264 matches found
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993100)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993100 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: fix netdevice reference leaks in attachdefaultqdiscs In attachdefaultqdiscs, if a dev...
CVE-2023-54273 xfrm: Fix leak of dev tracker
In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix leak of dev tracker At the stage of direction checks, the netdev reference tracker is already initialized, but released with wrong put call...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992608)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992608 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: fix netdevice reference leaks in attachdefaultqdiscs In attachdefaultqdiscs, if a dev...
kernel: can: j1939: implement NETDEV_UNREGISTER notification handler
A flaw was discovered in the J1939 protocol implementation in the Linux kernel. The NETDEVUNREGISTER notification handler was missing for undoing changes performed by j1939skbind. As a result, an extra reference remains on the j1939priv structure when unregistering a network device, preventing it...
DEBIAN-CVE-2025-40271
In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix uaf in procreaddirde Pde is erased from subdir rbtree through rberase, but not set the node to EMPTY, which may result in uaf access. We should use RBCLEARNODE set the erased node to EMPTY, then pdesubdirnext will...
UBUNTU-CVE-2025-40271
In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix uaf in procreaddirde Pde is erased from subdir rbtree through rberase, but not set the node to EMPTY, which may result in uaf access. We should use RBCLEARNODE set the erased node to EMPTY, then pdesubdirnext will...
CentOS 9 : kernel-5.14.0-645.el9
The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the kernel-5.14.0-645.el9 build changelog. - In the Linux kernel, the following vulnerability has been resolved: can: j1939: implement NETDEVUNREGISTER notification handler syzbot is...
Siemens SIMATIC S7-1500 Improper Input Validation (CVE-2024-26596)
net: dsa: netdevpriv dereference before check on non-DSA netdevice events. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503958;...
kernel: net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF.
In the Linux kernel, the following vulnerability has been resolved: net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. SIOCBRDELIF is passed to devioctl first and later forwarded to brioctlcall, which causes unnecessary RTNL dance and the splat below 0 under RTNL pressure. Let's say Thread A...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990537)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990537 advisory. In the Linux kernel, the following vulnerability has been resolved: hvnetvsc: Register VF in netvscprobe if NETDEVICEREGISTER missed If hvnetvsc driver is unloaded a...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989061)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989061 advisory. In the Linux kernel, the following vulnerability has been resolved: net-sysfs: add check for netdevice being present to speedshow When bringing down the netdevice or...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990368)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990368 advisory. In the Linux kernel, the following vulnerability has been resolved: hvnetvsc: Register VF in netvscprobe if NETDEVICEREGISTER missed If hvnetvsc driver is unloaded a...
Unity Linux 20.1050e Security Update: kernel (UTSA-2025-989892)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989892 advisory. In the Linux kernel, the following vulnerability has been resolved: ipmr,ip6mr: acquire RTNL before calling ip6mrfreetable on failure path ip6mrfreetable can only be...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988776)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988776 advisory. In the Linux kernel, the following vulnerability has been resolved: net: hamradio: fix memory leak in mkissclose My local syzbot instance hit memory leak in...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986855)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986855 advisory. In the Linux kernel, the following vulnerability has been resolved: net-sysfs: add check for netdevice being present to speedshow When bringing down the netdevice or...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986519)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986519 advisory. In the Linux kernel, the following vulnerability has been resolved: net-sysfs: add check for netdevice being present to speedshow When bringing down the netdevice or...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986489)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986489 advisory. In the Linux kernel, the following vulnerability has been resolved: net-sysfs: add check for netdevice being present to speedshow When bringing down the netdevice or...
UBUNTU-CVE-2025-39947
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Harden uplink netdev access against device unbind The function mlx5uplinknetdevget gets the uplink netdevice pointer from mdev-mlx5eres.uplinknetdev. However, the netdevice can be removed and its pointer cleared when...
