47 matches found
CVE-2026-23064 net/sched: act_ife: avoid possible NULL deref
In the Linux kernel, the following vulnerability has been resolved: net/sched: actife: avoid possible NULL deref tcfifeencode must make sure ifeencode does not return NULL. syzbot reported: Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 1 SMP KASAN NOP...
CVE-2026-23064
In the Linux kernel, the following vulnerability has been resolved: net/sched: actife: avoid possible NULL deref tcfifeencode must make sure ifeencode does not return NULL. syzbot reported: Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 1 SMP KASAN NOP...
CVE-2026-23064 net/sched: act_ife: avoid possible NULL deref
In the Linux kernel, the following vulnerability has been resolved: net/sched: actife: avoid possible NULL deref tcfifeencode must make sure ifeencode does not return NULL. syzbot reported: Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 1 SMP KASAN NOP...
CVE-2019-2293
Pointer dereference while freeing IFE resources due to lack of length check of in port resource. in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD...
PT-2026-27743
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.0-rc1-00169-gfbdfa8da05b6 Description The Linux kernel contains a flaw in the net/sched component, specifically within the act ife module. An incorrect metalist update behavior can occur when an ife action is...
Linux Distros Unpatched Vulnerability : CVE-2025-40278
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: sched: actife: initialize struct tcife to fix KMSAN kernel-infoleak Fix a KMSAN kernel-infoleak detected by the syzbot . net? KMSAN: kernel-infoleak in...
CVE-2025-40278
In the Linux kernel, the following vulnerability has been resolved: net: sched: actife: initialize struct tcife to fix KMSAN kernel-infoleak Fix a KMSAN kernel-infoleak detected by the syzbot . net? KMSAN: kernel-infoleak in skbdatagramiter In tcfifedump, the variable 'opt' was partially...
UBUNTU-CVE-2025-40278
In the Linux kernel, the following vulnerability has been resolved: net: sched: actife: initialize struct tcife to fix KMSAN kernel-infoleak Fix a KMSAN kernel-infoleak detected by the syzbot . net? KMSAN: kernel-infoleak in skbdatagramiter In tcfifedump, the variable 'opt' was partially...
CVE-2025-40278 net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak
In the Linux kernel, the following vulnerability has been resolved: net: sched: actife: initialize struct tcife to fix KMSAN kernel-infoleak Fix a KMSAN kernel-infoleak detected by the syzbot . net? KMSAN: kernel-infoleak in skbdatagramiter In tcfifedump, the variable 'opt' was partially...
PT-2025-49379
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel information leak issue was addressed in the Linux kernel related to the tc ife structure within the networking subsystem. The issue stemmed from partially initialized variables ...
EUVD-2019-11935
Malware in sbrugna...
EUVD-2025-13551
Malicious code in bioql PyPI...
CVE-2024-45578
Memory corruption while acquire and update IOCTLs during IFE output resource ID validation...
CVE-2024-45578
Memory corruption while acquire and update IOCTLs during IFE output resource ID validation...
CVE-2024-45578
Memory corruption while acquire and update IOCTLs during IFE output resource ID validation...
CVE-2024-45578
CVE-2024-45578 concerns memory corruption in Qualcomm chipsets caused by improper handling during acquisition and update of IOCTLs while validating the IFE output resource ID. The vulnerability affects the IOCTL path used for IFE output resource ID validation, with a local attack vector and high ...
PT-2025-19855 · Qualcomm · Snapdragon +14
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue involves memory corruption that occurs during the acquisition and update of IOCTLs, specifically when validating the output resource ID for IFE. This corruption happens due to...
PT-2025-6804 · Schneider Electric · Enerlin'X Ife Interface
Name of the Vulnerable Software and Affected Versions: Schneider Electric - Enerlin’X IFE interface LV434001 versions All Description: A Denial-of-Service issue exists due to improper input validation, which can be triggered by sending malicious IPV6 packets to the device. This could cause the...
PT-2025-6803 · Unknown · Enerlin'X Ife Interface
Name of the Vulnerable Software and Affected Versions: Enerlin'X IFE interface LV434001 versions all Description: The issue is related to improper input validation, which could cause a Denial-of-Service when malicious ICMPV6 packets are sent to the device. Recommendations: For all versions, at th...
ife-ooyeelegantwomen.org Cross Site Scripting vulnerability OBB-3616143
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...