CVE-2022-49817 net: mhi: Fix memory leak in mhi_net_dellink()

In the Linux kernel, the following vulnerability has been resolved: net: mhi: Fix memory leak in mhinetdellink MHI driver registers network device without setting the needsfreenetdev flag, and does NOT call freenetdev when unregisters network device, which causes a memory leak. This patch calls...

CVE-2022-49817 net: mhi: Fix memory leak in mhi_net_dellink()

In the Linux kernel, the following vulnerability has been resolved: net: mhi: Fix memory leak in mhinetdellink MHI driver registers network device without setting the needsfreenetdev flag, and does NOT call freenetdev when unregisters network device, which causes a memory leak. This patch calls...

PT-2025-18583 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the MHI driver. The driver registers a network device without setting the needs free netdev flag and does n...

PT-2025-18584 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the IOSM driver. The driver registers a network device without setting the needs free netdev flag and does...

PT-2025-18534 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the MHI driver of the Linux kernel. The driver registers a network device without setting the needs free netdev flag and fails to call free...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unreleased MHI network device that could lead to a memory leak...

UBUNTU-CVE-2025-37860

In the Linux kernel, the following vulnerability has been resolved: sfc: fix NULL dereferences in ef100processdesignparam Since cited commit, ef100probemain and hence also ef100checkdesignparams run before efx-netdev is created; consequently, we cannot netifsettsomaxsize or segs at this point. Mo...

CVE-2025-22116

In the Linux kernel, the following vulnerability has been resolved: idpf: check error for registernetdev on init Current init logic ignores the error code from registernetdev, which will cause WARNON on attempt to unregister it, if there was one, and there is no info for the user that the creatio...

CVE-2025-22116 idpf: check error for register_netdev() on init

In the Linux kernel, the following vulnerability has been resolved: idpf: check error for registernetdev on init Current init logic ignores the error code from registernetdev, which will cause WARNON on attempt to unregister it, if there was one, and there is no info for the user that the creatio...

CVE-2025-21970 net/mlx5: Bridge, fix the crash caused by LAG state check

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Bridge, fix the crash caused by LAG state check When removing LAG device from bridge, NETDEVCHANGEUPPER event is triggered. Driver finds the lower devices PFs to flush all the offloaded entries. And mlx5lagissharedfdb i...

CVE-2025-21925

CVE-2025-21925 : In the Linux kernel, a vulnerability was fixed where skb_get() could be used before dev_queue_xmit() when a shared skb is processed (e.g., with IFF_TX_SKB_SHARING). The documented exploit path involves syzbot crashing a host via the llc_sap_action_send_test_c path, with the e1000...

PT-2025-16756

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue was related to the idpf driver, where the error code from register netdev was ignored during initialization, potentially...

CVE-2025-29029

Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formSetSpeedWan function...

The vulnerability of the Qnap network device support automation system is related to errors in the authentication process. This error allows a malicious user to gain unauthorized access to the device.

The vulnerability of the Qnap network device support automation system is related to errors in the authentication process for certificates. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the device remotely...

Linux Distros Unpatched Vulnerability : CVE-2025-21681

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix lockup on tx to unregistering netdev with carrier Commit in a fixes tag...

Linux Distros Unpatched Vulnerability : CVE-2024-53183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - um: net: Do not use drvdata in release The drvdata is not available in release. Let's just use containerof to get the umlnet instance. Otherwise, removing a...

Linux Distros Unpatched Vulnerability : CVE-2022-48850

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net-sysfs: add check for netdevice being present to speedshow When bringing down the netdevice or system shutdown, a panic can be triggered while accessing the...

Linux Distros Unpatched Vulnerability : CVE-2024-38554

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ax25: Fix reference count leak issue of netdevice There is a reference count leak issue of the object netdevice in ax25devdevicedown. When the ax25 device is...

Linux Distros Unpatched Vulnerability : CVE-2021-47459

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939netdevstart: fix UAF for rxkref of j1939priv It will trigger UAF for rxkref...

SUSE CVE-2022-49307

In the Linux kernel, the following vulnerability has been resolved: tty: synclinkgt: Fix null-pointer-dereference in slgtclean When the driver fails at allochdlcdev, and then we remove the driver module, we will get the following splat: 25.065966 general protection fault, probably for non-canonic...