Lucene search
+L

909 matches found

OSV
OSV
added 2024/09/13 6:15 a.m.16 views

AZL-49570 CVE-2024-46679 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: ethtool: check device is present when getting link settings A sysfs reader can race with a device reset or removal, attempting to read device state when the device is not actually present. eg: exception RIP: qedgetcurrentlink+17 ...

4.7CVSS6.4AI score0.00246EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/13 6:15 a.m.31 views

CVE-2024-46679

In the Linux kernel, the following vulnerability has been resolved: ethtool: check device is present when getting link settings A sysfs reader can race with a device reset or removal, attempting to read device state when the device is not actually present. eg: exception RIP: qedgetcurrentlink+17 ...

4.7CVSS0.00246EPSS
SaveExploits0References12
OSV
OSV
added 2024/09/13 6:15 a.m.10 views

UBUNTU-CVE-2024-46679

In the Linux kernel, the following vulnerability has been resolved: ethtool: check device is present when getting link settings A sysfs reader can race with a device reset or removal, attempting to read device state when the device is not actually present. eg: exception RIP: qedgetcurrentlink+17 ...

4.7CVSS6.2AI score0.00246EPSS
SaveExploits0References26
Debian CVE
Debian CVE
added 2024/09/13 5:29 a.m.26 views

CVE-2024-46679

In the Linux kernel, the following vulnerability has been resolved: ethtool: check device is present when getting link settings A sysfs reader can race with a device reset or removal, attempting to read device state when the device is not actually present. eg: exception RIP: qedgetcurrentlink+17 ...

4.7CVSS5.6AI score0.00246EPSS
SaveExploits0
CVE
CVE
added 2024/09/13 5:29 a.m.154 views

CVE-2024-46679

CVE-2024-46679 (Linux kernel) : A race between sysfs reading of ethtool link settings and device removal can read state when the device is not present, causing a crash. The fix moves a device-presence check into ethtool (and related callers) to ensure link settings are only shown when the device ...

4.7CVSS5.9AI score0.00246EPSS
SaveExploits0References12Affected Software1
OSV
OSV
added 2024/09/13 5:29 a.m.22 views

CVE-2024-46679 ethtool: check device is present when getting link settings

In the Linux kernel, the following vulnerability has been resolved: ethtool: check device is present when getting link settings A sysfs reader can race with a device reset or removal, attempting to read device state when the device is not actually present. eg: exception RIP: qedgetcurrentlink+17 ...

6AI score
SaveExploits0References15
Vulnrichment
Vulnrichment
added 2024/09/13 5:29 a.m.33 views

CVE-2024-46679 ethtool: check device is present when getting link settings

In the Linux kernel, the following vulnerability has been resolved: ethtool: check device is present when getting link settings A sysfs reader can race with a device reset or removal, attempting to read device state when the device is not actually present. eg: exception RIP: qedgetcurrentlink+17 ...

6.8AI score0.00246EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2024/09/13 5:29 a.m.43 views

CVE-2024-46679 ethtool: check device is present when getting link settings

In the Linux kernel, the following vulnerability has been resolved: ethtool: check device is present when getting link settings A sysfs reader can race with a device reset or removal, attempting to read device state when the device is not actually present. eg: exception RIP: qedgetcurrentlink+17 ...

0.00246EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2024/09/13 12:00 a.m.6 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a failure of the ethtool component to check for the presence of a device when fetching link settings...

4.7CVSS6.3AI score0.00246EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2024/09/13 12:00 a.m.91 views

Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-7005-2)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7005-2 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to caus...

9.8CVSS7.9AI score0.02701EPSS
SaveExploits3References218
BDU FSTEC
BDU FSTEC
added 2024/08/27 12:00 a.m.9 views

The vulnerability of the find_compatible_node() function in the ethtool component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the findcompatiblenode function in the ethtool component of the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.8AI score0.00211EPSS
SaveExploits0References8Affected Software2
Positive Technologies
Positive Technologies
added 2024/08/21 12:00 a.m.11 views

PT-2024-32185

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.52 Description The issue arises when ethtool callbacks are executed while a reset is in progress, attempting to access deleted resources. This can result in a NULL pointer dereference. The reproduction steps...

5.5CVSS5.7AI score0.0024EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2024/08/18 2:01 a.m.6 views

SUSE CVE-2024-43836

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: pse-pd: Fix possible null-deref Fix a possible null dereference when a PSE supports both c33 and PoDL, but only one of the netlink attributes is specified. The c33 or PoDL PSE capabilities are already validated in t...

5.5CVSS6.5AI score0.0018EPSS
SaveExploits0References3
NVD
NVD
added 2024/08/17 10:15 a.m.38 views

CVE-2024-43836

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: pse-pd: Fix possible null-deref Fix a possible null dereference when a PSE supports both c33 and PoDL, but only one of the netlink attributes is specified. The c33 or PoDL PSE capabilities are already validated in t...

5.5CVSS0.0018EPSS
SaveExploits0References2
OSV
OSV
added 2024/08/17 10:15 a.m.11 views

UBUNTU-CVE-2024-43836

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: pse-pd: Fix possible null-deref Fix a possible null dereference when a PSE supports both c33 and PoDL, but only one of the netlink attributes is specified. The c33 or PoDL PSE capabilities are already validated in t...

5.5CVSS5.9AI score0.0018EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2024/08/17 10:15 a.m.35 views

CVE-2024-43834

In the Linux kernel, the following vulnerability has been resolved: xdp: fix invalid wait context of pagepooldestroy If the driver uses a page pool, it creates a page pool with pagepoolcreate. The reference count of page pool is 1 as default. A page pool will be destroyed only when a reference...

5.5CVSS5.9AI score0.00247EPSS
SaveExploits0References18
UbuntuCve
UbuntuCve
added 2024/08/17 10:15 a.m.13 views

CVE-2024-43836

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: pse-pd: Fix possible null-deref Fix a possible null dereference when a PSE supports both c33 and PoDL, but only one of the netlink attributes is specified. The c33 or PoDL PSE capabilities are already validated in t...

5.5CVSS5.9AI score0.0018EPSS
SaveExploits0References4
OSV
OSV
added 2024/08/17 9:21 a.m.10 views

CVE-2024-43836 net: ethtool: pse-pd: Fix possible null-deref

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: pse-pd: Fix possible null-deref Fix a possible null dereference when a PSE supports both c33 and PoDL, but only one of the netlink attributes is specified. The c33 or PoDL PSE capabilities are already validated in t...

6.5AI score
SaveExploits0References5
Debian CVE
Debian CVE
added 2024/08/17 9:21 a.m.45 views

CVE-2024-43836

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: pse-pd: Fix possible null-deref Fix a possible null dereference when a PSE supports both c33 and PoDL, but only one of the netlink attributes is specified. The c33 or PoDL PSE capabilities are already validated in t...

5.5CVSS5.4AI score0.0018EPSS
SaveExploits0
Cvelist
Cvelist
added 2024/08/17 9:21 a.m.35 views

CVE-2024-43836 net: ethtool: pse-pd: Fix possible null-deref

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: pse-pd: Fix possible null-deref Fix a possible null dereference when a PSE supports both c33 and PoDL, but only one of the netlink attributes is specified. The c33 or PoDL PSE capabilities are already validated in t...

0.0018EPSS
SaveExploits0References2
Rows per page
Query Builder