285 matches found
GSD-2023-1000341 net/9p: Fix a potential socket leak in p9_socket_open
net/9p: Fix a potential socket leak in p9socketopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.268 by commit...
GSD-2023-1000305 net/9p: Fix a potential socket leak in p9_socket_open
net/9p: Fix a potential socket leak in p9socketopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.226 by commit...
GSD-2023-1000249 net/9p: Fix a potential socket leak in p9_socket_open
net/9p: Fix a potential socket leak in p9socketopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.158 by commit...
GSD-2023-1000088 net/9p: Fix a potential socket leak in p9_socket_open
net/9p: Fix a potential socket leak in p9socketopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...
PT-2023-33326 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.33 through 5.10.157 Description: A potential socket leak was identified in the p9 socket open function of the net/9p protocol. The issue was introduced in version v2.6.33 and fixed in version v5.10.158. The actual...
GSD-2022-1008330 9p: trans_fd/p9_conn_cancel: drop client lock earlier
9p: transfd/p9conncancel: drop client lock earlier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.334 by commit...
GSD-2022-1008209 9p: trans_fd/p9_conn_cancel: drop client lock earlier
9p: transfd/p9conncancel: drop client lock earlier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.267 by commit...
GSD-2022-1008126 9p/trans_fd: always use O_NONBLOCK read/write
9p/transfd: always use ONONBLOCK read/write This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.225 by commit...
GSD-2022-1008017 9p: trans_fd/p9_conn_cancel: drop client lock earlier
9p: transfd/p9conncancel: drop client lock earlier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...
GSD-2022-1008015 9p/trans_fd: always use O_NONBLOCK read/write
9p/transfd: always use ONONBLOCK read/write This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...
GSD-2022-1007870 net/9p: use a dedicated spinlock for trans_fd
net/9p: use a dedicated spinlock for transfd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.80 by commit...
GSD-2022-1007684 net/9p: use a dedicated spinlock for trans_fd
net/9p: use a dedicated spinlock for transfd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...
PT-2022-36128 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.80 Description: The issue is related to the trans fd/p9 conn cancel function in the 9p protocol implementation, where the client lock is dropped earlier than expected. The actual impact and attack...
PT-2022-35942 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue is related to the trans fd/p9 conn cancel function in the 9p protocol, where the client lock is dropped earlier than expected. This is an automated ID intended to aid in discovery ...
PT-2022-36585 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.334 Description: The issue is related to the trans fd/p9 conn cancel function in the 9p protocol implementation, where the client lock is dropped earlier than expected. This is an automated ID intended to a...
PT-2022-36583 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.334 Description: The issue concerns the 9p/trans fd functionality, where it does not always use O NONBLOCK for read/write operations. This is an automated identification of a potential security issue, but t...
PT-2022-36126 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.15.80 Description: The issue is related to the 9p/trans fd functionality, where it does not always use O NONBLOCK for read/write operations. The actual impact and potential for attack have not been proven yet...
PT-2022-36464 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.267 Description: The issue is related to the trans fd/p9 conn cancel function in the 9p protocol implementation, where the client lock is dropped earlier than expected. The actual impact and attack...
GSD-2022-1004483 9p: fix fid refcount leak in v9fs_vfs_get_link
9p: fix fid refcount leak in v9fsvfsgetlink This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.51 by commit...
CVE-2022-23038
Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...