https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 07:39:33 +0000 https://vulnerability.circl.lu/vuln/CERTFR-2025-AVI-0895 CERTFR-2025-AVI-0895 https://vulnerability.circl.lu/vuln/CERTFR-2025-AVI-0895 https://vulnerability.circl.lu/vuln/bdu:2025-15666 bdu:2025-15666 https://vulnerability.circl.lu/vuln/bdu:2025-15666 https://vulnerability.circl.lu/vuln/bell-cve-2025-39922 <p><strong>Affected:</strong> Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> <p><strong>Affected:</strong> Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> https://vulnerability.circl.lu/vuln/bell-cve-2025-39922 https://vulnerability.circl.lu/vuln/fkie_cve-2025-39922 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ixgbe: fix incorrect map used in eee linkmode</p> <p>incorrectly used ixgbe_lp_map in loops intended to populate the supported and advertised EEE linkmode bitmaps based on ixgbe_ls_map. This results in incorrect bit setting and potential out-of-bounds access, since ixgbe_lp_map and ixgbe_ls_map have different sizes and purposes.</p> <p>ixgbe_lp_map[i] -&gt; ixgbe_ls_map[i]</p> <p>Use ixgbe_ls_map for supported and advertised linkmodes, and keep ixgbe_lp_map usage only for link partner (lp_advertised) mapping.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ixgbe: fix incorrect map used in eee linkmode</p> <p>incorrectly used ixgbe_lp_map in loops intended to populate the supported and advertised EEE linkmode bitmaps based on ixgbe_ls_map. This results in incorrect bit setting and potential out-of-bounds access, since ixgbe_lp_map and ixgbe_ls_map have different sizes and purposes.</p> <p>ixgbe_lp_map[i] -&gt; ixgbe_ls_map[i]</p> <p>Use ixgbe_ls_map for supported and advertised linkmodes, and keep ixgbe_lp_map usage only for link partner (lp_advertised) mapping.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2025-39922 https://vulnerability.circl.lu/vuln/ghsa-vmg3-v8p4-c57v <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ixgbe: fix incorrect map used in eee linkmode</p> <p>incorrectly used ixgbe_lp_map in loops intended to populate the supported and advertised EEE linkmode bitmaps based on ixgbe_ls_map. This results in incorrect bit setting and potential out-of-bounds access, since ixgbe_lp_map and ixgbe_ls_map have different sizes and purposes.</p> <p>ixgbe_lp_map[i] -&gt; ixgbe_ls_map[i]</p> <p>Use ixgbe_ls_map for supported and advertised linkmodes, and keep ixgbe_lp_map usage only for link partner (lp_advertised) mapping.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ixgbe: fix incorrect map used in eee linkmode</p> <p>incorrectly used ixgbe_lp_map in loops intended to populate the supported and advertised EEE linkmode bitmaps based on ixgbe_ls_map. This results in incorrect bit setting and potential out-of-bounds access, since ixgbe_lp_map and ixgbe_ls_map have different sizes and purposes.</p> <p>ixgbe_lp_map[i] -&gt; ixgbe_ls_map[i]</p> <p>Use ixgbe_ls_map for supported and advertised linkmodes, and keep ixgbe_lp_map usage only for link partner (lp_advertised) mapping.</p> https://vulnerability.circl.lu/vuln/ghsa-vmg3-v8p4-c57v https://vulnerability.circl.lu/vuln/opensuse-su-2025-20081-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://vulnerability.circl.lu/vuln/opensuse-su-2025-20081-1 https://vulnerability.circl.lu/vuln/suse-su-2025:03601-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://vulnerability.circl.lu/vuln/suse-su-2025:03601-1 https://vulnerability.circl.lu/vuln/ubuntu-cve-2025-39922 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 90 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: ixgbe: fix incorrect map used in eee linkmode incorrectly used ixgbe_lp_map in loops intended to populate the supported and advertised EEE linkmode bitmaps based on ixgbe_ls_map. This results in incorrect bit setting and potential out-of-bounds access, since ixgbe_lp_map and ixgbe_ls_map have different sizes and purposes. ixgbe_lp_map[i] -&gt; ixgbe_ls_map[i] Use ixgbe_ls_map for supported and advertised linkmodes, and keep ixgbe_lp_map usage only for link partner (lp_advertised) mapping.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 90 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: ixgbe: fix incorrect map used in eee linkmode incorrectly used ixgbe_lp_map in loops intended to populate the supported and advertised EEE linkmode bitmaps based on ixgbe_ls_map. This results in incorrect bit setting and potential out-of-bounds access, since ixgbe_lp_map and ixgbe_ls_map have different sizes and purposes. ixgbe_lp_map[i] -&gt; ixgbe_ls_map[i] Use ixgbe_ls_map for supported and advertised linkmodes, and keep ixgbe_lp_map usage only for link partner (lp_advertised) mapping.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2025-39922 https://vulnerability.circl.lu/vuln/wid-sec-w-2025-2170 <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen und andere nicht näher spezifizierte Angriffe durchzuführen, möglicherweise um beliebigen Code auszuführen oder eine Speicherbeschädigung zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen und andere nicht näher spezifizierte Angriffe durchzuführen, möglicherweise um beliebigen Code auszuführen oder eine Speicherbeschädigung zu verursachen.</p> https://vulnerability.circl.lu/vuln/wid-sec-w-2025-2170