GO-2025-4097 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, kubernetes, podman, buildah, sriov-network-device-plugin, falco-no-driver, k3s, grafana-alloy, nvidia-container-toolkit...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, cadvisor, podman, buildah, sriov-network-device-plugin, falco-no-driver, docker-machine-driver-harvester, nvidia-container-toolkit, k8s-device-plugin...

dpaa2-eth: put MAC endpoint device on disconnect

...

CVE-2026-68321

CVE-2026-68321 affects the Linux kernel driver net: txgbe, addressing a FDIR filter leak that occurs on device removal. The issue arises when perfect FDIR filters are added while the interface is down and remain on the software list for later restore; unregister_netdev() only calls ndo_stop if th...

EUVD-2026-55505

In the Linux kernel, the following vulnerability has been resolved: mctp: serial: handle zero-length frames to prevent rx buffer overflow The MCTP serial receive state machine reads a frame length byte in mctpserialpushheader case 2 and validates it upper-bound-only: if c MCTPSERIALFRAMEMTU...

xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()

...

net: usb: net1080: validate packet_len before pad-byte access in rx_fixup

...

SUSE CVE-2026-64580

In the Linux kernel, the following vulnerability has been resolved: xfrm6: clear dst.dev on error to avoid double netdevput in xfrm6filldst On the error path where in6devgetdev returns NULL, xfrm6filldst releases the device reference with netdevput but leaves xdst-u.dst.dev set. dstdestroy later...

CVE-2026-20308

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to perform a denial of service DoS attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could...

EUVD-2026-53274

In the Linux kernel, the following vulnerability has been resolved: xfrm6: clear dst.dev on error to avoid double netdevput in xfrm6filldst On the error path where in6devgetdev returns NULL, xfrm6filldst releases the device reference with netdevput but leaves xdst-u.dst.dev set. dstdestroy later...

kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns

A flaw was found in the Linux kernel's rtnetlink component. An unprivileged local user, leveraging a user namespace, can exploit a missing CAPNETADMIN capability check in the rtnlnewlink function. This allows the user to create paired network devices in arbitrary network namespaces, including the...

CVE-2026-56852 affecting package sriov-network-device-plugin for versions less than 3.7.0-7

CVE-2026-56852 affecting package sriov-network-device-plugin for versions less than 3.7.0-7. A patched version of the package is available...

SUSE CVE-2026-64538

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix null-ptr-deref in fib6nhmtuchange. fib6nhmtuchange re-fetches idev via in6devgetarg-dev and dereferences idev-cnf.mtu6 without a NULL check. addrconfifdown clears dev-ip6ptr with RCUINITPOINTER after rt6disableip has...

PT-2026-64629

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth BNEP Bluetooth Network Encapsulation Protocol component where the bnep add connection function reads the L2CAP connection without holding the channel loc...

SUSE CVE-2026-63859

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Add missing bits in airohaqdmacleanuptxqueue Similar to airohaqdmacleanuprxqueue, reset DMA TX descriptors in airohaqdmacleanuptxqueue routine. Moreover, reset TXDMAIDX to TXCPUIDX to notify the NIC the QDMA TX ring ...

SUSE CVE-2026-63837

In the Linux kernel, the following vulnerability has been resolved: net: ena: PHC: Check return code before setting timestamp output enaphcgettimex64 is setting the output parameter regardless of whether enacomphcgettimestamp succeeded or failed. When enacomphcgettimestamp returns an error, the...

AZL-93318 CVE-2026-56852 affecting package sriov-network-device-plugin for versions less than 3.7.0-7

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

CVE-2026-63990

In the Linux kernel, the following vulnerability has been resolved: bonding: refuse to enslave CAN devices syzbot reported a kernel paging request crash in canrxunregister inside net/can/afcan.c. The crash occurs because a virtual CAN device vxcan is being enslaved to a bonding master. During the...

CVE-2026-64043 ovpn: fix race between deleting interface and adding new peer

In the Linux kernel, the following vulnerability has been resolved: ovpn: fix race between deleting interface and adding new peer While deleting an existing ovpn interface, there is a very narrow window where adding a new peer via netlink may cause the netdevice to hang and prevent its...

CVE-2026-63997 ethtool: module: avoid leaking a netdev ref on module flash errors

In the Linux kernel, the following vulnerability has been resolved: ethtool: module: avoid leaking a netdev ref on module flash errors moduleflashfwschedule is missing undo for setting the "inprogress" flag and taking the netdev reference. Delay taking these, the device can't disappear while we a...