lpfc_dmp_dbg Heap Buffer Overflow DoS

Vulnerability of the lpfcdmpdbg function in the drivers/scsi/lpfc/lpfcinit.c module – The Linux SCSI device support driver is vulnerable to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004422)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004422 advisory. In the Linux kernel before 5.1.6, there is a use-after-free in serialirinitmodule in drivers/media/rc/serialir.c. Tenable has extracted the preceding description blo...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993261)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993261 advisory. In the Linux kernel, the following vulnerability has been resolved: ixgbevf: Fix resource leak in ixgbevfinitmodule ixgbevfinitmodule won't destroy the workqueue...

Linux kernel Ethernet driver Heap Buffer Overflow DoS

The vulnerability of the ixgbevfinitmodule function in the drivers/net/ethernet/intel/ixgbevf/ixgbevfmain.c file of the Linux kernel’s Ethernet driver framework is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to cause a...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-988713)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988713 advisory. In the Linux kernel, the following vulnerability has been resolved: iavf: Fix error handling in iavfinitmodule The iavfinitmodule won't destroy workqueue when...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990377)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990377 advisory. In the Linux kernel, the following vulnerability has been resolved: igb: Fix potential invalid memory access in igbinitmodule The pciregisterdriver can fail and when...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-986871)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986871 advisory. In the Linux kernel, the following vulnerability has been resolved: iavf: Fix error handling in iavfinitmodule The iavfinitmodule won't destroy workqueue when...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987227)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987227 advisory. In the Linux kernel, the following vulnerability has been resolved: ixgbevf: Fix resource leak in ixgbevfinitmodule ixgbevfinitmodule won't destroy the workqueue...

DEBIAN-CVE-2022-50342

In the Linux kernel, the following vulnerability has been resolved: floppy: Fix memory leak in dofloppyinit A memory leak was reported when floppyallocdisk failed in dofloppyinit. unreferenced object 0xffff888115ed25a0 size 8: comm "modprobe", pid 727, jiffies 4295051278 age 25.529s hex dump firs...

CVE-2022-49350

CVE-2022-49350 affects the Linux kernel in the net/mdio area, where the symbol mdio_bus_init is annotated with init and exported. The combination of EXPORT_SYMBOL with init places code in .init.text, which may be freed after init and lead to a kernel panic if accessed by modules. The public advis...

UBUNTU-CVE-2024-52332

In the Linux kernel, the following vulnerability has been resolved: igb: Fix potential invalid memory access in igbinitmodule The pciregisterdriver can fail and when this happened, the dcanotifier needs to be unregistered, otherwise the dcanotifier can be called when igb fails to install, resulti...

SUSE CVE-2024-53227

In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Fix use-after-free in bfadimmoduleexit BUG: KASAN: slab-use-after-free in lockacquire+0x2aca/0x3a20 Read of size 8 at addr ffff8881082d80c8 by task modprobe/25303 Call Trace: dumpstacklvl+0x95/0xe0 printreport+0xcb/0x6...

UBUNTU-CVE-2024-53227

In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Fix use-after-free in bfadimmoduleexit BUG: KASAN: slab-use-after-free in lockacquire+0x2aca/0x3a20 Read of size 8 at addr ffff8881082d80c8 by task modprobe/25303 Call Trace: dumpstacklvl+0x95/0xe0 printreport+0xcb/0x6...

UBUNTU-CVE-2024-50119

In the Linux kernel, the following vulnerability has been resolved: cifs: fix warning when destroy 'cifsiorequestpool' There's a issue as follows: WARNING: CPU: 1 PID: 27826 at mm/slub.c:4698 freelargekmalloc+0xac/0xe0 RIP: 0010:freelargekmalloc+0xac/0xe0 Call Trace: ? warn+0xea/0x330...

PT-2025-2930

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue concerns a potential invalid memory access in the igb init module function. This occurs when the pci register driver function fails, and the dca notifier is not unregistered, leading ...

SUSE CVE-2022-49027

In the Linux kernel, the following vulnerability has been resolved: iavf: Fix error handling in iavfinitmodule The iavfinitmodule won't destroy workqueue when pciregisterdriver failed. Call destroyworkqueue when pciregisterdriver failed to prevent the resource leak. Similar to the handling of...

UBUNTU-CVE-2022-49027

In the Linux kernel, the following vulnerability has been resolved: iavf: Fix error handling in iavfinitmodule The iavfinitmodule won't destroy workqueue when pciregisterdriver failed. Call destroyworkqueue when pciregisterdriver failed to prevent the resource leak. Similar to the handling of...

Google Pixel security vulnerabilities

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which stems from a missing bounds check in the govinit module, which may be read out of bounds...

PT-2023-33333

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.158 Description The issue concerns error handling in the fm10k init module function. It was introduced in version v3.18 and fixed in version v5.10.158. The actual impact and attack plausibility have not yet...

PT-2023-33264 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: The issue concerns error handling in the fm10k init module function. It was introduced in version v3.18 and is fixed in Linux Kernel version v5.15.82. The actual impact and attack...