CVE-2026-74623

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: free stranded TX buffers on ring deinit aqvecdeinit drains the TX rings with a single aqringtxclean call, which frees at most AQCFGTXCLEANBUDGET 256 descriptors and stops at hwhead, which no longer moves once...

CVE-2026-74623 net: atlantic: free stranded TX buffers on ring deinit

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: free stranded TX buffers on ring deinit aqvecdeinit drains the TX rings with a single aqringtxclean call, which frees at most AQCFGTXCLEANBUDGET 256 descriptors and stops at hwhead, which no longer moves once...

CVE-2026-74623

CVE-2026-74623 affects the Aquantia Atlantic network driver in the Linux kernel. The root cause is that aq_vec_deinit() drains TX rings with a single aq_ring_tx_clean() call limited to 256 descriptors and stops at hw_head, which no longer advances after hardware and NAPI are stopped. Completed de...

Linux Distros Unpatched Vulnerability : CVE-2026-74623

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: atlantic: free stranded TX buffers on ring deinit aqvecdeinit drains the TX rings with a single aqringtxclean call, which frees at most AQCFGTXCLEANBUDGET...

UBUNTU-CVE-2026-74285

In the Linux kernel, the following vulnerability has been resolved: net: Stop leased rxq before uninstalling its memory provider netifrxqcleanupunlease tears down the memory provider that was installed on a physical RX queue through a netkit queue lease. It currently revokes the provider's DMA...

CVE-2026-74285

In the Linux kernel, the following vulnerability has been resolved: net: Stop leased rxq before uninstalling its memory provider netifrxqcleanupunlease tears down the memory provider that was installed on a physical RX queue through a netkit queue lease. It currently revokes the provider's DMA...

CVE-2026-74285

CVE-2026-74285 describes a Linux kernel issue where netif_rxq_cleanup_unlease() tear-down inverted the sequence: it uninstalls the memory provider (clearing dma_addr) before stopping the physical RX queue, allowing a window for DMA to stale/zero addresses via an active queue. The fix swaps the or...

CVE-2026-53298 net: airoha: Move ndesc initialization at end of airoha_qdma_init_rx_queue()

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Move ndesc initialization at end of airohaqdmainitrxqueue If queue entry or DMA descriptor list allocation fails in airohaqdmainitrxqueue routine, airohaqdmacleanup will trigger a NULL pointer dereference running...

EUVD-2026-39833

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Move ndesc initialization at end of airohaqdmainitrxqueue If queue entry or DMA descriptor list allocation fails in airohaqdmainitrxqueue routine, airohaqdmacleanup will trigger a NULL pointer dereference running...

CVE-2026-31646

CVE-2026-31646 affects the Linux kernel LAN966X driver. The root cause is improper handling of the return value from page_pool_create(): on failure it can yield an ERR_PTR that is unconditionally passed through xdp_rxq_info_reg_mem_model() into page_pool_use_xdp_mem(), where it is dereferenced, c...

SUSE SLES15 Security Update : kernel (Live Patch 1 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:0736-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:0736-1 advisory. This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.38 fixes one security issue The following security issue was fixed: - CVE-2025-38129:...

Linux Distros Unpatched Vulnerability : CVE-2025-40199

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pagepool: Fix PPMAGICMASK to avoid crashing on some 32-bit arches Helge reported that the introduction of PPMAGICMASK let to crashes on boot on his 32-bit paris...

EUVD-2022-55111

Malicious code in bioql PyPI...

EUVD-2025-14133

Malicious code in bioql PyPI...

CVE-2025-37859 page_pool: avoid infinite loop to schedule delayed worker

In the Linux kernel, the following vulnerability has been resolved: pagepool: avoid infinite loop to schedule delayed worker We noticed the kworker in pagepoolreleaseretry was waken up repeatedly and infinitely in production because of the buggy driver causing the inflight less than 0 and warning...

Linux Distros Unpatched Vulnerability : CVE-2022-49093

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: skbuff: fix coalescing for pagepool fragment recycling Fix a use-after-free when using...

Linux Distros Unpatched Vulnerability : CVE-2024-26953

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: esp: fix bad handling of pages from pagepool When the skb is reorganized during espoutput !esp-inline, the pages coming from the original skb fragments are...

CVE-2022-49093

In the Linux kernel, the following vulnerability has been resolved: skbuff: fix coalescing for pagepool fragment recycling Fix a use-after-free when using pagepool with page fragments. We encountered this problem during normal RX in the hns3 driver: 1 Initially we have three descriptors in the RX...

CVE-2022-49093 skbuff: fix coalescing for page_pool fragment recycling

In the Linux kernel, the following vulnerability has been resolved: skbuff: fix coalescing for pagepool fragment recycling Fix a use-after-free when using pagepool with page fragments. We encountered this problem during normal RX in the hns3 driver: 1 Initially we have three descriptors in the RX...

CVE-2022-49093

In the Linux kernel, the following vulnerability has been resolved: skbuff: fix coalescing for pagepool fragment recycling Fix a use-after-free when using pagepool with page fragments. We encountered this problem during normal RX in the hns3 driver: 1 Initially we have three descriptors in the RX...