kernel: i40e: fix idx validation in config queues msg

A flaw was found in the Linux kernel in the Intel i40e network driver such that in the function i40evcconfigqueuesmsg, when iterating over vf-chidx, the idx value is not properly validated against the range of active/initialized traffic classes TCs. An attacker with local privileges could supply ...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...

kernel: i40e: fix idx validation in config queues msg

A flaw was found in the Linux kernel in the Intel i40e network driver such that in the function i40evcconfigqueuesmsg, when iterating over vf-chidx, the idx value is not properly validated against the range of active/initialized traffic classes TCs. An attacker with local privileges could supply ...

RHEL 9 : kernel-rt (RHSA-2026:1443)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1443 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

RHEL 9 : kernel (RHSA-2026:1441)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1441 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: iommufd/iovabitm...

RHEL 9 : kernel (RHSA-2026:1494)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1494 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: mac80211: fix potential double...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38200)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38200 advisory. - In the Linux kernel, the following vulnerability has been resolved: i40e: fix MMIO write access to an invali...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003670)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003670 advisory. Insufficient input validation in i40e driver for IntelR Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003618)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003618 advisory. Buffer overflow in i40e driver for IntelR Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable an escalation of...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003691)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003691 advisory. Resource leak in i40e driver for IntelR Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable a denial of...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003793)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003793 advisory. A memory leak in the i40esetupmacvlans function in drivers/net/ethernet/intel/i40e/i40emain.c in the Linux kernel through 5.3.11 allows attackers to cause a denial o...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003727)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003727 advisory. Insufficient input validation in i40e driver for IntelR Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable ...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003682)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003682 advisory. Buffer overflow in i40e driver for IntelR Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable an escalation of...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003726)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003726 advisory. Resource leak in i40e driver for IntelR Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable a denial of...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003758)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003758 advisory. Resource leak in i40e driver for IntelR Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service...

RHEL 8 : kernel (RHSA-2026:0643)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:0643 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: smb: client: Fix use-after-fre...

kernel: i40e: add validation for ring_len param

A flaw was identified in the Intel “i40e” Ethernet driver in the Linux Kernel where the ringlen parameter supplied by a VF virtual function is passed unchecked to the hardware memory context. If a malicious Virtual function provides a too-large or misaligned ringlen, it may allow the device to...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: i40e: added validation for the ringlen parameter. The ringlen parameter provided by the virtual function VF is assigned directly to the hardware memory context HMC without any validation. To address this issue, a upper boundar...

MiracleLinux 9 : kernel-5.14.0-570.39.1.el9_6 (AXSA:2025-10838:66)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10838:66 advisory. kernel: netsched: hfsc: Fix a potential UAF in hfscdequeue too CVE-2025-37823 kernel: i40e: fix MMIO write access to an invalid page in i40eclearhw...

MiracleLinux 8 : kernel-4.18.0-553.71.1.el8_10 (AXSA:2025-10809:62)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10809:62 advisory. kernel: udp: Fix memory accounting leak. CVE-2025-22058 kernel: i40e: fix MMIO write access to an invalid page in i40eclearhw CVE-2025-38200 Tenabl...