Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fixed the DMA FIFO desynchronization when the CQE recovery flow is triggered due to a TX error. In the event of a TX error CQE, a recovery flow is triggered. The mlx5eresettxqsqccpc function resets dmafifocc to 0, but...

PT-2026-96497

In the Linux kernel, the following vulnerability has been resolved: openvswitch: only skb tx error a packet we are about to drop queue userspace packet borrows the packet skb -- it only copies it into a private netlink message user skb and does not own it; on return do execute actions keeps...

PT-2026-96399

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don't touch shared zerocopy state in skb tx error skb tx error completes the zerocopy uarg and clears SKBFL ALL ZEROCOPY, and skb zcopy downgrade managed clears SKBFL MANAGED FRAG REFS. Both live in skb shinfo, which...

PT-2026-90107

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw in zerocopy state handling within the skb tx error function in net/skbuff allows for local privilege escalation. The issue occurs because skb tx error completes the zerocopy uarg...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100130)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100130 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery In case of a TX error CQE, a recovery flo...

PT-2026-69522

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the ovpn module during TCP RX or TX error paths. When ovpn peer hold is called followed by schedule work for the peer-tcp.defer del work item, a race...

CVE-2026-43466

A flaw was found in the Linux kernel's mlx5e network driver. During a transmit TX error recovery process, a desynchronization occurs in the Direct Memory Access DMA First-In, First-Out FIFO buffer. This desynchronization causes the system to incorrectly unmap memory addresses, which can lead to...

CVE-2026-43466

Summary (CVE-2026-43466) : The Linux kernel mlx5e driver had a desync bug in the software DMA FIFO during TX error recovery. Specifically, during recovery, dma_fifo_cc was reset to 0 while dma_fifo_pc was not, causing producer/consumer to operate on misaligned indices. After recovery, new entries...

CVE-2026-43466 net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery In case of a TX error CQE, a recovery flow is triggered, mlx5eresettxqsqccpc resets dmafifocc to 0 but not dmafifopc, desyncing the DMA FIFO producer and consumer. After...

Linux Distros Unpatched Vulnerability : CVE-2026-43466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery In case of a TX error CQE, a recovery flow is triggered, mlx5eresettxqsqccpc resets dmafifocc to 0 but n...

SUSE CVE-2022-50764

In the Linux kernel, the following vulnerability has been resolved: ipv6/sit: use DEVSTATSINC to avoid data-races syzbot/KCSAN reported that multiple cpus are updating dev-stats.txerror concurrently. This is because sit tunnels are NETIFFLLTX, meaning their ndostartxmit is not protected by a...

EUVD-2025-14117

Malicious code in bioql PyPI...

CVE-2022-50004 xfrm: policy: fix metadata dst->dev xmit null pointer dereference

In the Linux kernel, the following vulnerability has been resolved: xfrm: policy: fix metadata dst-dev xmit null pointer dereference When we try to transmit an skb with metadatadst attached i.e. dst-dev == NULL through xfrm interface we can hit a null pointer dereference1 in xfrmixmit2 -...

CVE-2025-37873

The CVE-2025-37873 entry concerns the Linux kernel Ethernet driver for Broadcom/BNXT (eth: bnxt). The issue arises in the Tx path after a conversion to a free-running tx_prod, where masking on the Tx error path was missed, causing a crash on error conditions such as DMA mapping failures. The root...

CVE-2025-37873 eth: bnxt: fix missing ring index trim on error path

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix missing ring index trim on error path Commit under Fixes converted txprod to be free running but missed masking it on the Tx error path. This crashes on error conditions, for example when DMA mapping fails...

AZL-54750 CVE-2024-56651 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: can: hi311x: hi3110canist: fix potential use-after-free The commit a22bd630cfff "can: hi311x: do not report txerr and rxerr during bus-off" removed the reporting of rxerr and txerr even in case of correct operation i. e. not...

PT-2022-33563 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.17 through v5.19.1 Description: The issue is related to a missing skb drop on htc tx completion error in the ath11k module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...