Astra Linux – vulnerability in linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2mboxgetrsp errors in cn10k.c Add an error pointer check after calling otx2mboxgetrsp...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Handling of errors when calling otx2mboxgetrsp in otx2dcbnl.c has been improved. A check for the error pointer was added after calling otx2mboxgetrsp...

Astra Linux – vulnerability in linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2mboxgetrsp errors in otx2flows.c Adding an error pointer check after calling otx2mboxgetrsp...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix potential memory leak in otx2inittc In otx2inittc, if rhashtableinit fails, it does not free tc-tcentriesbitmap which is allocated in otx2tcallocentbitmap...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2mboxgetrsp errors in otx2ethtool.c Add an error pointer check after calling otx2mboxgetrsp...

PT-2026-98630

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the octeontx2-pf driver where HTB offload programs NIX AF TLxX TOPOLOGY are applied to QoS-allocated scheduler queues using the otx2 qos txschq set parent topology...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Handling of errors when calling otx2mboxgetrsp in otx2common.c has been improved. A check for the error pointer was added after calling otx2mboxgetrsp...

PT-2026-120430

Уязвимость функции otx2 free sq res компонента drivers/net/ethernet/marvell/octeontx2/nic/otx2 pf.c ядра операционной системы Linux связана с неосвобождением ресурса после истечения действительного срока его эксплуатации. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в...

Linux Ethernet Network Adapter Driver otx2_ptpdestroy() Heap Buffer Overflow

The vulnerability of the otx2ptpdestroy function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2ptp.c file of the Ethernet network adapter driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote...

OPENSUSE-SU-2025:20172-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50253: bpf: make sure skb-len != 0 when redirecting to a tunneling device bsc1249912. - CVE-2025-37916: pdscore: remove write-after-free of clientid bsc1243474. -...

PT-2025-54972

Уязвимость функции otx2 set ringparam модуля drivers/net/ethernet/marvell/octeontx2/nic/otx2 ethtool.c драйвера сетевых адаптеров Ethernet Marvell ядра операционной системы Linux связана с чтением за границами буфера. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на...

CVE-2025-39978

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix potential use after free in otx2tcaddflow This code calls kfreercunewnode, rcu and then dereferences "newnode" and then dereferences it on the next line. Two lines later, we take a mutex so I don't think this is...

octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c

...

CVE-2025-39944 octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix use-after-free bugs in otx2synctstamp The original code relies on canceldelayedwork in otx2ptpdestroy, which does not ensure that the delayed work item synctstampwork has fully completed if it was already runnin...

CVE-2025-39944 octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix use-after-free bugs in otx2synctstamp The original code relies on canceldelayedwork in otx2ptpdestroy, which does not ensure that the delayed work item synctstampwork has fully completed if it was already runnin...

CVE-2025-39944

CVE-2025-39944 affects the Linux kernel OcteonTX2 PCI device driver (octeontx2-pf). It fixes a use-after-free in otx2_sync_tstamp() caused by a race with a running delayed work item; cancel_delayed_work() could leave synctstamp_work dereferencing a freed otx2_ptp. The mitigation in the fix is to ...

Linux Distros Unpatched Vulnerability : CVE-2022-48968

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix potential memory leak in otx2inittc In otx2inittc, if rhashtableinit faile...

Linux kernel otx2_flows.c DoS

The vulnerability in the otx2flows.c component of the Linux kernel is related to pointer dereferencing errors. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux kernel otx2_pool_refill_task() otx2_sq_aura_pool_init

The vulnerabilities of the otx2poolrefilltask, otx2sqaurapoolinit, and otx2rqaurapoolinit functions in the Linux kernel are related to the use of memory after it has been freed. Exploiting these vulnerabilities can allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the otx2qosreadtxschqcfgtl function in the drivers/net/ethernet/marvell/octeontx2/nic/qos.c module of the Linux kernel is related to improper memory release before deleting the last reference „memory leak“. Exploiting this vulnerability could allow an attacker to cause a...