UBUNTU-CVE-2025-40337

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Correctly handle Rx checksum offload errors The stmmacrx function would previously set skb-ipsummed to CHECKSUMUNNECESSARY if hardware checksum offload CoE was enabled and the packet was of a known IP ethertype...

CVE-2025-40337

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Correctly handle Rx checksum offload errors The stmmacrx function would previously set skb-ipsummed to CHECKSUMUNNECESSARY if hardware checksum offload CoE was enabled and the packet was of a known IP ethertype...

CVE-2025-40337 net: stmmac: Correctly handle Rx checksum offload errors

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Correctly handle Rx checksum offload errors The stmmacrx function would previously set skb-ipsummed to CHECKSUMUNNECESSARY if hardware checksum offload CoE was enabled and the packet was of a known IP ethertype...

CVE-2025-40337 net: stmmac: Correctly handle Rx checksum offload errors

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Correctly handle Rx checksum offload errors The stmmacrx function would previously set skb-ipsummed to CHECKSUMUNNECESSARY if hardware checksum offload CoE was enabled and the packet was of a known IP ethertype...

CVE-2025-40337

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Correctly handle Rx checksum offload errors The stmmacrx function would previously set skb-ipsummed to CHECKSUMUNNECESSARY if hardware checksum offload CoE was enabled and the packet was of a known IP ethertype...

CVE-2025-40337

The CVE-2025-40337 vulnerability affects the Linux kernel’s net: stmmac driver, specifically the stmmac_rx function. The issue occurred when hardware checksum offload was enabled and the packet had a known IP ethertype: skb->ip_summed could be incorrectly set to CHECKSUM_UNNECESSARY without ve...

CVE-2025-40337: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Correctly handle Rx checksum offload errors The stmmacrx function would previously set skb-ipsummed to CHECKSUMUNNECESSARY if hardware checksum offload CoE was enabled and the packet was of a known IP ethertype...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly handling Rx checksum offload errors, which could result in corrupted packets being delivered...

Linux Distros Unpatched Vulnerability : CVE-2025-40337

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: stmmac: Correctly handle Rx checksum offload errors The stmmacrx function would previously set skb-ipsummed to CHECKSUMUNNECESSARY if hardware checksum...

PT-2025-49425

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the virtio-net component of the Linux kernel related to the handling of received packet lengths in large packets. A change introduced by commit 4959aebba8c0 altered how...

CVE-2025-40236 virtio-net: zero unused hash fields

In the Linux kernel, the following vulnerability has been resolved: virtio-net: zero unused hash fields When GSO tunnel is negotiated virtionethdrtnlfromskb tries to initialize the tunnel metadata but forget to zero unused rxhash fields. This may leak information to another side. Fixing this by...

WordPress Offload, AI & Optimize with Cloudflare Images plugin <= 1.9.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Offload, AI & Optimize with Cloudflare Images versions = 1.9.5...

TencentOS Server 4: dpdk (TSSA-2025:0249)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0249 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

The vulnerability of the flow_offload_queue_work() function in the net/netfilter/nf_flow_table_offload.c module of the netfilter kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the flowoffloadqueuework function in the net/netfilter/nfflowtableoffload.c module of the netfilter kernel of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service...

kernel: sctp: linearize cloned gso packets in sctp_rcv

A flaw use of uninitialized memory uncontrolled and invisible by attacker in the Linux kernel SCTP transport protocol was found in the way user triggers malicious SCTP packets. A remote user could use this flaw to crash the system. The bug actual only for systems where SCTP protocol being enabled...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990764)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990764 advisory. In the Linux kernel, the following vulnerability has been resolved: net: gso: fix panic on fraglist with mixed head alloc types Since commit 3dcbdb134f32 net: gso: F...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990782)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990782 advisory. In the Linux kernel, the following vulnerability has been resolved: bridge: switchdev: Fix memory leaks when changing VLAN protocol The bridge driver can offload VLA...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990779)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990779 advisory. In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Fix zero-division error when disabling tc cbs The commit b8c43360f6e4 net: stmmac: N...

CLSA-2025-1762538077 dpdk: Fix of CVE-2024-11614

CVE-2024-11614: add bounds check in vhostdequeueoffload to prevent checksum computation overflow...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988897)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988897 advisory. In the Linux kernel, the following vulnerability has been resolved: net: macsec: Fix offload support for NETDEVUNREGISTER event Current macsec netdev notify handler...