132 matches found
CVE-2026-23386
In the Linux kernel, the following vulnerability has been resolved: gve: fix incorrect buffer cleanup in gvetxcleanpendingpackets for QPL In DQ-QPL mode, gvetxcleanpendingpackets incorrectly uses the RDA buffer cleanup path. It iterates numbufs times and attempts to unmap entries in the dma array...
Linux Distros Unpatched Vulnerability : CVE-2026-23386
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gve: fix incorrect buffer cleanup in gvetxcleanpendingpackets for QPL In DQ-QPL mode, gvetxcleanpendingpackets incorrectly uses the RDA buffer cleanup path. It...
The vulnerabilities in the drivers/net/ethernet/google/gve/gve_ethtool.c and drivers/net/ethernet/google/gve/gve_main.c modules of the Linux operating system allow a hacker to cause a service failure.
The vulnerability in the drivers/net/ethernet/google/gve/gveethtool.c and drivers/net/ethernet/google/gve/gvemain.c modules of the Linux operating system is related to incorrect calculation of buffer sizes. Exploiting this vulnerability can allow an attacker to cause a service failure...
EUVD-2026-12898
In the Linux kernel, the following vulnerability has been resolved: gve: Fix stats report corruption on queue count change The driver and the NIC share a region in memory for stats reporting. The NIC calculates its offset into this region based on the total size of the stats region and the size o...
CVE-2026-23262
In the Linux kernel, the following vulnerability has been resolved: gve: Fix stats report corruption on queue count change The driver and the NIC share a region in memory for stats reporting. The NIC calculates its offset into this region based on the total size of the stats region and the size o...
CVE-2026-23262 gve: Fix stats report corruption on queue count change
In the Linux kernel, the following vulnerability has been resolved: gve: Fix stats report corruption on queue count change The driver and the NIC share a region in memory for stats reporting. The NIC calculates its offset into this region based on the total size of the stats region and the size o...
CVE-2025-71156 gve: defer interrupt enabling until NAPI registration
In the Linux kernel, the following vulnerability has been resolved: gve: defer interrupt enabling until NAPI registration Currently, interrupts are automatically enabled immediately upon request. This allows interrupt to fire before the associated NAPI context is fully initialized and cause...
CVE-2025-71156 gve: defer interrupt enabling until NAPI registration
In the Linux kernel, the following vulnerability has been resolved: gve: defer interrupt enabling until NAPI registration Currently, interrupts are automatically enabled immediately upon request. This allows interrupt to fire before the associated NAPI context is fully initialized and cause...
Azure Linux 3.0 Security Update: kernel (CVE-2025-38122)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38122 advisory. - In the Linux kernel, the following vulnerability has been resolved: gve: add missing NULL check for...
PT-2026-27751
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue in the gve module related to incorrect buffer cleanup within the gve tx clean pending packets function when operating in DQ-QPL mode. This occurs becau...
EUVD-2025-201646
In the Linux kernel, the following vulnerability has been resolved: gve: Implement settime64 with -EOPNOTSUPP ptpclocksettime assumes every ptpclock has implemented settime64. Stub it with -EOPNOTSUPP to prevent a NULL dereference...
CVE-2025-40299
In the Linux kernel, the following vulnerability has been resolved: gve: Implement gettimex64 with -EOPNOTSUPP gve implemented a ptpclock for sole use of doauxwork at this time. ptpclockgettime and ptpsysoffset assume every ptpclock has implemented either gettimex64 or gettime64. Stub gettimex64...
DEBIAN-CVE-2025-40298
In the Linux kernel, the following vulnerability has been resolved: gve: Implement settime64 with -EOPNOTSUPP ptpclocksettime assumes every ptpclock has implemented settime64. Stub it with -EOPNOTSUPP to prevent a NULL dereference...
UBUNTU-CVE-2025-40298
In the Linux kernel, the following vulnerability has been resolved: gve: Implement settime64 with -EOPNOTSUPP ptpclocksettime assumes every ptpclock has implemented settime64. Stub it with -EOPNOTSUPP to prevent a NULL dereference...
UBUNTU-CVE-2025-40299
In the Linux kernel, the following vulnerability has been resolved: gve: Implement gettimex64 with -EOPNOTSUPP gve implemented a ptpclock for sole use of doauxwork at this time. ptpclockgettime and ptpsysoffset assume every ptpclock has implemented either gettimex64 or gettime64. Stub gettimex64...
CVE-2025-40299
CVE-2025-40299 concerns the Linux kernel gve code path: ptp_clock_gettime() and ptp_sys_offset() assume a clock implements gettimex64 or gettime64, and a stubbed gettimex64 now returns -EOPNOTSUPP to prevent NULL dereferencing. Connected sources confirm the issue is in gve's gettimex64 handling a...
CVE-2025-40299 gve: Implement gettimex64 with -EOPNOTSUPP
In the Linux kernel, the following vulnerability has been resolved: gve: Implement gettimex64 with -EOPNOTSUPP gve implemented a ptpclock for sole use of doauxwork at this time. ptpclockgettime and ptpsysoffset assume every ptpclock has implemented either gettimex64 or gettime64. Stub gettimex64...
CVE-2025-40299 gve: Implement gettimex64 with -EOPNOTSUPP
In the Linux kernel, the following vulnerability has been resolved: gve: Implement gettimex64 with -EOPNOTSUPP gve implemented a ptpclock for sole use of doauxwork at this time. ptpclockgettime and ptpsysoffset assume every ptpclock has implemented either gettimex64 or gettime64. Stub gettimex64...
CVE-2025-40298
In the Linux kernel, the following vulnerability has been resolved: gve: Implement settime64 with -EOPNOTSUPP ptpclocksettime assumes every ptpclock has implemented settime64. Stub it with -EOPNOTSUPP to prevent a NULL dereference...
CVE-2025-40298
CVE-2025-40298 concerns the Linux kernel. The root cause is that ptp_clock_settime() assumes every ptp_clock implements settime64(), which could lead to a NULL dereference. The fix implements settime64 in gve and stubs ptp_clock_settime() with -EOPNOTSUPP for clocks that do not support it, preven...