Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the lack of nlapolicy validation of the vdpa functional attribute, which could lead to out-of-bounds reads...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414640)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414640 advisory. An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate length constraints or checks, and can exceed the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986672)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986672 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: fix segfault in nfcgenldumpdevicesdone When kmalloc in nfcgenldumpdevices fails then...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987292)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987292 advisory. In the Linux kernel, the following vulnerability has been resolved: afunix: Get userns from inskb in unixdiaggetexact. Wei Chen reported a NULL deref in skuserns 01,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986375)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986375 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: fix segfault in nfcgenldumpdevicesdone When kmalloc in nfcgenldumpdevices fails then...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-400059)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-400059 advisory. In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: access device through ctx instead of peer The previous commit fixed a bug tha...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986582)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986582 advisory. In the Linux kernel, the following vulnerability has been resolved: net: netlink: afnetlink: Prevent empty skb by adding a check on len. Adding a check on len...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414340)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414340 advisory. An issue was discovered in the Linux kernel before 6.0.11. Missing offset validation in drivers/net/wireless/microchip/wilc1000/hif.c in the WILC1000 wireless driver...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986402)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986402 advisory. In the Linux kernel, the following vulnerability has been resolved: net: netlink: afnetlink: Prevent empty skb by adding a check on len. Adding a check on len...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414476)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414476 advisory. There is a sleep-in-atomic bug in /net/nfc/netlink.c that allows an attacker to crash the Linux kernel by simulating a nfc device from user-space. Tenable has...

PT-2025-41130

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.0-rc7-syzkaller-gfe4469582053 Description The Linux kernel contains a flaw in the net/handshake/netlink.c component, specifically within the handshake nl done doit function. This issue can lead to a null...

SUSE CVE-2022-50498

In the Linux kernel, the following vulnerability has been resolved: eth: alx: take rtnllock on resume Zbynek reports that alx trips an rtnl assertion on resume: RTNL: assertion failed at net/core/dev.c 2891 RIP: 0010:netifsetrealnumtxqueues+0x1ac/0x1c0 Call Trace: alxopen+0x230/0x570 alx...

SUSE CVE-2023-53543

In the Linux kernel, the following vulnerability has been resolved: vdpa: Add max vqp attr to vdpanlpolicy for nlattr length check The vdpanlpolicy structure is used to validate the nlattr when parsing the incoming nlmsg. It will ensure the attribute being described produces a valid nlattr pointe...

SUSE CVE-2023-53570

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: fix integer overflow in nl80211parsembssidelems nl80211parsembssidelems uses a u8 variable numelems to count the number of MBSSID elements in the nested netlink attribute attrs, which can lead to an integer overflo...

CVE-2023-53543

In the Linux kernel, the following vulnerability has been resolved: vdpa: Add max vqp attr to vdpanlpolicy for nlattr length check The vdpanlpolicy structure is used to validate the nlattr when parsing the incoming nlmsg. It will ensure the attribute being described produces a valid nlattr pointe...

CVE-2022-50498

In the Linux kernel, the following vulnerability has been resolved: eth: alx: take rtnllock on resume Zbynek reports that alx trips an rtnl assertion on resume: RTNL: assertion failed at net/core/dev.c 2891 RIP: 0010:netifsetrealnumtxqueues+0x1ac/0x1c0 Call Trace: alxopen+0x230/0x570 alx...

UBUNTU-CVE-2023-53570

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: fix integer overflow in nl80211parsembssidelems nl80211parsembssidelems uses a u8 variable numelems to count the number of MBSSID elements in the nested netlink attribute attrs, which can lead to an integer overflo...

UBUNTU-CVE-2022-50498

In the Linux kernel, the following vulnerability has been resolved: eth: alx: take rtnllock on resume Zbynek reports that alx trips an rtnl assertion on resume: RTNL: assertion failed at net/core/dev.c 2891 RIP: 0010:netifsetrealnumtxqueues+0x1ac/0x1c0 Call Trace: alxopen+0x230/0x570 alx...

CVE-2022-50498 eth: alx: take rtnl_lock on resume

In the Linux kernel, the following vulnerability has been resolved: eth: alx: take rtnllock on resume Zbynek reports that alx trips an rtnl assertion on resume: RTNL: assertion failed at net/core/dev.c 2891 RIP: 0010:netifsetrealnumtxqueues+0x1ac/0x1c0 Call Trace: alxopen+0x230/0x570 alx...

CVE-2022-50498

CVE-2022-50498 : In the Linux kernel, the alx ethernet driver vulnerability stems from not taking the rtnl_lock during resume, allowing an rtnl assertion to trip in net/core/dev.c when reopening on resume. The issue is localized to the alx driver’s suspend/resume path and is triggered during devi...