AZL-64565 CVE-2025-38165 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix panic when calling skblinearize The panic can be reproduced by executing the command: ./bench sockmap -c 2 -p 1 -a --rx-verdict-ingress --rx-strp 100000 Then a kernel panic was captured: ''' 657.460555 kernel BU...

CVE-2025-38165

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix panic when calling skblinearize The panic can be reproduced by executing the command: ./bench sockmap -c 2 -p 1 -a --rx-verdict-ingress --rx-strp 100000 Then a kernel panic was captured: ''' 657.460555 kernel BU...

AZL-64541 CVE-2025-38123 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: Fix napi rx poll issue When driver handles the napi rx polling requests, the netdev might have been released by the dellink logic triggered by the disconnect operation on user plane. However, in the logic of...

CVE-2025-38165 bpf, sockmap: Fix panic when calling skb_linearize

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix panic when calling skblinearize The panic can be reproduced by executing the command: ./bench sockmap -c 2 -p 1 -a --rx-verdict-ingress --rx-strp 100000 Then a kernel panic was captured: ''' 657.460555 kernel BU...

CVE-2025-38165

The CVE-2025-38165 vulnerability affects the Linux kernel’s bpf/sockmap path, causing a kernel panic when skb_linearize() is called. The root cause is a race-related interaction between backlog skb handling and skb release in the recvmsg path, previously mitigated by skb_get() in the backlog, whi...

CVE-2025-38123 net: wwan: t7xx: Fix napi rx poll issue

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: Fix napi rx poll issue When driver handles the napi rx polling requests, the netdev might have been released by the dellink logic triggered by the disconnect operation on user plane. However, in the logic of...

CVE-2025-38123

CVE-2025-38123 concerns the Linux kernel in Azure Linux 3.0. The vulnerability arises in the wwan/t7xx driver during napi rx polling, where a netdev may be released by dellink logic on disconnect, yet skb processing uses an invalid netdev, causing a NULL pointer dereference (kernel panic). The is...

CVE-2025-38123 net: wwan: t7xx: Fix napi rx poll issue

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: Fix napi rx poll issue When driver handles the napi rx polling requests, the netdev might have been released by the dellink logic triggered by the disconnect operation on user plane. However, in the logic of...

The vulnerability of the websReadEvent() function in Intelbras RX 1500 router microprogramming software allows a intruder to execute arbitrary code or cause a service failure.

The vulnerability of the websReadEvent function in Intelbras RX 1500 router microprogramming software is related to integer overflow during the processing of the http header field. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by sendi...

The vulnerability of the ath12k_dp_rx_process() function in the Wi-Fi driver’s code, located at drivers/net/wireless/ath/ath12k/dp_rx.c, in the Linux kernel, allows a hacker to compromise privacy.

The vulnerability of the ath12kdprxprocess function in the Wi-Fi driver’s code, located at drivers/net/wireless/ath/ath12k/dprx.c, in the Linux kernel, relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise confidentiality...

DEBIAN-CVE-2025-38042

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: Drop skipfdq argument from k3udmaglueresetrxchn The user of k3udmaglueresetrxchn e.g. tiam65cpswnuss can run on multiple platforms having different DMA architectures. On some platforms there can be on...

UBUNTU-CVE-2025-38042

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: Drop skipfdq argument from k3udmaglueresetrxchn The user of k3udmaglueresetrxchn e.g. tiam65cpswnuss can run on multiple platforms having different DMA architectures. On some platforms there can be on...

CVE-2025-38042

CVE-2025-38042 concerns the Linux kernel DMA engine for TI k3-udma-glue. The issue stems from relying on the skip_fdq argument in k3_udma_glue_reset_rx_chn(); on some platforms there is a single FDQ for all RX flows, while others have a separate FDQ per flow. The fix infers FDQ behavior from the ...

PT-2025-25988 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: A bug in the Linux kernel has been resolved, specifically in the bgmac module. The issue is triggered by wrong bytes compl and can cause a BUG ON when there is an RX interrupt...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: idpf: fixed checksums set in idpfrxrsc idpfrxrsc uses skbtransportoffsetskb when the transport header is not yet set. This triggers the following warning in builds with CONFIGDEBUGNET=y:...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: net: wwan: t7xx: Fixed the napi rx polling issue When the driver handles napi rx polling requests, the netdev might have been released by the dellink logic triggered by the disconnect operation on the user plane. However, duri...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: Net: Ethernet: mtk-star-emac: fixed spinlock recursion issues during rx/tx polls. Use spinlockirqsave and spinunlockirqrestore instead of spinlock and spinunlock in the mtk-star-emac driver to avoid spinlock recursion issues...

PT-2025-27709

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the handling of napi rx polling requests by the driver. When the driver processes skb in polling, it may use an invali...

CVE-2023-33067

Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points...

CVE-2023-6103

A vulnerability has been found in Intelbras RX 1500 1.1.9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /WiFi.html of the component SSID Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploi...