PT-2025-8523 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A data-race issue exists around the sysctl igmp llm reports variable in the Linux kernel. This occurs because the variable can be changed concurrently while being read, potentially...

PT-2025-8522 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A data-race issue exists around the sysctl igmp qrv variable in the Linux kernel. The variable can be changed concurrently while being read, which may lead to unpredictable behavior. T...

CLSA-2023-1683229770 kernel: Fix of 22 CVEs

media: rc: Fix use-after-free bugs caused by enetxirqsim CVE-2023-1118 - net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26545 - net/ulp: prevent ULP without clone op from entering the LISTEN status CVE-2023-0461 - Bluetooth: L2CAP: Fix u8 overflow CVE-2022-45934 -...

CLSA-2023-1683146027 kernel: Fix of 23 CVEs

media: rc: Fix use-after-free bugs caused by enetxirqsim CVE-2023-1118 - net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26545 - net/ulp: prevent ULP without clone op from entering the LISTEN status CVE-2023-0461 - Bluetooth: L2CAP: Fix u8 overflow CVE-2022-45934 -...

K16345: FreeBSD vulnerability CVE-2015-1414

Security Advisory Description Integer overflow in FreeBSD before 8.4 p24, 9.x before 9.3 p10. 10.0 before p18, and 10.1 before p6 allows remote attackers to cause a denial of service crash via a crafted IGMP packet, which triggers an incorrect size calculation and allocation of insufficient memor...

SUSE CVE-2004-1137

Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local and remote attackers to cause a denial of service or execute arbitrary code via 1 the ipmcsource function, which decrements a counter to -1, or 2 the igmpmarksources function, whi...

SUSE CVE-2012-0207

The igmpheardquery function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows remote attackers to cause a denial of service divide-by-zero error and panic via IGMP packets...

SUSE CVE-2016-7993

A bug in util-print.c:reltsprint in tcpdump before 4.9.0 could cause a buffer overflow in multiple protocol parsers DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM...

D-Link DIR-825 Rev G1 <= 1.04Beta, DIR-882 Rev A1 <= 1.30b06Beta Multiple Router Isolation Bypass Vulnerabilities

D-Link DIR-825 and DIR-882 devices are prone to multiple router isolation bypass vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2022-2716)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unbreakable Enterprise kernel security update

4.1.12-124.66.3 - fuse: fix pipe buffer lifetime for directio Miklos Szeredi Orabug: 33981149 CVE-2022-1011 - vt: drop old FONT ioctls Jiri Slaby Orabug: 34408794 CVE-2021-33656 - video: ofdisplaytiming.h: include errno.h Hsin-Yi Wang Orabug: 34408910 CVE-2021-33655 - fbcon: Disallow setting font...

Ubuntu: Security Advisory (USN-5540-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OESA-2022-1837 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: n ipcheckmcrcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User...

SUSE SLES15: kernel-livepatch-5_3_18-59_19-default / etc (SUSE-SU-2022:2770-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2770-1 advisory. This update for the Linux Kernel 5.3.18-5919 fixes several issues. The following security issues were fixed: - CVE-2022-28389: Fixed a double...

SUSE SLES12: kernel-livepatch-4_12_14-150_78-default / etc (SUSE-SU-2022:2709-1)

The remote SUSE Linux SLES12 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2709-1 advisory. This update for the Linux Kernel 4.12.14-15078 fixes several issues. The following security issues were fixed: - CVE-2022-28389: Fixed...

CVE-2022-20141

A use-after-free flaw was found in the Linux kernel’s IGMP protocol in how a user triggers a race condition in the ipcheckmcrcu function. This flaw allows a local user to crash or potentially escalate their privileges on the system...

GSD-2022-1004907 igmp: Fix data-races around sysctl_igmp_llm_reports.

igmp: Fix data-races around sysctligmpllmreports. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.325 by commit...

GSD-2022-1004850 igmp: Fix data-races around sysctl_igmp_llm_reports.

igmp: Fix data-races around sysctligmpllmreports. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.290 by commit...

GSD-2022-1004777 igmp: Fix data-races around sysctl_igmp_llm_reports.

igmp: Fix data-races around sysctligmpllmreports. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.254 by commit...

GSD-2022-1004674 igmp: Fix data-races around sysctl_igmp_llm_reports.

igmp: Fix data-races around sysctligmpllmreports. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.208 by commit...