CVE-2025-71234

CVE-2025-71234: Linux kernel rtl8xxxu slab-out-of-bounds in rtl8xxxu_sta_add fixed by setting hw->sta_data_size to sizeof(struct rtl8xxxu_sta_info) during probe to correctly allocate per-station data. Issue caused mac80211 to access sta->drv_priv beyond allocated space; KASAN showed a slab-...

CVE-2026-23083 fou: Don't allow 0 for FOU_ATTR_IPPROTO.

In the Linux kernel, the following vulnerability has been resolved: fou: Don't allow 0 for FOUATTRIPPROTO. fouudprecv has the same problem mentioned in the previous patch. If FOUATTRIPPROTO is set to 0, skb is not freed by fouudprecv nor "resubmit"-ted in ipprotocoldeliverrcu. Let's forbid 0 for...

The vulnerability of the skb_segment_list() function in the net/core/skbuff.c module, which is part of Linux’s kernel network functions, allows a hacker to cause a service failure.

The vulnerability of the skbsegmentlist function in the net/core/skbuff.c module, which is part of Linux’s kernel network functions support, relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-71133

The CVE-2025-71133 entry concerns the Linux kernel RDMA/irdma path, where irdma_net_event could dereference neigh (ptr) data before confirming NETEVENT_NEIGH_UPDATE. The code fix moves neigh->dev access under the NETEVENT_NEIGH_UPDATE case, preventing a potential out-of-bounds read reported by...

CVE-2025-71112 net: hns3: add VLAN id validation before using

In the Linux kernel, the following vulnerability has been resolved: net: hns3: add VLAN id validation before using Currently, the VLAN id may be used without validation when receive a VLAN configuration mailbox from VF. The length of vlandelfailbmap is BITSTOLONGSVLANNVID. It may cause...

kernel: nbd: fix incomplete validation of ioctl arg

A flaw has been found in the Linux kernel’s NBD drivers.The issue stems from incomplete validation of IOCTL arguments passed to the NBD driver. Specifically, oversized or unchecked arguments may lead to a signed integer overflow in blockwritefullpage and misuse of argument values cast to int in...

Vulnerability of the virtnet_enable_queue_pair() function in the drivers/net/virtio_net.c module – A Linux kernel network device driver that allows a hacker to cause a service failure

Vulnerability of the virtnetenablequeuepair function in the drivers/net/virtionet.c module – The Linux kernel’s network device driver support mechanism is related to operations involving resources after their expiration. Exploiting this vulnerability can allow an attacker to cause service failure...

Vulnerability of the bond_setup_by_slave() function in the drivers/net/bonding/bond_main.c module – a Linux kernel network adapter driver support mechanism that allows a hacker to cause a service failure

Vulnerability of the bondsetupbyslave function in the drivers/net/bonding/bondmain.c module – The Linux kernel’s network adapter support driver is vulnerable due to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause servic...

The vulnerability of the nfsd4_copy() function in the fs/nfsd/nfs4proc.c module, which is part of the NFS network file system support in Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the nfsd4copy function in the fs/nfsd/nfs4proc.c module, which is part of the NFS network file system support in Linux kernels, relates to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause service failures...

kernel: net: sched: sfb: fix null pointer access issue when sfb_init() fails

A null pointer dereference exists in the linux kernel, such that when sfbinit fails qdisc is NULL, and it will cause gpf issue, leading to damage to the availability of the system...

kernel: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction

In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix use-after-free of work objects after cmid destruction The commit 59c68ac31e15 "iwcm: free cmid resources on the last deref" simplified cmid resource management by freeing cmid once all references to the cmid were...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414534)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414534 advisory. An out of memory bounds write flaw 1 or 2 bytes of memory in the Linux kernel NFS subsystem was found in the way users use mirroring replication of files with NFS. A...

net: kcm: Fix race condition in kcm_unattach()

...

Linux Distros Unpatched Vulnerability : CVE-2024-57941

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfs: Fix the non-cancellation of copy when cache is temporarily disabled When the caching...

Linux Distros Unpatched Vulnerability : CVE-2023-53141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ila: do not generate empty messages in ilaxlatnlcmdgetmapping ilaxlatnlcmdgetmapping generates an empty skb, triggerring a recent sanity check 1. Instead, retur...

Linux Distros Unpatched Vulnerability : CVE-2025-22006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw: Fix NAPI registration sequence Registering the interrupts for ...

kernel: net: atm: fix use after free in lec_send()

In the Linux kernel, the following vulnerability has been resolved: net: atm: fix use after free in lecsend The -send operation frees skb so save the length before calling -send to avoid a use after free...

CVE-2024-51515

Race condition vulnerability in the kernel network module Impact:Successful exploitation of this vulnerability may affect availability...

SUSE CVE-2022-49817

In the Linux kernel, the following vulnerability has been resolved: net: mhi: Fix memory leak in mhinetdellink MHI driver registers network device without setting the needsfreenetdev flag, and does NOT call freenetdev when unregisters network device, which causes a memory leak. This patch calls...

CVE-2022-49805 net: lan966x: Fix potential null-ptr-deref in lan966x_stats_init()

In the Linux kernel, the following vulnerability has been resolved: net: lan966x: Fix potential null-ptr-deref in lan966xstatsinit lan966xstatsinit calls createsinglethreadworkqueue and not checked the ret value, which may return NULL. And a null-ptr-deref may happen: lan966xstatsinit...