Lucene search
K

8 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.3 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: virtio-net: Zeroed unused hash fields When a GSO tunnel is negotiated, the virtionethdrtnlfromskb function attempts to initialize the tunnel metadata. However, it forgets to zero the unused rxhash fields. This could lead to...

5.2AI score0.00155EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/12/08 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-40236

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtio-net: zero unused hash fields When GSO tunnel is negotiated virtionethdrtnlfromskb tries to initialize the tunnel metadata but forget to zero unused rxhas...

5.8AI score0.00155EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/12/05 4:14 p.m.4 views

CVE-2025-40236

In the Linux kernel, the following vulnerability has been resolved: virtio-net: zero unused hash fields When GSO tunnel is negotiated virtionethdrtnlfromskb tries to initialize the tunnel metadata but forget to zero unused rxhash fields. This may leak information to another side. Fixing this by...

5.6AI score0.00155EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/12/05 12:25 a.m.3 views

SUSE CVE-2025-40236

In the Linux kernel, the following vulnerability has been resolved: virtio-net: zero unused hash fields When GSO tunnel is negotiated virtionethdrtnlfromskb tries to initialize the tunnel metadata but forget to zero unused rxhash fields. This may leak information to another side. Fixing this by...

6.3AI score0.00155EPSS
Exploits0References3
OSV
OSV
added 2025/12/04 4:16 p.m.2 views

UBUNTU-CVE-2025-40236

In the Linux kernel, the following vulnerability has been resolved: virtio-net: zero unused hash fields When GSO tunnel is negotiated virtionethdrtnlfromskb tries to initialize the tunnel metadata but forget to zero unused rxhash fields. This may leak information to another side. Fixing this by...

5.7AI score0.00155EPSS
Exploits0References10
Cvelist
Cvelist
added 2025/12/04 3:31 p.m.20 views

CVE-2025-40236 virtio-net: zero unused hash fields

In the Linux kernel, the following vulnerability has been resolved: virtio-net: zero unused hash fields When GSO tunnel is negotiated virtionethdrtnlfromskb tries to initialize the tunnel metadata but forget to zero unused rxhash fields. This may leak information to another side. Fixing this by...

0.00155EPSS
Exploits0References2
CVE
CVE
added 2025/12/04 3:31 p.m.11 views

CVE-2025-40236

The CVE-2025-40236 issue concerns the Linux kernel’s virtio-net code. When negotiating a GSO tunnel, virtio_net_hdr_tnl_from_skb() may forget to zero unused rxhash fields, which could leak information to the other side. The vulnerability is described as fixed by zeroing the unused hash fields. Th...

5.9AI score0.00155EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/04 12:0 a.m.2 views

PT-2025-49063

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the virtio-net module. Specifically, when GSO tunnel is negotiated, the virtio net hdr tnl from skb function fails to zero unused rxhash fields...

5.4AI score0.00544EPSS
Exploits3References391
Rows per page
Query Builder