CVE-2026-68161

A flaw was found in the Linux kernel's SCTP Stream Control Transmission Protocol implementation. When a network namespace netns is torn down, the associated SCTP UDP User Datagram Protocol tunnel sockets are not properly closed. This oversight can lead to a resource leak, potentially resulting in...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46763)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46763 advisory. - In the Linux kernel, the following vulnerability has been resolved: fou: Fix null-ptr-deref in GRO. We...

SUSE CVE-2025-21677

In the Linux kernel, the following vulnerability has been resolved: pfcp: Destroy device along with udp socket's netns dismantle. pfcpnewlink links the device to a list in devnetdev instead of net, where a udp tunnel socket is created. Even when net is removed, the device stays alive on devnetdev...

PT-2025-4359

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.177, 6.1.127, 6.6.74, and 6.12.11 Description The issue is related to the gtp newlink function in the Linux kernel's drivers/net/gtp.c module. It incorrectly links a device to a list in dev netdev instead of...

CVE-2024-46763 fou: Fix null-ptr-deref in GRO.

In the Linux kernel, the following vulnerability has been resolved: fou: Fix null-ptr-deref in GRO. We observed a null-ptr-deref in fougroreceive while shutting down a host. 0 The NULL pointer is sk-skuserdata, and the offset 8 is of protocol in struct fou. When fourelease is called due to netns...