994
Malware in sbrugna...
Unity Linux 20.1050a / 20.1070a Security Update: kernel (UTSA-2025-391027)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-391027 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Properly link new fs rules into the tree Previously, addrulefg would only add newly...
EUVD-2022-33937
Malicious code in bioql PyPI...
EUVD-2022-33936
Malicious code in bioql PyPI...
EUVD-2022-29021
Malicious code in bioql PyPI...
EUVD-2022-33940
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2024-40940
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail In case of flow rul...