https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 03:58:23 +0000 https://cve.radiocsirt.org/vuln/cve-2025-21648 <p><strong>Affected:</strong> Linux, Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>netfilter: conntrack: clamp maximum hashtable size to INT_MAX</p> <p>Use INT_MAX as maximum size for the conntrack hashtable. Otherwise, it is possible to hit WARN_ON_ONCE in __kvmalloc_node_noprof() when resizing hashtable because __GFP_NOWARN is unset. See:</p> <p>0708a0afe291 (&#34;mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls&#34;)</p> <p>Note: hashtable resize is only possible from init_netns.</p> <p><strong>Affected:</strong> Linux, Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>netfilter: conntrack: clamp maximum hashtable size to INT_MAX</p> <p>Use INT_MAX as maximum size for the conntrack hashtable. Otherwise, it is possible to hit WARN_ON_ONCE in __kvmalloc_node_noprof() when resizing hashtable because __GFP_NOWARN is unset. See:</p> <p>0708a0afe291 (&#34;mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls&#34;)</p> <p>Note: hashtable resize is only possible from init_netns.</p> https://cve.radiocsirt.org/vuln/cve-2025-21648