CVE-2015-2291

CVE-2015-2291 1 IQVW32.sys anterior a 1.3.1.0 y 2 IQVW64.sys anterior a 1.3.1.0 en el controlador de diagnóstico de Ethernet de Intel para Windows permite a usuarios locales causar una denegación de servicio o posiblemente ejecutar código arbitrario con privilegios de kernel mediante una llamada...

iqvw64e-privilege-escalation

iqvw64e-privilege-escalation CVE-2015-2291 PoC de escalada de privilegios local Resumen Este proyecto es una prueba de concepto educativa para una vulnerabilidad de Escalada de Privilegios Local LPE en el driver iqvw64e.sys SHA256: 37c637a74bf20d7630281581a8fae124200920df11ad7cd68c14c26cc12c5ec9 ...

CVE-2026-97982

A flaw was found in the Cortina Ethernet driver in the Linux kernel. The driver incorrectly returns the remaining packet budget instead of the number of packets processed during receive polling. This miscalculation causes idle network polling routines to remain continuously scheduled, which can...

CVE-2026-97981

A flaw was found in the Cortina Gemini Ethernet driver within the Linux kernel. The network packet receive handler fails to count dropped or malformed packets against its processing budget. An attacker could exploit this vulnerability by sending a stream of invalid network frames, causing the...

CVE-2026-97978

A flaw was found in the Linux kernel's Intel Ethernet driver ice. Event tracing routines dereferenced internal data pointers when formatting log messages instead of capturing the necessary values when the event was recorded. A local user with administrative access or tracing privileges could...

CVE-2026-97972

A flaw was found in the Linux kernel's Cadence MACB ethernet driver. During network interface initialization, the driver fails to properly release a device tree node reference upon successful registration. Repeated device probe or bind cycles can result in a reference count leak and progressive...

CVE-2026-97973

A flaw was found in the Linux kernel's Cadence MACB Ethernet driver. When device initialization fails during the probing process, the error-handling path fails to properly release an allocated physical link phylink structure. A local user capable of triggering repeated probe failures could exploi...

CVE-2026-98052

A flaw was found in the Linux kernel's Broadcom ASP2.0 Ethernet driver. This vulnerability can result in a Denial of Service DoS or system instability due to premature memory deallocation. When handling fragmented network packets, the driver fails to properly clear state flags before reusing...

CVE-2026-98051

A flaw was found in the Linux kernel's Broadcom ASP 2.0 Ethernet driver. When evaluating whether sufficient transmit buffer space is available for outgoing packets, the driver fails to properly verify all required consecutive descriptor slots. A local user could exploit this flaw by generating...

CVE-2026-97540

A flaw was found in the Linux kernel's Pegasus USB Ethernet driver. This vulnerability can lead to a Denial of Service DoS through a system crash. When dynamic device identifiers are configured, the driver improperly uses pointer calculations on heap memory instead of referencing its static devic...

CVE-2026-98008

A flaw was found in the Linux kernel's Cadence MACB ethernet driver. A local user with administrative privileges could cause a denial of service DoS by triggering a driver unbind operation or an initialization failure on a device configured with a fixed-link connection. In this configuration, the...

CVE-2026-93815

A flaw was found in the Linux kernel's Au1000 Ethernet driver. This vulnerability allows a privileged local user to cause a Denial of Service DoS when disabling or closing the network interface. The issue occurs because the driver executes a sleepable interrupt cleanup routine while holding an...

CVE-2026-98105

A flaw was found in the Linux kernel's OPEN Alliance TC6 oatc6 Ethernet driver. Under heavy or oversubscribed network traffic, missing frame boundaries can cause the driver to append incoming data without verifying that adequate buffer capacity remains. This condition triggers an internal kernel...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: i40e: Fixed NULL pointer dereferencing in VSI filter synchronization. The issue of NULL pointer dereferencing in sync VSI filters has been eliminated. A new I40EVSIRELEASING flag was added to indicate the deletion and release of...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: Networks: Ethernet – Fix for potential use-after-free in ecbhfremove. The code static void ecbhfremovestructpcidev dev looks as follows: c ... struct ecbhfpriv priv = netdevprivnetdev; unregisternetdevnetdev; freenetdevnetdev;...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel up to 5.15.2, hwatlutilsfwrpcwait in drivers/net/ethernet/aquantia/atlantic/hwatl/hwatlutils.c allows an attacker who can introduce a crafted device to trigger an out-of-bounds write by using a crafted length value...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Net: Ethernet: ecbhf: Fixed the dmafreecoherent function’s DMA handle. In the error-prone implementation of dmafreecoherent, it incorrectly uses priv-rxbuf.alloclen as the DMA handle. This could result in improper unmapping of th...

Astra Linux – Vulnerability in Linux

A issue was discovered in the Linux kernel through version 5.11.10. In the drivers/net/ethernet/freescale/gianfar.c file of the Freescale Gianfar Ethernet driver, it was found that a negative fragment size can be calculated in situations where an rx queue overrun occurs when jumbo packets are use...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Networks: Ethernet: lantiqetop – fixed memory disclosure issues. When padding packets, the buffer is not zeroed, resulting in memory disclosure. The affected data is visible on the network. This patch uses skbputpadto to properly...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: BUG: NULL pointer dereference in the kernel, address: 0000000000000038 RIP efxnicupdatestats The function efxnetstats doctgetstats64 can be called during an ethtool self-test. During this period, nicdata-mcstats is NULL because t...