CVE-2026-63996

A flaw was found in the Linux kernel's ethtool CMIS Common Management Interface Specification module. A malicious SFP Small Form-Factor Pluggable module could provide a reply with a length longer than expected, leading to an out-of-bounds write. This vulnerability can result in memory corruption...

CVE-2026-53232

A flaw was found in the Linux kernel's network PHY Physical Layer driver. When a PHY probing operation fails, the system does not properly clean up the SFP Small Form-Factor Pluggable upstream connection. This oversight leaves a dangling reference in the SFP bus, which could be accessed later...

CVE-2026-53232

In the Linux kernel, the following vulnerability has been resolved: net: phy: clean the sfp upstream if phy probing fails Sashiko reported that we don't call sfpbusdelupstream in the probe failure path, so let's add it, otherwise the sfp-bus is left with a dangling 'upstream' field, that may be...

CVE-2026-53232 net: phy: clean the sfp upstream if phy probing fails

In the Linux kernel, the following vulnerability has been resolved: net: phy: clean the sfp upstream if phy probing fails Sashiko reported that we don't call sfpbusdelupstream in the probe failure path, so let's add it, otherwise the sfp-bus is left with a dangling 'upstream' field, that may be...

CVE-2026-53232

In the Linux kernel, the following vulnerability has been resolved: net: phy: clean the sfp upstream if phy probing fails Sashiko reported that we don't call sfpbusdelupstream in the probe failure path, so let's add it, otherwise the sfp-bus is left with a dangling 'upstream' field, that may be...

ata: libata-sff: Ensure that we cannot write outside the allocated buffer

...

Intel QSFP+ Configuration Utility Software Security Vulnerability

Intel QSFP+ Configuration Utility Software is a command line utility from Intel Corporation that allows users to change the link type of an installed QSFP+ module. A security vulnerability exists in Intel QSFP+ Configuration Utility Software that stems from an uncontrolled search path issue in th...

CVE-2010-0104

The CVE affects Broadcom NetXtreme/Integrated NIC Management Firmware on HP Small Form Factor and Microtower PCs. Vulnerable firmware versions are Broadcom Broadcom Integrated NIC Management Firmware before 1.40.0.0 and before 8.08 (i.e., 1.x pre-1.40.0.0 and 8.x pre-8.08). The issue allows remot...

CVE-2010-0104: Undefined Security Weakness

Unspecified vulnerability in the Broadcom Integrated NIC Management Firmware 1.x before 1.40.0.0 and 8.x before 8.08 on the HP Small Form Factor and Microtower platforms allows remote attackers to execute arbitrary code via unknown vectors...