Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: netfilter: nftsethash: Unaligned atomic read on struct nftsetext Access to the genmask field in struct nftsetext results in an unaligned atomic read: 72.130109 Unable to handle kernel paging requests at virtual address...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005766)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005766 advisory. In the Linux kernel, the following vulnerability has been resolved: ftrace: Add condresched to ftracegraphsethash When the kernel contains a large number of function...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005504)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005504 advisory. In the Linux kernel, the following vulnerability has been resolved: ftrace: Add condresched to ftracegraphsethash When the kernel contains a large number of function...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990285)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990285 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsethash: unaligned atomic read on struct nftsetext Access to genmask field in struc...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989643)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989643 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsethash: unaligned atomic read on struct nftsetext Access to genmask field in struc...

CVE-2023-53179 netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add the missing IPSETHASHWITHNET0 macro for ipsethashnetportnet.c The missing IPSETHASHWITHNET0 macro in ipsethashnetportnet can lead to the use of wrong CIDRPOSc for calculating array offsets, which can lead to...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the lack of the IPSETHASHWITHNET0 macro in ipsethashnetportnet, which could lead to integer underflows and...

Linux Distros Unpatched Vulnerability : CVE-2025-37940

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ftrace: Add condresched to ftracegraphsethash When the kernel contains a large number of functions that can be traced, the loop in ftracegraphsethash may take a...

ftrace: Add cond_resched() to ftrace_graph_set_hash()

...

SUSE CVE-2025-37940

In the Linux kernel, the following vulnerability has been resolved: ftrace: Add condresched to ftracegraphsethash When the kernel contains a large number of functions that can be traced, the loop in ftracegraphsethash may take a lot of time to execute. This may trigger the softlockup watchdog. Ad...

UBUNTU-CVE-2025-37940

In the Linux kernel, the following vulnerability has been resolved: ftrace: Add condresched to ftracegraphsethash When the kernel contains a large number of functions that can be traced, the loop in ftracegraphsethash may take a lot of time to execute. This may trigger the softlockup watchdog. Ad...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that stems from a missing condresched in ftracegraphsethash...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in ip6finishoutput2 CVE-2024-44986 In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid possible NULL deref in rt6uncachedlistflushdev CVE-2024-47707 In the Linux...

SUSE CVE-2024-54031

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsethash: unaligned atomic read on struct nftsetext Access to genmask field in struct nftsetext results in unaligned atomic read: 72.130109 Unable to handle kernel paging request at virtual address ffff0000c2bb708c...

DEBIAN-CVE-2024-54031

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsethash: unaligned atomic read on struct nftsetext Access to genmask field in struct nftsetext results in unaligned atomic read: 72.130109 Unable to handle kernel paging request at virtual address ffff0000c2bb708c...

UBUNTU-CVE-2024-54031

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsethash: unaligned atomic read on struct nftsetext Access to genmask field in struct nftsetext results in unaligned atomic read: 72.130109 Unable to handle kernel paging request at virtual address ffff0000c2bb708c...

PT-2025-3016

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The Linux kernel has a vulnerability in the netfilter module, specifically in the nft set hash function, where an unaligned atomic read on the struct nft set ext can occur. This happens when...

PT-2025-37543

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A missing IP SET HASH WITH NET0 macro in ip set hash netportnet.c could lead to an integer underflow, resulting in slab out-of-bound access. The issue arises from the use of an incorrect...

CVE-2021-39584

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function namespacesethash located in pool.c. It allows an attacker to cause Denial of Service...

UBUNTU-CVE-2021-39584

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function namespacesethash located in pool.c. It allows an attacker to cause Denial of Service...