Source: msrc

Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service

2026-03-31 CVE-2025-47711

net_sched: drr: Fix double list add in class with netem as child qdisc

2026-03-31 CVE-2025-37915

net_sched: ets: Fix double list add in class with netem as child qdisc

2026-03-31 CVE-2025-37914

net_sched: Flush gso_skb list too during ->change()

2026-03-31 CVE-2025-37992

net_sched: hfsc: Address reentrant enqueue adding class to eltree twice

2026-03-31 CVE-2025-38001

net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too

2026-03-31 CVE-2025-37823

net_sched: hfsc: Fix a UAF vulnerability in class handling

2026-03-31 CVE-2025-37797

net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc

2026-03-31 CVE-2025-37890

net_sched: prio: fix a race in prio_tune()

2026-03-31 CVE-2025-38083

net_sched: qfq: Fix double list add in class with netem as child qdisc

2026-03-31 CVE-2025-37913

net-tools Stack-based Buffer Overflow vulnerability

2026-03-31 CVE-2025-46836

net: ch9200: fix uninitialised access during mii_nway_restart

2026-03-31 CVE-2025-38086

net: dlink: handle copy_thresh allocation failure

2026-03-31 CVE-2025-40053

net: dsa: clean up FDB, MDB, VLAN entries on unbind

2026-03-31 CVE-2025-37864

net: dsa: free routing table on probe failure

2026-03-31 CVE-2025-37786

net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered

2026-03-31 CVE-2025-37787

net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported

2026-03-31 CVE-2025-37865

net: ethernet: ti: am65-cpsw: Fix PM runtime leakage in am65_cpsw_nuss_ndo_slave_open()

2026-03-31 CVE-2022-50461

net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.

2026-03-31 CVE-2025-23143

net: lan743x: Fix memleak issue when GSO enabled

2026-03-31 CVE-2025-37909

net: lantiq_xrx200: restore buffer if memory allocation failed

2026-03-31 CVE-2022-49997

net: libwx: handle page_pool_dev_alloc_pages error

2026-03-31 CVE-2025-37755

net: mctp: Don't access ifa_index when missing

2026-03-31 CVE-2025-38006

net: mctp: Set SOCK_RCU_FREE

2026-03-31 CVE-2025-37790

net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work

2026-03-31 CVE-2025-40003

net: nfc: nci: Add parameter validation for packet data

2026-03-31 CVE-2025-40043

net: ngbe: fix memory leak in ngbe_probe() error path

2026-03-31 CVE-2025-37874

net: openvswitch: fix nested key length validation in the set() action

2026-03-31 CVE-2025-37789

net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY

2026-03-31 CVE-2025-37945

net: phy: leds: fix memory leak

2026-03-31 CVE-2025-37989

net: phylink: add lock for serializing concurrent pl->phydev writes with resolver

2026-03-31 CVE-2025-39905

net: pktgen: fix access outside of user given buffer in pktgen_thread_write()

2026-03-31 CVE-2025-38061

net: ppp: Add bound checking for skb data on ppp_sync_txmung

2026-03-31 CVE-2025-37749

net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer

2026-03-31 CVE-2025-39937

net: stmmac: Fix accessing freed irq affinity_hint

2026-03-31 CVE-2025-23155

net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null

2026-03-31 CVE-2022-50073

net: tls: explicitly disallow disconnect

2026-03-31 CVE-2025-37756

net: usb: lan78xx: Limit packet length to skb->len

2026-03-31 CVE-2023-53068

net: vlan: don't propagate flags on open

2026-03-31 CVE-2025-23163

net/9p: fix double req put in p9_fd_cancelled

2026-03-31 CVE-2025-40027

net/mlx5: LAG, fix logic over MLX5_LAG_FLAG_NDEVS_READY

2026-03-31 CVE-2022-50002

net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled

2026-03-31 CVE-2025-38039

net/mlx5e: Fix cleanup null-ptr deref on encap lock

2026-03-31 CVE-2023-53105

net/mlx5e: Harden uplink netdev access against device unbind

2026-03-31 CVE-2025-39947

net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads

2026-03-31 CVE-2025-37833

net/sched: fix use-after-free in taprio_dev_notifier

2026-03-31 CVE-2025-38087

net/sched: sch_qfq: Fix null-deref in agg_dequeue

2026-03-31 CVE-2025-40083

net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done

2026-03-31 CVE-2025-38052

netdevsim: Fix memory leak of nsim_dev->fa_cookie

2026-03-31 CVE-2022-49803

netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm

2026-03-31 CVE-2025-39894

netfilter: ipset: fix region locking in hash types

2026-03-31 CVE-2025-37997

netfs: Fix missing xas_retry() calls in xarray iteration

2026-03-31 CVE-2022-49810

netlink: Bounds-check struct nlmsgerr creation

2026-03-31 CVE-2022-49766

Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-59201

nexthop: Forbid FDB status change while nexthop is in a group

2026-03-31 CVE-2025-39980

NFSD: Define a proc_layoutcommit for the FlexFiles layout type

2026-03-31 CVE-2025-40087

No QUIC certificate pinning with wolfSSL

2026-03-31 CVE-2025-5025

Nodes can bypass dynamic resource allocation authorization checks

2026-03-31 CVE-2025-4563

NTFS Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-32707