5 matches found
EUVD-2026-32813
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: virtiobt: validate rx pkttype header length virtbtrxhandle reads the leading pkttype byte from the RX skb and forwards the remainder to hcirecvframe for every event/ACL/SCO/ISO type, without checking that the remaining...
CVE-2025-40046
CVE-2025-40046 concerns the Linux kernel: io_uring/zcrx may overshoot the recv limit because io_zcrx_recv_skb() double-counted desc->count when processing frag lists, leading to receiving more data than requested and underflow during recursive frag-list handling. The available connected docume...
Linux Distros Unpatched Vulnerability : CVE-2023-53679
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt7601u: fix an integer underflow Fix an integer underflow that leads to a null pointer dereference in 'mt7601urxskbfromseg'. The variable 'dmalen' in the...
UBUNTU-CVE-2025-38123
In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: Fix napi rx poll issue When driver handles the napi rx polling requests, the netdev might have been released by the dellink logic triggered by the disconnect operation on user plane. However, in the logic of...
CVE-2024-56788 net: ethernet: oa_tc6: fix tx skb race condition between reference pointers
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: oatc6: fix tx skb race condition between reference pointers There are two skb pointers to manage tx skb's enqueued from n/w stack. waitingtxskb pointer points to the tx skb which needs to be processed and...