CVE-2023-53632 net/mlx5e: Take RTNL lock when needed before calling xdp_set_features()

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Take RTNL lock when needed before calling xdpsetfeatures Hold RTNL lock when calling xdpsetfeatures with a registered netdev, as the call triggers the netdev notifiers. This could happen when switching from uplink rep ...

CVE-2023-53632

Technical details for CVE-2023-53632 are not provided in the supplied documents. The connected sources reference other CVEs/advisories but do not include product/version/root-cause or fixes for this CVE. Monitor for updates.

SUSE CVE-2023-53581

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Check for NOTREADY flag state after locking Currently the check for NOTREADY flag is performed before obtaining the necessary lock. This opens a possibility for race condition when the flow is concurrently removed from...

CVE-2023-53632: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Take RTNL lock when needed before calling xdpsetfeatures Hold RTNL lock when calling xdpsetfeatures with a registered netdev, as the call triggers the netdev notifiers. This could happen when switching from uplink rep ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986882)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986882 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix handling of wrong devices during bond netevent Current implementation of bond...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987160)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987160 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix memory leak in mlx5coredestroycq error path Prior to this patch in case...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-390843)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-390843 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix a double-free in arfscreategroups When in allocated by kvzalloc fails,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986955)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986955 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: nullify cq-dbg pointer in mlx5debugcqremove Prior to this patch in case...

UBUNTU-CVE-2023-53581

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Check for NOTREADY flag state after locking Currently the check for NOTREADY flag is performed before obtaining the necessary lock. This opens a possibility for race condition when the flow is concurrently removed from...

CVE-2023-53581

CVE-2023-53581 affects the Linux kernel mlx5 core (net/mlx5e). The issue is a race: NOT_READY flag is checked before acquiring the necessary lock, allowing a flow to be concurrently removed from unready_flows by a workqueue, which can cause a double removal and a crash (as shown by the crash trac...

EUVD-2025-32390

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Harden uplink netdev access against device unbind The function mlx5uplinknetdevget gets the uplink netdevice pointer from mdev-mlx5eres.uplinknetdev. However, the netdevice can be removed and its pointer cleared when...

CVE-2025-39947: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Harden uplink netdev access against device unbind The function mlx5uplinknetdevget gets the uplink netdevice pointer from mdev-mlx5eres.uplinknetdev. However, the netdevice can be removed and its pointer cleared when...

CVE-2023-53581: Concurrent Execution using Shared Resource with Improper Synchronization

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Check for NOTREADY flag state after locking Currently the check for NOTREADY flag is performed before obtaining the necessary lock. This opens a possibility for race condition when the flow is concurrently removed from...

CVE-2023-53591: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix deadlock in tc route query code Cited commit causes ABBA deadlock0 when peer flows are created while holding the devcom rw semaphore. Due to peer flows offload implementation the lock is taken much higher up the ca...

EUVD-2025-27919

Malicious code in bioql PyPI...

EUVD-2024-53758

Malicious code in bioql PyPI...

EUVD-2025-13155

Malicious code in bioql PyPI...

net/mlx5e: Avoid field-overflowing memcpy()

...

SUSE-SU-2025:03382-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-46733: btrfs: fix qgroup reserve leaks in cowfilerange bsc1230708. - CVE-2024-49996: cifs: Fix buffer overflow when parsing NFS reparse points bsc1232089...

Linux Distros Unpatched Vulnerability : CVE-2023-53394

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: xsk: Fix crash on regular rq reactivation When the regular rq is reactivated after the XSK socket is closed it could be reading stale cqes which...