3133 matches found
CVE-2026-23009 xhci: sideband: don't dereference freed ring when removing sideband endpoint
In the Linux kernel, the following vulnerability has been resolved: xhci: sideband: don't dereference freed ring when removing sideband endpoint xhcisidebandremoveendpoint incorrecly assumes that the endpoint is running and has a valid transfer ring. Lianqin reported a crash during suspend/wake-u...
EUVD-2026-4619
In the Linux kernel, the following vulnerability has been resolved: xhci: sideband: don't dereference freed ring when removing sideband endpoint xhcisidebandremoveendpoint incorrecly assumes that the endpoint is running and has a valid transfer ring. Lianqin reported a crash during suspend/wake-u...
CVE-2026-23009
CVE-2026-23009 is a Linux kernel vulnerability in the xHCI sideband code where xhci_sideband_remove_endpoint() could dereference a non-existent transfer ring (ep->ring) during suspend/resume or re-enumeration, risking a crash. The fix adds a guard to only dereference ep->ring if it exists a...
Azure Linux 3.0 Security Update: kata-containers (CVE-2025-4432)
The version of kata-containers installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-4432 advisory. - A flaw was found in Rust's Ring package. A panic May be triggered when overflow checking is enabled...
Azure Linux 3.0 Security Update: kernel (CVE-2025-38048)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38048 advisory. - In the Linux kernel, the following vulnerability has been resolved: virtioring: Fix data race by tagging...
Azure Linux 3.0 Security Update: kernel (CVE-2025-37944)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37944 advisory. - In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix invalid entry fetch in...
ROS-20260119-7306
A vulnerability in the xhci-ring.c component of the Linux operating system kernel is related to pointer dereferencing errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
SUSE CVE-2025-71137
In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" This patch ensures that the RX ring size rxpending is not set below the permitted length. This avoids UBSAN shift-out-of-bounds errors when users passes small or zero ring size...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003998)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003998 advisory. A use-after-free flaw was found in kernel/trace/ringbuffer.c in Linux kernel before 5.10-rc1. There was a race problem in traceopen and resize of cpu buffer running...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001069)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001069 advisory. The Xen netback functionality in the Linux kernel before 3.7.8 allows guest OS users to cause a denial of service loop by triggering ring pointer corruption. Tenable...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001376)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001376 advisory. In the Linux kernel before 5.4.2, the iouring feature leads to requests that inadvertently have UID 0 and full capabilities, aka CID-181e448d8709. This is related to...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004323)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004323 advisory. A use-after-free flaw was found in kernel/trace/ringbuffer.c in Linux kernel before 5.10-rc1. There was a race problem in traceopen and resize of cpu buffer running...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004496)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004496 advisory. An issue was discovered in domadvise in mm/madvise.c in the Linux kernel before 5.6.8. There is a race condition between coredump operations and the IORINGOPMADVISE...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000936)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000936 advisory. Double free vulnerability in the ioctxalloc function in fs/aio.c in the Linux kernel before 3.12.4 allows local users to cause a denial of service system crash or...
MiracleLinux 4 : kernel-2.6.32-754.25.1.el6 (AXSA:2019-4425:06)
The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-4425:06 advisory. Kernel: KVM: OOB memory access via mmio ring buffer CVE-2019-14821 Tenable has extracted the preceding description block directly from the MiracleLinux...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001531)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001531 advisory. A double free bug in packetsetring in net/packet/afpacket.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001391)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001391 advisory. A use-after-free flaw was found in kernel/trace/ringbuffer.c in Linux kernel before 5.10-rc1. There was a race problem in traceopen and resize of cpu buffer running...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000592)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000592 advisory. Race condition in net/packet/afpacket.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service use-after-free by...
kernel: i40e: add validation for ring_len param
A flaw was identified in the Intel “i40e” Ethernet driver in the Linux Kernel where the ringlen parameter supplied by a VF virtual function is passed unchecked to the hardware memory context. If a malicious Virtual function provides a too-large or misaligned ringlen, it may allow the device to...
