CVE-2025-40164 usbnet: Fix using smp_processor_id() in preemptible code warnings

In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix using smpprocessorid in preemptible code warnings Syzbot reported the following warning: BUG: using smpprocessorid in preemptible 00000000 code: dhcpcd/2879 caller is usbnetskbreturn+0x74/0x490...

CVE-2025-40140

CVE-2025-40140 affects the Linux kernel code path rtl8150 multicast handling. The bug arises in rtl8150_set_multicast, which previously called netif_stop_queue followed by netif_wake_queue, waking the TX queue before the URB completed, enabling double submissions from rtl8150_start_xmit. The net ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990477)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990477 advisory. In the Linux kernel, the following vulnerability has been resolved: can: gsusb: gsusbopen/close: fix memory leak The gsusb driver appears to suffer from a malady...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989117)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989117 advisory. In the Linux kernel, the following vulnerability has been resolved: xen/netback: avoid entering xenvifrxnextskb with an empty rx queue xenvifrxnextskb is expecting t...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989165)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989165 advisory. In the Linux kernel, the following vulnerability has been resolved: net: hsr: Fix potential use-after-free The skb is delivered to netifrx which may free it, after...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989009)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989009 advisory. In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: Fix potential use-after-free in hisifemacrx The skb is delivered to napigroreceiv...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988681)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988681 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer Driver's probe allocates...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989535)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989535 advisory. In the Linux kernel, the following vulnerability has been resolved: can: gsusb: gsusbopen/close: fix memory leak The gsusb driver appears to suffer from a malady...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988669)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988669 advisory. In the Linux kernel, the following vulnerability has been resolved: can: gsusb: gsusbopen/close: fix memory leak The gsusb driver appears to suffer from a malady...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989387)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989387 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: gdm724x: fix use after free in gdmlterx The netifrxni function frees the skb so we can't...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime Assuming the "rx-vlan-filter" feature is enabled on a net device, the 8021q module will automatically add or remove VLAN 0 when the net device is put...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: In the net: libwx section, the Rx ring descriptor is properly reset after a device reset. When a device reset is triggered due to changes in features, such as toggling Rx VLAN, wx-doreset is called to reinitialize the Rx rings. T...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Flushing delayed SKBs while releasing RXE resources When SKB packets are sent out, they still depend on rxe resources, such as QP and sk. These resources are released when the SKB packets are destroyed. However, if thes...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Added error handling for retrieving the RX metadata pointer. Proper error checking was added for the dmaenginedescgetmetadataptr function, which may return an error pointer, potentially leading to crashes or...

kernel: tls: fix handling of zero-length records on the rx_list

In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rxlist Each recvmsg call must process either - only contiguous DATA records any number of them - one non-DATA record If the next record has different type than what has already been...

PT-2025-44330

Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine VM or a process to perform unauthorized access to the register space of the JPEG cores assigned a victim VM/process, potentially gaining arbitrary read/write access to the victim VM/process data...

PT-2025-44336

Highlights New Product Support AMD Ryzen™ AI 5 330 New Game Support Battlefield™ 6 DX12 Vampire: The Masquerade - Bloodlines 2 DX12 Expanded Vulkan Extension Support VK EXT shader float8 VK KHR video decode vp9 VK KHR video encode av1 VK KHR video encode quantization map VK AMDX dense geometry...

kernel: tls: fix handling of zero-length records on the rx_list

In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rxlist Each recvmsg call must process either - only contiguous DATA records any number of them - one non-DATA record If the next record has different type than what has already been...

Linux Distros Unpatched Vulnerability : CVE-2025-39973

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i40e: add validation for ringlen param The ringlen parameter provided by the virtual function VF is assigned directly to the hardware memory context HMC without...

Siemens SIMATIC Devices Uncontrolled Resource Consumption (CVE-2024-35789)

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes When moving a station out of a VLAN and deleting the VLAN afterwards, the fastrx entry still holds a pointer to the VLAN's netdev, which can cause use-after-free...