CVE-2026-98422

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reset the APVLAN tailroom counter on ifdown On ifup, APVLAN interfaces get cryptotxtailroomneededcnt from the AP interface, but it's never decremented again unless the AP is also brought down. Thus, bringing the...

CVE-2026-98422

The Linux kernel contains a vulnerability in the wifi: mac80211 component where the AP_VLAN tailroom counter is not properly managed. Specifically, on ifup , AP_VLAN interfaces inherit the crypto_tx_tailroom_needed_cnt from the AP interface, but this counter is never decremented unless the AP its...

CVE-2026-98422: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reset the APVLAN tailroom counter on ifdown On ifup, APVLAN interfaces get cryptotxtailroomneededcnt from the AP interface, but it's never decremented again unless the AP is also brought down. Thus, bringing the...

PT-2026-114401

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mac80211 wifi component where AP VLAN interfaces receive the crypto tx tailroom needed cnt value from the AP interface during ifup. Because this counter is not...

CVE-2026-98422

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reset the APVLAN tailroom counter on ifdown On ifup, APVLAN interfaces get cryptotxtailroomneededcnt from the AP interface, but it's never decremented again unless the AP is also brought down. Thus, bringing the...

PT-2026-96371

In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: fix NULL dereference of idev in ipv6 rpl srh rcv ipv6 rpl srh rcv dereferences idev from in6 dev get without a NULL check when reading idev-cnf.rpl seg enabled. When the device's MTU drops below IPV6 MIN MTU, addrconf...

CVE-2026-64538

CVE-2026-64538 concerns a Linux kernel vulnerability where fib6_nh_mtu_change() dereferences idev->cnf.mtu6 after re-fetching idev with __in6_dev_get(arg->dev) without a NULL check. This can occur because addrconf_ifdown() clears dev->ip6_ptr after tb6_lock is released, allowing an RA-dr...

PT-2026-65213

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-pointer dereference exists in the IPv6 implementation. The function fib6 nh mtu change re-fetches idev using in6 dev getarg-dev and accesses idev-cnf.mtu6 without verifying if ide...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-986692)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986692 advisory. In the Linux kernel, the following vulnerability has been resolved: net, neigh: Fix null-ptr-deref in neightableclear When IPv6 module gets initialized but hits an...

EUVD-2025-29604

Malicious code in bioql PyPI...

AZL-71206 CVE-2025-39810 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix memory corruption when FW resources change during ifdown bnxtsetdfltrings assumes that it is always called before any TC has been created. So it doesn't take bp-numtc into account and assumes that it is always 0 or 1...

AZL-67431 CVE-2025-39810 affecting package kernel 6.6.161.1-1

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix memory corruption when FW resources change during ifdown bnxtsetdfltrings assumes that it is always called before any TC has been created. So it doesn't take bp-numtc into account and assumes that it is always 0 or 1...

CVE-2025-39810 bnxt_en: Fix memory corruption when FW resources change during ifdown

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix memory corruption when FW resources change during ifdown bnxtsetdfltrings assumes that it is always called before any TC has been created. So it doesn't take bp-numtc into account and assumes that it is always 0 or 1...

CVE-2025-39810 bnxt_en: Fix memory corruption when FW resources change during ifdown

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix memory corruption when FW resources change during ifdown bnxtsetdfltrings assumes that it is always called before any TC has been created. So it doesn't take bp-numtc into account and assumes that it is always 0 or 1...

CVE-2025-39810

CVE-2025-39810 – bnxt_en memory corruption fix in the Linux kernel driver. The issue arises when FW resources change during interface down, where bnxt_set_dflt_rings() can size bp->tx_ring[] too small if bp->num_tc > 1, permitting memory corruption in bnxt_alloc_cp_rings(). The root caus...

CVE-2025-39810 bnxt_en: Fix memory corruption when FW resources change during ifdown

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix memory corruption when FW resources change during ifdown bnxtsetdfltrings assumes that it is always called before any TC has been created. So it doesn't take bp-numtc into account and assumes that it is always 0 or 1...

DEBIAN-CVE-2022-49904

In the Linux kernel, the following vulnerability has been resolved: net, neigh: Fix null-ptr-deref in neightableclear When IPv6 module gets initialized but hits an error in the middle, kenel panic with: KASAN: null-ptr-deref in range 0x0000000000000598-0x000000000000059f CPU: 1 PID: 361 Comm:...

UBUNTU-CVE-2022-49904

In the Linux kernel, the following vulnerability has been resolved: net, neigh: Fix null-ptr-deref in neightableclear When IPv6 module gets initialized but hits an error in the middle, kenel panic with: KASAN: null-ptr-deref in range 0x0000000000000598-0x000000000000059f CPU: 1 PID: 361 Comm:...