Linux Kernel DoS

The vulnerability in the moduleflashfwschedule function within net/ethtool/module.c, which implements network functions of the Linux kernel, is related to a resource leak that occurs after the expiration of its valid usage period. Exploitation of this vulnerability may allow an attacker to cause ...

CVE-2026-63997: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ethtool: module: avoid leaking a netdev ref on module flash errors moduleflashfwschedule is missing undo for setting the "inprogress" flag and taking the netdev reference. Delay taking these, the device can't disappear while we a...

CVE-2024-47742 firmware_loader: Block path traversal

In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Block path traversal Most firmware names are hardcoded strings, or are constructed from fairly constrained format strings where the dynamic parts are just some hex numbers or such. However, there are a couple...

CVE-2024-47742: Improper Limitation of a Pathname to a Restricted Directory

In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Block path traversal Most firmware names are hardcoded strings, or are constructed from fairly constrained format strings where the dynamic parts are just some hex numbers or such. However, there are a couple...