105 matches found
ipxe
iPXE network bootloader iPXE is the leading open source network boot firmware. It provides a full PXE implementation enhanced with additional features such as: boot from a web server via HTTP or HTTPS, boot from an iSCSI, FCoE, or AoE SAN, control the boot process with a script, create interactiv...
CLSA-2024-1724774331 kernel: Fix of 12 CVEs
drm/vmwgfx: Fix invalid reads in fence signaled events CVE-2024-36960 - afunix: Fix garbage collector racing against connect CVE-2024-26923 - ipv6: remove maxsize check inline with ipv4 CVE-2023-52340 - aoe: fix the potential use-after-free problem in aoecmdcfgpkts CVE-2023-6270 - smb: client:...
CLSA-2024-1725187614 kernel: Fix of 12 CVEs
drm/vmwgfx: Fix invalid reads in fence signaled events CVE-2024-36960 - afunix: Fix garbage collector racing against connect CVE-2024-26923 - ipv6: remove maxsize check inline with ipv4 CVE-2023-52340 - aoe: fix the potential use-after-free problem in aoecmdcfgpkts CVE-2023-6270 - smb: client:...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: “aoe”: The potential use-after-free problem has been fixed in multiple locations. Regarding the fix for CVE-2023-6270, f98364e92662 “aoe: The potential use-after-free problem has been fixed in aoecmdcfgpkts”. This fix involves...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: “aoe”: avoided potential deadlock at “setcapacity”. “setcapacity” has been moved outside of the section protected by &d-lock. This prevents possible unsafe locking scenarios due to interrupts. Here’s the sequence of events: 1...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: aoe: The cleandevicerqlist function in aoedevdowndev was corrected. The rqlist of an AOE device contains accepted block requests that are waiting to be transmitted to the AOE target. This queue was added as part of the transition...
ROS-20260918-73-0057
The vulnerability of the aoecmdcfgpkts function in the Linux operating system’s ATA over Ethernet AoE driver is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service failures...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1
A flaw was discovered in the ATA over Ethernet AoE driver within the Linux kernel. The aoecmdcfgpkts function improperly updates the refcnt field of the struct netdevice structure. A use-after-free condition may occur due to concurrent operations between the update of the refcnt and accesses...
Linux Distros Unpatched Vulnerability : CVE-2026-63870
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ieee802154: 6lowpan: only accept IPv6 packets in lowpanxmit The aoe driver or similar generates a non-IPv6 packet e.g., ETHPAOE and queues it for transmission v...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013472)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013472 advisory. In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in aoecmdcfgpkts This patch is against CVE-2023-627...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-006568)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006568 advisory. In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in aoecmdcfgpkts This patch is against CVE-2023-627...
Azure Linux 3.0 Security Update: kernel (CVE-2025-38326)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38326 advisory. - In the Linux kernel, the following vulnerability has been resolved: aoe: clean device rqlist in aoedevdownde...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003557)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003557 advisory. The aoediskdebugfsshow function in drivers/block/aoe/aoeblk.c in the Linux kernel through 4.16.4rc4 allows local users to obtain sensitive address information by...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992775)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992775 advisory. In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in more places For fixing CVE-2023-6270, f98364e926...
Siemens SIMATIC S7-1500 Use After Free (CVE-2024-49982)
In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in more places For fixing CVE-2023-6270, f98364e92662 aoe: fix the potential use-after- free problem in aoecmdcfgpkts makes tx calling devput instead of doing in aoecmdcfgpkts. It...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990837)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990837 advisory. In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in more places For fixing CVE-2023-6270, f98364e926...
Siemens SIMATIC Devices Use After Free (CVE-2024-26898)
In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in aoecmdcfgpkts. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
USN-7833-1: Linux kernel vulnerabilities
Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to...
