The vulnerability of the bgmac_dma_tx_add() function in the drivers/net/ethernet/broadcom/bgmac.c module of the Ethernet network adapter driver from Broadcom’s Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bgmacdmatxadd function in the drivers/net/ethernet/broadcom/bgmac.c file of the Broadcom Ethernet network adapter driver for the Linux operating system is related to a buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to compromise th...

CVE-2026-23454

A flaw was found in the Linux kernel's mana network driver. A race condition during the destruction of a hardware completion queue HWC channel can lead to memory being freed while still in use. This use-after-free vulnerability allows an in-flight interrupt handler to dereference freed memory. Th...

CVE-2026-23445

In the Linux kernel, the following vulnerability has been resolved: igc: fix page fault in XDP TX timestamps handling If an XDP application that requested TX timestamping is shutting down while the link of the interface in use is still up the following kernel splat is reported: 883.803618 T1554...

CVE-2026-31395

In the Linux kernel, the following vulnerability has been resolved: bnxten: fix OOB access in DBGBUFPRODUCER async event handler The ASYNCEVENTCMPLEVENTIDDBGBUFPRODUCER handler in bnxtasynceventprocess uses a firmware-supplied 'type' field directly as an index into bp-bstrace without bounds...

ROS-20260403-73-0024

A vulnerability in the hvnetvsc component of the Linux operating system kernel is related to a lack of synchronization. Exploitation of the vulnerability allows an attacker to cause a denial of service...

i40e: Fix preempt count leak in napi poll tracepoint

...

CVE-2026-23313

A flaw was found in the i40e network driver within the Linux kernel. This vulnerability, a preemption count leak, occurs in the NAPI New API poll tracepoint due to incorrect handling of CPU preemption counts. This issue could lead to an imbalanced preemption count, potentially causing kernel...

CVE-2026-23386

A flaw was found in the Linux kernel, specifically within the gve network driver. When the driver operates in DQ-QPL Data Queue - Queue Pair List mode, the gvetxcleanpendingpackets function incorrectly processes buffer cleanup. This error can cause the system to attempt to unmap memory at incorre...

PT-2026-27694

In the Linux kernel, the following vulnerability has been resolved: libie: don't unroll if fwlog isn't supported The libie fwlog deinit function can be called during driver unload even when firmware logging was never properly initialized. This led to call trace: 148.576156 Oops: Oops: 0000 1 SMP...

UBUNTU-CVE-2026-23262

In the Linux kernel, the following vulnerability has been resolved: gve: Fix stats report corruption on queue count change The driver and the NIC share a region in memory for stats reporting. The NIC calculates its offset into this region based on the total size of the stats region and the size o...

CVE-2026-23262

In the Linux kernel, the following vulnerability has been resolved: gve: Fix stats report corruption on queue count change The driver and the NIC share a region in memory for stats reporting. The NIC calculates its offset into this region based on the total size of the stats region and the size o...

CVE-2026-23262 gve: Fix stats report corruption on queue count change

In the Linux kernel, the following vulnerability has been resolved: gve: Fix stats report corruption on queue count change The driver and the NIC share a region in memory for stats reporting. The NIC calculates its offset into this region based on the total size of the stats region and the size o...

The vulnerabilities of the functions i40e_dbg_command_read(), i40e_dbg_netdev_ops_read(), and i40e_dbg_netdev_ops_write() in the driver module drivers/net/ethernet/intel/i40e/i40edebugfs.c of the Intel Ethernet network adapter driver for the Linux operating system allow a attacker to access protected information or cause service failures.

The vulnerability of the functions i40edbgnetdevopsread and i40edbgnetdevopswrite in the driver module drivers/net/ethernet/intel/i40e/i40edebugfs.c of the Intel Ethernet network adapter driver for the Linux operating system is related to reading data from memory beyond the allowed limits...

EUVD-2026-10835

In dhdtcpdatainfoget of dhdip.c, there is a possible Denial of Service due to a precondition check failure. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

The vulnerability of the tun_get_user() function in the drivers/net/tun.c file of the Linux kernel’s network device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tungetuser function in the drivers/net/tun.c file of the Linux kernel’s network device driver module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

CLSA-2026-1773047152 kernel: Fix of 21 CVEs

i40e: fix IRQ freeing in i40evsirequestirqmsix error path CVE-2025-39911 - media: rc: fix races with imondisconnect CVE-2025-39993 - VMCI: fix race between vmcihostsetupnotify and vmcictxunsetnotify CVE-2025-38102 - partitions: mac: fix handling of bogus partition table CVE-2025-21772 - tracing:...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005495)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005495 advisory. In the Linux kernel, the following vulnerability has been resolved: igb: Do not bring the device up after non-fatal error Commit 004d25060c78 igb: Fix igbdown hung o...

PT-2026-22561

In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00473802; Issue ID:...

net: mscc: ocelot: Fix crash when adding interface under a lag

...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...