CVE-2025-21972
- EPSS 0.05%
- Veröffentlicht 01.04.2025 16:15:28
- Zuletzt bearbeitet 31.10.2025 19:16:02
In the Linux kernel, the following vulnerability has been resolved: net: mctp: unshare packets when reassembling Ensure that the frag_list used for reassembly isn't shared with other packets. This avoids incorrect reassembly when packets are cloned...
CVE-2025-21973
- EPSS 0.05%
- Veröffentlicht 01.04.2025 16:15:28
- Zuletzt bearbeitet 22.01.2026 20:57:38
In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix kernel panic in the bnxt_get_queue_stats{rx | tx} When qstats-get operation is executed, callbacks of netdev_stats_ops are called. The bnxt_get_queue_stats{rx | tx} ...
CVE-2025-21974
- EPSS 0.05%
- Veröffentlicht 01.04.2025 16:15:28
- Zuletzt bearbeitet 31.10.2025 19:15:21
In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: return fail if interface is down in bnxt_queue_mem_alloc() The bnxt_queue_mem_alloc() is called to allocate new queue memory when a queue is restarted. It internally acc...
CVE-2025-21975
- EPSS 0.11%
- Veröffentlicht 01.04.2025 16:15:28
- Zuletzt bearbeitet 03.11.2025 20:17:33
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: handle errors in mlx5_chains_create_table() In mlx5_chains_create_table(), the return value of mlx5_get_fdb_sub_ns() and mlx5_get_flow_namespace() must be checked to prev...
CVE-2025-21976
- EPSS 0.05%
- Veröffentlicht 01.04.2025 16:15:28
- Zuletzt bearbeitet 30.10.2025 21:00:33
In the Linux kernel, the following vulnerability has been resolved: fbdev: hyperv_fb: Allow graceful removal of framebuffer When a Hyper-V framebuffer device is unbind, hyperv_fb driver tries to release the framebuffer forcefully. If this framebuff...
CVE-2025-21958
- EPSS 0.04%
- Veröffentlicht 01.04.2025 16:15:27
- Zuletzt bearbeitet 31.10.2025 19:44:45
In the Linux kernel, the following vulnerability has been resolved: Revert "openvswitch: switch to per-action label counting in conntrack" Currently, ovs_ct_set_labels() is only called for confirmed conntrack entries (ct) within ovs_ct_commit(). Ho...
CVE-2025-21959
- EPSS 0.11%
- Veröffentlicht 01.04.2025 16:15:27
- Zuletzt bearbeitet 03.11.2025 20:17:32
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() Since commit b36e4523d4d5 ("netfilter: nf_conncount: fix garbage collection confirm race"), `cp...
CVE-2025-21960
- EPSS 0.09%
- Veröffentlicht 01.04.2025 16:15:27
- Zuletzt bearbeitet 03.11.2025 20:17:32
In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: do not update checksum in bnxt_xdp_build_skb() The bnxt_rx_pkt() updates ip_summed value at the end if checksum offload is enabled. When the XDP-MB program is attached a...
CVE-2025-21961
- EPSS 0.05%
- Veröffentlicht 01.04.2025 16:15:27
- Zuletzt bearbeitet 01.10.2025 18:15:40
In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix truesize for mb-xdp-pass case When mb-xdp is set and return is XDP_PASS, packet is converted from xdp_buff to sk_buff with xdp_update_skb_shared_info() in bnxt_xdp_b...
CVE-2025-21962
- EPSS 0.09%
- Veröffentlicht 01.04.2025 16:15:27
- Zuletzt bearbeitet 03.11.2025 20:17:32
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing closetimeo mount option User-provided mount parameter closetimeo of type u32 is intended to have an upper limit, but before it is valida...