Astra Linux - уязвимость в linux-5.10, linux-6.1, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ip6vti: Fixed a slab-use-after-free issue in decodesession6. When the ipv6vti device is set to the qdisc of the sfb type, the cb field of the sent skb may be modified during enqueuing. This can lead to a slab-use-after-free when...

AZL-69995 CVE-2025-40135 affecting package kernel 6.6.126.1-1

In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6xmit Use RCU in ip6xmit in order to use dstdevrcu to prevent possible UAF...

CVE-2025-40135

CVE-2025-40135 : In the Linux kernel, the IPv6 transmit path (ip6_xmit) was fixed to use RCU, switching to dst_dev_rcu() to prevent a potential use-after-free. The vulnerability is addressed by the kernel patch referenced in multiple vendor advisories (e.g., Rocky Linux/RHSA/ELSA/NASL entries) wh...

CVE-2025-38432

In the Linux kernel, the following vulnerability has been resolved: net: netpoll: Initialize UDP checksum field before checksumming commit f1fce08e63fe "netpoll: Eliminate redundant assignment" removed the initialization of the UDP checksum, which was wrong and broke netpoll IPv6 transmission due...

CVE-2025-38432

CVE-2025-38432 relates to the Linux kernel netpoll path, where the UDP checksum field (udph->check) was not initialized before checksumming. This followed a commit (f1fce08e63fe) that eliminated a redundant initialization, which inadvertently broke IPv6 netpoll transmission due to incorrect ch...

PT-2025-30839 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel's netpoll functionality related to UDP checksum handling. A commit removed the initialization of the UDP checksum field, leading to incorrect...