SUSE CVE-2016-6480

Race condition in the ioctlsendfib function in drivers/scsi/aacraid/commctrl.c in the Linux kernel through 4.7 allows local users to cause a denial of service out-of-bounds access or system crash by changing a certain size value, aka a "double fetch" vulnerability...

SUSE CVE-2017-13686

net/ipv4/route.c in the Linux kernel 4.13-rc1 through 4.13-rc6 is too late to check for a NULL fi field when RTMFFIBMATCH is set, which allows local users to cause a denial of service NULL pointer dereference or possibly have unspecified other impact via crafted system calls. NOTE: this does not...

SUSE CVE-2019-20422

In the Linux kernel before 5.3.4, fib6rulelookup in net/ipv6/ip6fib.c mishandles the RT6LOOKUPFDSTNOREF flag in a reference-count decision, leading to for example a crash that was identified by syzkaller, aka CID-7b09c2d052db...

SUSE CVE-2022-3435

A vulnerability classified as problematic has been found in Linux Kernel. This affects the function fibnhmatch of the file net/ipv4/fibsemantics.c of the component IPv4 Handler. The manipulation leads to out-of-bounds read. It is possible to initiate the attack remotely. It is recommended to appl...

PT-2023-35279

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.231 Description The issue concerns a potential Spectre v1 gadget in the fib metrics match function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2023-35216

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.166 Description The issue concerns a potential Spectre v1 gadget in the fib metrics match function. This could potentially be exploited, although the actual impact and attack plausibility have not yet been...

PT-2025-13342

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential spectre v1 gadget in the fib metrics match function has been resolved. The issue arises from the use of the type variable as an array index, which could lead to cpu speculati...

PT-2023-33371 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.226 Description: The issue concerns an attempt to delete a multipath route when the fib info contains an nh reference. This problem was introduced in version v5.3 and is fixed in Linux Kernel version...

PT-2023-33311 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.158 Description: The issue concerns an attempt to delete a multipath route when the fib info contains an nh reference. This problem was introduced in version v5.3 and is fixed in Linux Kernel version...

DEBIAN-CVE-2022-3435

A vulnerability classified as problematic has been found in Linux Kernel. This affects the function fibnhmatch of the file net/ipv4/fibsemantics.c of the component IPv4 Handler. The manipulation leads to out-of-bounds read. It is possible to initiate the attack remotely. It is recommended to appl...

PT-2022-5936

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A problematic issue has been found in the Linux Kernel, affecting the fib nh match function of the net/ipv4/fib semantics.c file in the IPv4 Handler component. This issue leads to an...

Linux Kernel Buffer Overflow Vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation. A buffer error vulnerability exists in the Linux kernel that stems from an out-of-bounds read in the fibnhmatch function in the net/ipv4/fibsemantics.c file of the IPv4 Handler component...

PT-2024-11862

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0-rc7 Description A slab-out-of-bounds access was reported in the fib nh match function. The issue occurs when attempting to delete a multipath route while the fib info contains an nh reference. Separate nextho...

Linux Kernel IPv4 FIB Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

PT-2022-32599

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.58 Description The issue concerns data-races around sysctl fib multipath hash policy in the ipv4 component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2022-32834

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.132 Description A data-race issue exists around sysctl fib sync mem in the ipv4 component. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32663

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.56 Description A data-race issue exists around sysctl fib sync mem in the ipv4 component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

PT-2022-32961

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.207 Description A data-race issue exists around sysctl fib sync mem in the ipv4 component. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32446

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.2 through v5.18.12 Description A data-race issue exists around sysctl fib sync mem in the ipv4 component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5...

PT-2022-32930

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.208 Description A data-race issue exists around sysctl fib multipath use neigh. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.4.208...