CVE-2025-71095 net: stmmac: fix the crash issue for zero copy XDP_TX action

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix the crash issue for zero copy XDPTX action There is a crash issue when running zero copy XDPTX action, the crash log is shown below. 216.122464 Unable to handle kernel paging request at virtual address...

CVE-2025-71095

CVE-2025-71095 affects the Linux kernel’s net: stmmac driver, causing a crash during zero-copy XDP_TX due to improper handling of xdp_buff memory types. The bug occurs when an xdp_buff is converted to an xdp_frame and the code in stmmac_xdp_xmit_back() always assumes MEM_TYPE_PAGE_POOL, regardles...

CVE-2025-71095 net: stmmac: fix the crash issue for zero copy XDP_TX action

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix the crash issue for zero copy XDPTX action There is a crash issue when running zero copy XDPTX action, the crash log is shown below. 216.122464 Unable to handle kernel paging request at virtual address...

CVE-2025-71070 ublk: clean up user copy references on ublk server exit

In the Linux kernel, the following vulnerability has been resolved: ublk: clean up user copy references on ublk server exit If a ublk server process releases a ublk char device file, any requests dispatched to the ublk server but not yet completed will retain a ref value of UBLKREFCOUNTINIT. Befo...

CVE-2025-71070 ublk: clean up user copy references on ublk server exit

In the Linux kernel, the following vulnerability has been resolved: ublk: clean up user copy references on ublk server exit If a ublk server process releases a ublk char device file, any requests dispatched to the ublk server but not yet completed will retain a ref value of UBLKREFCOUNTINIT. Befo...

CVE-2025-71070

CVE-2025-71070 relates to the Linux kernel ublk driver. A reference-count leak on server exit could allow user copy and zero-copy on completed ublk requests due to a path that skipped decrementing the refcount in certain flows. The issue was addressed by commits that fixed the ublk_io_release pat...

Linux Distros Unpatched Vulnerability : CVE-2025-71095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: stmmac: fix the crash issue for zero copy XDPTX action There is a crash issue when running zero copy XDPTX action, the crash log is shown below. 216.122464...

PT-2026-2591

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s ublk subsystem related to reference counting of user copy operations. Specifically, when a ublk server process releases a ublk character device file,...

PT-2026-2616

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A crash issue exists within the Linux kernel's networking subsystem, specifically in the stmmac driver when utilizing zero copy XDP TX actions. The issue stems from an incorrect memory...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper handling of the memory type of the zero-copy XDPTX operation in the stmmacxdpxmitxdpf function, whi...

Important: ecs-service-connect-agent

Issue Overview: There exists a denial of service through Data corruption in gRPC-C++ - gRPC-C++ servers with transmit zero copy enabled through the channel arg GRPCARGTCPTXZEROCOPYENABLED can experience data corruption issues. The data sent by the application may be corrupted before transmission...

Important: ecs-service-connect-agent

Issue Overview: There exists a denial of service through Data corruption in gRPC-C++ - gRPC-C++ servers with transmit zero copy enabled through the channel arg GRPCARGTCPTXZEROCOPYENABLED can experience data corruption issues. The data sent by the application may be corrupted before transmission...

PT-2026-27742

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel’s ice driver related to XDP eXpress Data Path Receive Queue RxQ handling. The frag size field in XDP RxQ info incorrectly used the DMA write size...

CVE-2023-54223

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix invalid buffer access for legacy rq The below crash can be encountered when using xdpsock in rx mode for legacy rq: the buffer gets released in the XDPREDIRECT path, and then once again in the driver. This fix...

UBUNTU-CVE-2022-50838

In the Linux kernel, the following vulnerability has been resolved: net: stream: purge skerrorqueue in skstreamkillqueues Changheon Lee reported TCP socket leaks, with a nice repro. It seems we leak TCP sockets with the following sequence: 1 SOFTIMESTAMPINGTXACK is enabled on the socket. Each ACK...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992375)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992375 advisory. In the Linux kernel, the following vulnerability has been resolved: skbuff: skbsegment, Call zero copy functions before using skbuff frags Commit bf5c25d60861 skbuff...

kernel: skbuff: skb_segment, Call zero copy functions before using skbuff frags

In the Linux kernel, the following vulnerability has been resolved: skbuff: skbsegment, Call zero copy functions before using skbuff frags Commit bf5c25d60861 "skbuff: in skbsegment, call zerocopy functions once per nskb" added the call to zero copy functions in skbsegment. The change introduced ...

EUVD-2022-55742

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix possible memory leak in stmmacdvrprobe The bitmapfree should be called to free priv-afxdpzcqps when createsinglethreadworkqueue fails, otherwise there will be a memory leak, so we add the err path errorwqinit to...

CVE-2022-50663

The CVE-2022-50663 entry relates to the Linux kernel net: stmmac driver. The vulnerability is a memory leak in stmmac_dvr_probe() where priv->af_xdp_zc_qps is not freed when create_singlethread_workqueue() fails; the fix adds a call to bitmap_free() and an error_wq_init path to prevent leaks. ...

EUVD-2025-201616

In the Linux kernel, the following vulnerability has been resolved: xsk: avoid data corruption on cq descriptor number Since commit 30f241fcf52a "xsk: Fix immature cq descriptor production", the descriptor number is stored in skb control block and xskcqsubmitaddrlocked relies on it to put the ume...