net: ppp: Add bound checking for skb data on ppp_sync_txmung

...

wifi: mac80211: Purge vif txq in ieee80211_do_stop()

...

DEBIAN-CVE-2025-38122

In the Linux kernel, the following vulnerability has been resolved: gve: add missing NULL check for gveallocpendingpacket in TX DQO gveallocpendingpacket can return NULL, but gvetxaddskbdqo did not check for this case before dereferencing the returned pointer. Add a missing NULL check to prevent ...

DEBIAN-CVE-2025-38127

In the Linux kernel, the following vulnerability has been resolved: ice: fix Tx scheduler error handling in XDP callback When the XDP program is loaded, the XDP callback adds new Tx queues. This means that the callback must update the Tx scheduler with the new queue number. In the event of a Tx...

UBUNTU-CVE-2025-38127

In the Linux kernel, the following vulnerability has been resolved: ice: fix Tx scheduler error handling in XDP callback When the XDP program is loaded, the XDP callback adds new Tx queues. This means that the callback must update the Tx scheduler with the new queue number. In the event of a Tx...

DEBIAN-CVE-2025-38094

In the Linux kernel, the following vulnerability has been resolved: net: cadence: macb: Fix a possible deadlock in macbhalttx. There is a situation where after THALT is set high, TGO stays high as well. Because jiffies are never updated, as we are in a context with interrupts disabled, we never...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from mishandling of the ice driver Tx scheduler error, which could lead to null pointer dereferencing...

kernel: vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame

A vulnerability was found in the Linux kernel's vmxnet3 network driver in the vmxnet3xdpxmitframe function. An incorrect DMA address calculation caused by the use of a fixed rather than dynamic offset leads to a corrupt packet being sent out and subsequently dropped on the path. This can lead to...

kernel: mt76: fix use-after-free by removing a non-RCU wcid pointer

A vulnerability was found in the Linux kernel's mt76 wi-fi driver. A concurrency bug causes the mtxq TX queue to maintain a raw pointer to a wcid structure mtxq-wcid that might be freed by the time it is accessed. This issue can lead to a use-after-free scenario, leading to system instability,...

SUSE CVE-2022-50164

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix double listadd at iwlmvmmacwaketxqueue After successfull station association, if station queues are disabled for some reason, the related lists are not emptied. So if some new element is added to the list ...

DEBIAN-CVE-2022-50004

In the Linux kernel, the following vulnerability has been resolved: xfrm: policy: fix metadata dst-dev xmit null pointer dereference When we try to transmit an skb with metadatadst attached i.e. dst-dev == NULL through xfrm interface we can hit a null pointer dereference1 in xfrmixmit2 -...

DEBIAN-CVE-2022-49954

In the Linux kernel, the following vulnerability has been resolved: Input: iforce - wake up after clearing IFORCEXMITRUNNING flag syzbot is reporting hung task at inputunregisterdevice 1, for iforceclose waiting at waiteventinterruptible with dev-mutex held is blocking inputdisconnectdevice from...

UBUNTU-CVE-2025-38053

In the Linux kernel, the following vulnerability has been resolved: idpf: fix null-ptr-deref in idpffeaturescheck idpffeaturescheck is used to validate the TX packet. skb header length is compared with the hardware supported value received from the device control plane. The value is stored in the...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a memory leak caused by virtionet not freeing xdppage in XPDTX mode...

PT-2025-33802

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel's Wi-Fi driver for rtl818x devices. Specifically, the issue involves the order of operations during the rtl8187 stop function. Failing to kill URBs US...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: USB: Gadget: fmidi: fmidicomplete calling queuework. When using USB MIDI, a lock attempt is made twice through a reentrant call to fmiditransmit, resulting in a deadlock. The issue is fixed by using queuework to schedule the inne...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: netmem: prevents the transmission of unreadable SKBs Service Control Blocks Currently, in stable versions of the kernel, we have support for netmem/devmem RX operations, but not TX operations. It is not safe to forward/redirect a...

PT-2025-29023

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The eir create adv data function may attempt to add EIR FLAGS and EIR TX POWER without verifying sufficient space, potentially leading to crashes. Recommendations: At the moment, there...

The vulnerability of the transmit_file scenario in Quantenna’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the transmitfile scenario in Quantenna’s microprogramming software is related to the implementation or modification of arguments. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...

The vulnerability of the geneve_xmit_skb() function in the drivers/net/geneve.c module of the network device support driver for Linux kernel allows a hacker to cause a service failure.

The vulnerability of the genevexmitskb function in the drivers/net/geneve.c module of the Linux kernel’s network device support driver is related to resource management errors. Exploiting this vulnerability could allow an attacker to cause service failures...