CVE-2026-63996

A flaw was found in the Linux kernel's ethtool CMIS Common Management Interface Specification module. A malicious SFP Small Form-Factor Pluggable module could provide a reply with a length longer than expected, leading to an out-of-bounds write. This vulnerability can result in memory corruption...

CVE-2026-53232

A flaw was found in the Linux kernel's network PHY Physical Layer driver. When a PHY probing operation fails, the system does not properly clean up the SFP Small Form-Factor Pluggable upstream connection. This oversight leaves a dangling reference in the SFP bus, which could be accessed later...

CVE-2026-53232

In the Linux kernel, the following vulnerability has been resolved: net: phy: clean the sfp upstream if phy probing fails Sashiko reported that we don't call sfpbusdelupstream in the probe failure path, so let's add it, otherwise the sfp-bus is left with a dangling 'upstream' field, that may be...

CVE-2026-53232 net: phy: clean the sfp upstream if phy probing fails

In the Linux kernel, the following vulnerability has been resolved: net: phy: clean the sfp upstream if phy probing fails Sashiko reported that we don't call sfpbusdelupstream in the probe failure path, so let's add it, otherwise the sfp-bus is left with a dangling 'upstream' field, that may be...

CVE-2026-53232

In the Linux kernel, the following vulnerability has been resolved: net: phy: clean the sfp upstream if phy probing fails Sashiko reported that we don't call sfpbusdelupstream in the probe failure path, so let's add it, otherwise the sfp-bus is left with a dangling 'upstream' field, that may be...

ata: libata-sff: Ensure that we cannot write outside the allocated buffer

...

Intel QSFP+ Configuration Utility Software Security Vulnerability

Intel QSFP+ Configuration Utility Software is a command line utility from Intel Corporation that allows users to change the link type of an installed QSFP+ module. A security vulnerability exists in Intel QSFP+ Configuration Utility Software that stems from an uncontrolled search path issue in th...

CVE-2010-0104

The CVE affects Broadcom NetXtreme/Integrated NIC Management Firmware on HP Small Form Factor and Microtower PCs. Vulnerable firmware versions are Broadcom Broadcom Integrated NIC Management Firmware before 1.40.0.0 and before 8.08 (i.e., 1.x pre-1.40.0.0 and 8.x pre-8.08). The issue allows remot...