CVE-2023-53632 net/mlx5e: Take RTNL lock when needed before calling xdp_set_features()

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Take RTNL lock when needed before calling xdpsetfeatures Hold RTNL lock when calling xdpsetfeatures with a registered netdev, as the call triggers the netdev notifiers. This could happen when switching from uplink rep ...

CVE-2023-53632

Technical details for CVE-2023-53632 are not provided in the supplied documents. The connected sources reference other CVEs/advisories but do not include product/version/root-cause or fixes for this CVE. Monitor for updates.

CVE-2023-53632 net/mlx5e: Take RTNL lock when needed before calling xdp_set_features()

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Take RTNL lock when needed before calling xdpsetfeatures Hold RTNL lock when calling xdpsetfeatures with a registered netdev, as the call triggers the netdev notifiers. This could happen when switching from uplink rep ...

EUVD-2025-32793

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Take RTNL lock when needed before calling xdpsetfeatures Hold RTNL lock when calling xdpsetfeatures with a registered netdev, as the call triggers the netdev notifiers. This could happen when switching from uplink rep ...

SUSE CVE-2022-50476

In the Linux kernel, the following vulnerability has been resolved: ntbnetdev: Use devkfreeskbany in interrupt context TX/RX callback handlers ntbnetdevtxhandler, ntbnetdevrxhandler can be called in interrupt context via the DMA framework when the respective DMA operations have completed. As such...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987109)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987109 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: synclinkgt: Fix null-pointer-dereference in slgtclean When the driver fails at allochdlcdev,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987115)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987115 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix NULL pointer dereferencing in smcvlanbytcpsk Coverity reports a possible NULL...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987219)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987219 advisory. In the Linux kernel, the following vulnerability has been resolved: net: dpaa2-eth: fix use-after-free in dpaa2ethremove Access to netdev after freenetdev will cause...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987132)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987132 advisory. In the Linux kernel, the following vulnerability has been resolved: net: qcom/emac: fix UAF in emacremove adpt is netdev private data and it cannot be used after...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986944)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986944 advisory. In the Linux kernel, the following vulnerability has been resolved: net: hamradio: fix memory leak in mkissclose My local syzbot instance hit memory leak in...

Linux Distros Unpatched Vulnerability : CVE-2025-39925

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: j1939: implement NETDEVUNREGISTER notification handler syzbot is reporting unregisternetdevice: waiting for vcan0 to become free. Usage count = 2 problem,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414317)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414317 advisory. A double-free flaw was found in the Linux kernels TUN/TAP device driver functionality in how a user registers the device when the registernetdevice function fails...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986869)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986869 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ti: fix UAF in tlanremoveone priv is netdev private data and it cannot be used after...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987376)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987376 advisory. In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix double free issue on err path fix error path handling in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986308)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986308 advisory. In the Linux kernel, the following vulnerability has been resolved: xen/netfront: destroy queues before realnumtxqueues is zeroed xennetdestroyqueues relies on...

SUSE CVE-2025-39947

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Harden uplink netdev access against device unbind The function mlx5uplinknetdevget gets the uplink netdevice pointer from mdev-mlx5eres.uplinknetdev. However, the netdevice can be removed and its pointer cleared when...

CVE-2023-53556

In the Linux kernel, the following vulnerability has been resolved: iavf: Fix use-after-free in freenetdev We do netifnapiadd for all allocated qvectors, but potentially do netifnapidel for part of them, then kfree qvectors and leave invalid pointers at dev-napilist. Reproducer: root@host cat...

CVE-2022-50476

In the Linux kernel, the following vulnerability has been resolved: ntbnetdev: Use devkfreeskbany in interrupt context TX/RX callback handlers ntbnetdevtxhandler, ntbnetdevrxhandler can be called in interrupt context via the DMA framework when the respective DMA operations have completed. As such...

CVE-2023-53556 iavf: Fix use-after-free in free_netdev

In the Linux kernel, the following vulnerability has been resolved: iavf: Fix use-after-free in freenetdev We do netifnapiadd for all allocated qvectors, but potentially do netifnapidel for part of them, then kfree qvectors and leave invalid pointers at dev-napilist. Reproducer: root@host cat...

CVE-2022-50476 ntb_netdev: Use dev_kfree_skb_any() in interrupt context

In the Linux kernel, the following vulnerability has been resolved: ntbnetdev: Use devkfreeskbany in interrupt context TX/RX callback handlers ntbnetdevtxhandler, ntbnetdevrxhandler can be called in interrupt context via the DMA framework when the respective DMA operations have completed. As such...