Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Drivers: Net: qlcnic: Fixed a potential memory leak in qlcnicsriovinit. If the vpalloc function fails in qlcnicsriovinit, all previously allocated vp resources must be freed...

CVE-2026-90112

A flaw was found in the qlcnic driver in the Linux kernel. This vulnerability occurs due to insufficient validation of unified ROM sections when processing firmware files. A local attacker could provide a specially crafted or truncated firmware image, leading the driver to read beyond its allocat...

Linux kernel security vulnerabilities

The Linux kernel contains a security vulnerability stemming from the fact that the unified ROM parser in the qlcnic driver fails to adequately validate ROM sections prior to loading. This results in unchecked addition and multiplication operations, as well as dereferencing of pointers at location...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004836)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004836 advisory. In the Linux kernel, the following vulnerability has been resolved: drivers: net: qlcnic: Fix potential memory leak in qlcnicsriovinit If vp alloc failed in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986686)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986686 advisory. In the Linux kernel, the following vulnerability has been resolved: net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic83xxaddrings In qlcnic83xxaddrings,...

EUVD-2022-55567

Malicious code in bioql PyPI...

EUVD-2022-55510

Malicious code in bioql PyPI...

SUSE CVE-2022-50242

In the Linux kernel, the following vulnerability has been resolved: drivers: net: qlcnic: Fix potential memory leak in qlcnicsriovinit If vp alloc failed in qlcnicsriovinit, all previously allocated vp needs to be freed...

Linux Distros Unpatched Vulnerability : CVE-2022-50288

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - qlcnic: prevent -dcb use-after-free on qlcnicdcbenable failure adapter-dcb would get silently freed inside qlcnicdcbenable in case qlcnicdcbattach would return ...

Linux Distros Unpatched Vulnerability : CVE-2022-50242

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drivers: net: qlcnic: Fix potential memory leak in qlcnicsriovinit If vp alloc failed in qlcnicsriovinit, all previously allocated vp needs to be freed...

DEBIAN-CVE-2022-50242

In the Linux kernel, the following vulnerability has been resolved: drivers: net: qlcnic: Fix potential memory leak in qlcnicsriovinit If vp alloc failed in qlcnicsriovinit, all previously allocated vp needs to be freed...

CVE-2022-50242

In the Linux kernel, the following vulnerability has been resolved: drivers: net: qlcnic: Fix potential memory leak in qlcnicsriovinit If vp alloc failed in qlcnicsriovinit, all previously allocated vp needs to be freed...

UBUNTU-CVE-2022-50242

In the Linux kernel, the following vulnerability has been resolved: drivers: net: qlcnic: Fix potential memory leak in qlcnicsriovinit If vp alloc failed in qlcnicsriovinit, all previously allocated vp needs to be freed...

CVE-2022-50242 drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init()

In the Linux kernel, the following vulnerability has been resolved: drivers: net: qlcnic: Fix potential memory leak in qlcnicsriovinit If vp alloc failed in qlcnicsriovinit, all previously allocated vp needs to be freed...

CVE-2022-50242

CVE-2022-50242 pertains to the Linux kernel driver in the qlcnic SR-IOV path. The vulnerability arises in the function qlcnic_sriov_init() when allocating virtual ports (vp); if vp allocation fails, previously allocated vps are not freed, creating a potential memory leak. The connected advisories...

SUSE CVE-2021-47542

In the Linux kernel, the following vulnerability has been resolved: net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic83xxaddrings In qlcnic83xxaddrings, the indirect function of ahw-hwops-allocmbxargs will be called to allocate memory for cmd.req.arg, and there is a dereference of it ...

PT-2025-37496

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was identified in the qlcnic sriov init function within the qlcnic driver. If virtual port vp allocation fails during initialization, previously allocated virtual ports are...