Linux Distros Unpatched Vulnerability : CVE-2026-90142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtionet: Fix resize of the RX ring When a AFXDP socket is attached, the virtnetrxresize should resize the rq-xskbuffs XSK buffer array. Otherwise, when the si...

CVE-2026-90142

In the Linux kernel, the following vulnerability has been resolved: virtionet: Fix resize of the RX ring When a AFXDP socket is attached, the virtnetrxresize should resize the rq-xskbuffs XSK buffer array. Otherwise, when the size grows, the virtnetrxresume causes a write past the end of the arra...

DEBIAN-CVE-2026-90142

In the Linux kernel, the following vulnerability has been resolved: virtionet: Fix resize of the RX ring When a AFXDP socket is attached, the virtnetrxresize should resize the rq-xskbuffs XSK buffer array. Otherwise, when the size grows, the virtnetrxresume causes a write past the end of the arra...

CVE-2026-90142 virtio_net: Fix resize of the RX ring

In the Linux kernel, the following vulnerability has been resolved: virtionet: Fix resize of the RX ring When a AFXDP socket is attached, the virtnetrxresize should resize the rq-xskbuffs XSK buffer array. Otherwise, when the size grows, the virtnetrxresume causes a write past the end of the arra...

EUVD-2026-81735

In the Linux kernel, the following vulnerability has been resolved: virtionet: Fix resize of the RX ring When a AFXDP socket is attached, the virtnetrxresize should resize the rq-xskbuffs XSK buffer array. Otherwise, when the size grows, the virtnetrxresume causes a write past the end of the arra...

CVE-2026-90142 virtio_net: Fix resize of the RX ring

In the Linux kernel, the following vulnerability has been resolved: virtionet: Fix resize of the RX ring When a AFXDP socket is attached, the virtnetrxresize should resize the rq-xskbuffs XSK buffer array. Otherwise, when the size grows, the virtnetrxresume causes a write past the end of the arra...

CVE-2026-90142

CVE-2026-90142 is an out-of-bounds write vulnerability in the Linux kernel's virtio_net driver. When an AF_XDP socket is attached, the function virtnet_rx_resize fails to resize the rq->xsk_buffs XSK buffer array. If the RX ring size is subsequently increased (e.g., via ethtool -G ), virtnet_r...

CVE-2026-90142: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: virtionet: Fix resize of the RX ring When a AFXDP socket is attached, the virtnetrxresize should resize the rq-xskbuffs XSK buffer array. Otherwise, when the size grows, the virtnetrxresume causes a write past the end of the arra...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: virtionet: Fixed a UAF issue when IFFXMITDSTRELEASE is cleared and napitx is false. A UAF issue occurs when the virtionet driver is configured with napitx=N and the device’s IFFXMITDSTRELEASE flag is cleared e.g., during the...

The vulnerability of the virtnet_set_queues() function in the drivers/net/virtio_net.c file of the Linux kernel network device driver allows a attacker to cause a service failure.

The vulnerability of the virtnetsetqueues function in the drivers/net/virtionet.c file of the Linux kernel network device driver relates to operations involving resources after their expiration. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the start_xmit() function in the drivers/net/virtio_net.c file of the Linux kernel network device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the startxmit function in the drivers/net/virtionet.c file of the Linux kernel network device driver involves the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

ROS-20260821-73-0001

The vulnerability of the virtnetopen function in the virtionet component of the Linux operating system is related to incorrect initialization of the resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100326)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100326 advisory. In the Linux kernel, the following vulnerability has been resolved: virtionet: Fix UAF on dstops when IFFXMITDSTRELEASE is cleared and napitx is false A UAF issue...

AZL-83264 CVE-2026-31469 affecting package kernel for versions less than 6.6.134.1-2

In the Linux kernel, the following vulnerability has been resolved: virtionet: Fix UAF on dstops when IFFXMITDSTRELEASE is cleared and napitx is false A UAF issue occurs when the virtionet driver is configured with napitx=N and the device's IFFXMITDSTRELEASE flag is cleared e.g., during the...

CVE-2026-31469: Use After Free

In the Linux kernel, the following vulnerability has been resolved: virtionet: Fix UAF on dstops when IFFXMITDSTRELEASE is cleared and napitx is false A UAF issue occurs when the virtionet driver is configured with napitx=N and the device's IFFXMITDSTRELEASE flag is cleared e.g., during the...

CVE-2026-23143

In the Linux kernel, the following vulnerability has been resolved: virtionet: Fix misalignment bug in struct virtnetinfo Use the new TRAILINGOVERLAP helper to fix a misalignment bug along with the following warning: drivers/net/virtionet.c:429:46: warning: structure containing a flexible array...

CVE-2026-23143: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: virtionet: Fix misalignment bug in struct virtnetinfo Use the new TRAILINGOVERLAP helper to fix a misalignment bug along with the following warning: drivers/net/virtionet.c:429:46: warning: structure containing a flexible array...

CVE-2026-23046 virtio_net: fix device mismatch in devm_kzalloc/devm_kfree

In the Linux kernel, the following vulnerability has been resolved: virtionet: fix device mismatch in devmkzalloc/devmkfree Initial rsshdr allocation uses virtiodevice-device, but virtnetsetqueues frees using netdevice-device. This device mismatch causing below devres warning 3788.514041...

CVE-2026-23046: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: virtionet: fix device mismatch in devmkzalloc/devmkfree Initial rsshdr allocation uses virtiodevice-device, but virtnetsetqueues frees using netdevice-device. This device mismatch causing below devres warning 3788.514041...

EUVD-2022-54546

In the Linux kernel, the following vulnerability has been resolved: virtionet: fix xdprxqinfo bug after suspend/resume The following sequence currently causes a driver bug warning when using virtionet: ip link set eth0 up echo mem /sys/power/state or e.g. rtcwake -s 10 -m mem ip link set eth0 dow...