UBUNTU-CVE-2026-23353

In the Linux kernel, the following vulnerability has been resolved: ice: fix crash in ethtool offline loopback test Since the conversion of ice to page pool, the ethtool loopback test crashes: BUG: kernel NULL pointer dereference, address: 000000000000000c PF: supervisor write access in kernel mo...

CVE-2026-23389

CVE-2026-23389 (Linux kernel ice component) : The issue is a memory leak in ice_set_ringparam() where tx_rings and xdp_rings are allocated before rx_rings. If rx_rings allocation fails, the code jumps to a done path that leaks both tx_rings and xdp_rings; if a per-Rx ring setup fails, code may ju...

CVE-2026-23389 ice: Fix memory leak in ice_set_ringparam()

In the Linux kernel, the following vulnerability has been resolved: ice: Fix memory leak in icesetringparam In icesetringparam, txrings and xdprings are allocated before rxrings. If the allocation of rxrings fails, the code jumps to the done label leaking both txrings and xdprings. Furthermore, i...

CVE-2026-23362

CVE-2026-23362 affects the Linux kernel component can/bcm locking during bcm_op runtime updates (bcm_tx_setup/bcm_rx_setup). Connected OSV records show Root (rootio-linux) has patched this CVE in Root:Debian:11/12/13 with multiple fixed versions across Debian/Ubuntu and Mageia advisories, indicat...

CVE-2026-23353 ice: fix crash in ethtool offline loopback test

In the Linux kernel, the following vulnerability has been resolved: ice: fix crash in ethtool offline loopback test Since the conversion of ice to page pool, the ethtool loopback test crashes: BUG: kernel NULL pointer dereference, address: 000000000000000c PF: supervisor write access in kernel mo...

PT-2026-27718

In the Linux kernel, the following vulnerability has been resolved: ice: fix crash in ethtool offline loopback test Since the conversion of ice to page pool, the ethtool loopback test crashes: BUG: kernel NULL pointer dereference, address: 000000000000000c PF: supervisor write access in kernel mo...

The vulnerability of the rx_macro_load_compander_coeff() function in the sound/soc/codecs/lpass-rx-macro.c module allows a hacker to access protected information or cause a service failure in the Linux operating system’s SoC kernel.

The vulnerability of the rxmacroloadcompandercoeff function in the sound/soc/codecs/lpass-rx-macro.c module of the Linux operating system’s sound support module is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow an attacker to access protect...

Siemens SIMATIC S7-1500 Improper Input Validation (CVE-2025-38470)

"In the Linux kernel, the following vulnerability has been resolved: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime Assuming the rx-vlan-filter feature is enabled on a net device, the 8021q module will automatically add or remove VLAN 0 when the net device is put...

SUSE CVE-2026-23242

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix potential NULL pointer dereference in header processing If siwgethdr returns -EINVAL before setrxfpducontext, qp-rxfpdu can be NULL. The error path in siwtcprxdata dereferences qp-rxfpdu-moreddpsegs without checking...

CVE-2026-23242

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix potential NULL pointer dereference in header processing If siwgethdr returns -EINVAL before setrxfpducontext, qp-rxfpdu can be NULL. The error path in siwtcprxdata dereferences qp-rxfpdu-moreddpsegs without checking...

UBUNTU-CVE-2026-23242

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix potential NULL pointer dereference in header processing If siwgethdr returns -EINVAL before setrxfpducontext, qp-rxfpdu can be NULL. The error path in siwtcprxdata dereferences qp-rxfpdu-moreddpsegs without checking...

CVE-2026-23242

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix potential NULL pointer dereference in header processing If siwgethdr returns -EINVAL before setrxfpducontext, qp-rxfpdu can be NULL. The error path in siwtcprxdata dereferences qp-rxfpdu-moreddpsegs without checking...

The vulnerability of the mwifiexhandle_uap_rx_forward() function in the drivers/net/wireless/marvell/mwifiex/uap_txrx.c file of the Marvell wireless adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mwifiexhandleuaprxforward function in the drivers/net/wireless/marvell/mwifiex/uaptxrx.c file of the Marvell wireless adapter driver in the Linux operating system kernel is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a...

EUVD-2026-10856

In EfwApTransport::ProcessRxRing of efwaptransport.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-10857

In EfwApTransport::ProcessRxRing of efwaptransport.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0123

The CVE-2026-0123 entry concerns the EfwApTransport::ProcessRxRing function in efw_ap_transport.cc, where an out-of-bounds write can occur due to a missing bounds check. This vulnerability is described as enabling local elevation of privilege with no additional execution privileges required and n...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005419)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005419 advisory. In the Linux kernel, the following vulnerability has been resolved: tls: stop recv if initial processrxlist gave us non-DATA If we have a non-DATA record on the rxli...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005787)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005787 advisory. In the Linux kernel, the following vulnerability has been resolved: tls: stop recv if initial processrxlist gave us non-DATA If we have a non-DATA record on the rxli...

The vulnerability of the iwl_pcie_irq_rx_msix_handler() function in the drivers/net/wireless/intel/iwlwifi/pcie/rx.c file of the Intel wireless adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iwlpcieirqrxmsixhandler function in the drivers/net/wireless/intel/iwlwifi/pcie/rx.c module of the Intel wireless networking driver for the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to...

CVE-2026-25408

Missing Authorization vulnerability in PluginRx Broken Link Notifier broken-link-notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broken Link Notifier: from n/a through = 1.3.5...