Security update for the Linux Kernel

The SUSE Linux Enterprise FIXME kernel was updated to fix various security issues The following security issues were fixed: CVE-2022-50327: ACPI: processor: idle: Check acpifetchacpidev return value bsc1249859. CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfsparseparam bsc1249857...

kernel: i40e: fix MMIO write access to an invalid page in i40e_clear_hw

In the Linux kernel, the following vulnerability has been resolved: i40e: fix MMIO write access to an invalid page in i40eclearhw When the device sends a specific input, an integer underflow can occur, leading to MMIO write access to an invalid page. Prevent the integer underflow by changing the...

RHEL 8 : kernel (RHSA-2025:21667)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21667 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: nfsd: don't ignore the return...

kernel: i40e: add validation for ring_len param

A flaw was identified in the Intel “i40e” Ethernet driver in the Linux Kernel where the ringlen parameter supplied by a VF virtual function is passed unchecked to the hardware memory context. If a malicious Virtual function provides a too-large or misaligned ringlen, it may allow the device to...

RHEL 9 : kernel (RHSA-2025:21469)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21469 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: KVM: x86/hyper-v: Skip...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990767)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990767 advisory. In the Linux kernel, the following vulnerability has been resolved: i40e: Fix kernel crash during reboot when adapter is in recovery mode If the driver detects durin...

kernel: i40e: fix MMIO write access to an invalid page in i40e_clear_hw

In the Linux kernel, the following vulnerability has been resolved: i40e: fix MMIO write access to an invalid page in i40eclearhw When the device sends a specific input, an integer underflow can occur, leading to MMIO write access to an invalid page. Prevent the integer underflow by changing the...

kernel security update

4.18.0-553.83.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Unbreakable Enterprise kernel security update

5.4.17-2136.349.3.1 - i40e: add validation for ringlen param Lukasz Czapnik Orabug: 38604171 CVE-2025-39973 - i40e: increase max descriptors for XL710 Justin Bronder Orabug: 38604171 CVE-2025-39973 5.4.17-2136.349.3 - Revert 'net/mlx5e: Update and set Xon/Xoff upon MTU set' Jakub Kicinski Orabug:...

Unbreakable Enterprise kernel security update

5.15.0-314.193.5.3 - Revert 'cpufreq: Introduce an optional cpuinfoavgfreq sysfs entry' Samasth Norway Ananda Orabug: 38633525 5.15.0-314.193.5.2 - i40e: add validation for ringlen param Lukasz Czapnik Orabug: 38607608 CVE-2025-39973 - i40e: increase max descriptors for XL710 Justin Bronder Orabu...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990460)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990460 advisory. In the Linux kernel, the following vulnerability has been resolved: i40e: Fix freeing of uninitialized misc IRQ vector When VSI set up failed in i40eprobe as part of...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989115)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989115 advisory. In the Linux kernel, the following vulnerability has been resolved: i40e: Fix queues reservation for XDP When XDP was configured on a system with large number of CPU...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990016)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990016 advisory. In the Linux kernel, the following vulnerability has been resolved: i40e: Fix freeing of uninitialized misc IRQ vector When VSI set up failed in i40eprobe as part of...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989586)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989586 advisory. In the Linux kernel, the following vulnerability has been resolved: i40e: Fix call trace in setuptxdescriptors After PF reset and ethtool -t there was call trace in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989624)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989624 advisory. In the Linux kernel, the following vulnerability has been resolved: i40e: Fix NULL pointer dereference in i40edbgdumpdesc When trying to dump VFs VSI RX/TX descripto...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989337)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989337 advisory. In the Linux kernel, the following vulnerability has been resolved: i40e: Fix call trace in setuptxdescriptors After PF reset and ethtool -t there was call trace in...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-25733)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-25733 advisory. - i40e: add validation for ringlen param Lukasz Czapnik Orabug: 38603025 CVE-2025-39973 Tenable has extracted the preceding description block directly from...

Unbreakable Enterprise kernel security update

5.15.0-313.189.5.3 - i40e: add validation for ringlen param Lukasz Czapnik Orabug: 38603025 CVE-2025-39973 - i40e: increase max descriptors for XL710 Justin Bronder Orabug: 38603025...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: i40e: removed read access to debugfs files The “command” and “netdevops” debugfs files are legacy debugging interfaces supported by the i40e driver since its early days, as documented in commit 02e9c290814c “i40e: debugfs...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: netdevsim: fix memory leak in nsimdrvprobe when nsimdevresourcesregister failed CVE-2022-50500 In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Use rawsmpprocessorid instead of...