PT-2026-38993

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the USB gadget RNDIS driver where class, subclass, and protocol options can be accessed concurrently through configfs. This issue was discovered during code...

Linux kernel Ethernet driver Heap Buffer Overflow DoS

The vulnerability of the wxsetuprxresources function in the drivers/net/ethernet/wangxun/libwx/wxlib.c file of the Linux kernel’s Ethernet network adapter driver is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

i40e: Fix preempt count leak in napi poll tracepoint

...

Linux kernel network device driver Heap Buffer Overflow DoS

The vulnerability of the lapbethopen function in the drivers/net/wan/lapbether.c module of the Linux kernel-based network device driver framework is related to a buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

CVE-2026-23313

A flaw was found in the i40e network driver within the Linux kernel. This vulnerability, a preemption count leak, occurs in the NAPI New API poll tracepoint due to incorrect handling of CPU preemption counts. This issue could lead to an imbalanced preemption count, potentially causing kernel...

CVE-2026-23386

A flaw was found in the Linux kernel, specifically within the gve network driver. When the driver operates in DQ-QPL Data Queue - Queue Pair List mode, the gvetxcleanpendingpackets function incorrectly processes buffer cleanup. This error can cause the system to attempt to unmap memory at incorre...

UBUNTU-CVE-2026-23262

In the Linux kernel, the following vulnerability has been resolved: gve: Fix stats report corruption on queue count change The driver and the NIC share a region in memory for stats reporting. The NIC calculates its offset into this region based on the total size of the stats region and the size o...

CVE-2026-23262

In the Linux kernel, the following vulnerability has been resolved: gve: Fix stats report corruption on queue count change The driver and the NIC share a region in memory for stats reporting. The NIC calculates its offset into this region based on the total size of the stats region and the size o...

CVE-2026-23262 gve: Fix stats report corruption on queue count change

In the Linux kernel, the following vulnerability has been resolved: gve: Fix stats report corruption on queue count change The driver and the NIC share a region in memory for stats reporting. The NIC calculates its offset into this region based on the total size of the stats region and the size o...

Intel Ethernet i40e_dbg_command_read Buffer Overflow DoS

The vulnerability of the functions i40edbgnetdevopsread and i40edbgnetdevopswrite in the driver module drivers/net/ethernet/intel/i40e/i40edebugfs.c of the Intel Ethernet network adapter driver for the Linux operating system is related to reading data from memory beyond the allowed limits...

Linux Ethernet Driver DoS

The vulnerabilities of the functions hbgresetprepare and hbgresetdone in the driver/net/ethernet/hisilicon/hibmcge/hbgerr.c file of the Ethernet network adapter driver for the Linux operating system are related to the occurrence of mutual locking. Exploiting these vulnerabilities could allow an...

EUVD-2026-10835

In dhdtcpdatainfoget of dhdip.c, there is a possible Denial of Service due to a precondition check failure. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

Linux kernel tun_get_user() Buffer Overflow DoS

The vulnerability of the tungetuser function in the drivers/net/tun.c file of the Linux kernel’s network device driver module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

CLSA-2026-1773047152 kernel: Fix of 21 CVEs

i40e: fix IRQ freeing in i40evsirequestirqmsix error path CVE-2025-39911 - media: rc: fix races with imondisconnect CVE-2025-39993 - VMCI: fix race between vmcihostsetupnotify and vmcictxunsetnotify CVE-2025-38102 - partitions: mac: fix handling of bogus partition table CVE-2025-21772 - tracing:...

drivers/net/phy/micrel.c Heap Buffer Overflow DoS

Vulnerability of the kszphyconfigReset function in the drivers/net/phy/micrel.c module – The Linux physical layer network driver relies on the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-39126

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/mlx5e component regarding XDP multi-buf fragment counting for striding RQ. XDP multi-buf programs can modify the XDP buffer layout when calling bpf xdp pull da...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005495)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005495 advisory. In the Linux kernel, the following vulnerability has been resolved: igb: Do not bring the device up after non-fatal error Commit 004d25060c78 igb: Fix igbdown hung o...

PT-2026-22561

Name of the Vulnerable Software and Affected Versions Qualcomm WLAN STA Driver affected versions not specified Description The WLAN STA driver contains a flaw due to a missing bounds check. This could allow a malicious actor who already has System privileges to escalate their privileges locally...

net: mscc: ocelot: Fix crash when adding interface under a lag

...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...