201 matches found
The vulnerability of the skb_segment() function in the net/core/skbuff.c module, which supports network functions of the Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the skbgment function in the net/core/skbuff.c module, which supports networking functions of the Linux kernel, is related to the use of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
The vulnerability of the hsr_get_untagged_frame() function in the net/hsr/hsr_forward.c module, a Linux kernel networking function implementation, allows a hacker to cause a service failure.
The vulnerability of the hsrgetuntaggedframe function in the net/hsr/hsrforward.c module, which is part of the networking functions in the Linux kernel, relates to the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the rcu_assign_sk_user_data_nocopy() macro definition in the include/net/sock.h file, which is part of the networking function support in the Linux kernel, allows a hacker to cause a service failure.
The vulnerability of the rcuassignskuserdatanocopy macro definition in the include/net/sock.h file, which is part of the Linux kernel’s networking support functions, is related to errors during the update of the reference counters. Exploiting this vulnerability could allow an attacker to cause a...
The vulnerability of the sock_lock_init_class_and_name() function in the include/net/sock.h module of Linux’s kernel networking functions allows a attacker to cause a service failure.
The vulnerability of the socklockinitclassandname function in the include/net/sock.h module, which is part of Linux’s kernel networking functions, relates to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
kernel: net: atlantic: fix fragment overflow handling in RX path
An out-of-bounds write vulnerability was found in the Aquantia Atlantic network driver in the Linux kernel. When receiving packets that span more than MAXSKBFRAGS 17 fragments, the driver writes beyond the skb fragment array bounds in skbaddrxfrag, causing kernel memory corruption and panic...
kernel: net: use dst_dev_rcu() in sk_setup_caps()
In the Linux kernel, the following vulnerability has been resolved: net: use dstdevrcu in sksetupcaps Use RCU to protect accesses to dst-dev from sksetupcaps and skdstgsomaxsize. Also use dstdevrcu in ip6dstmtumaybeforward, and ipdstmtumaybeforward. ip4dsthoplimit can use dstdevnetrcu...
The vulnerability of the old_deviceless() function in the net/bridge/br_ioctl.c module, a implementation of networking functions in the Linux kernel, allows a attacker to cause a service failure.
The vulnerability of the olddeviceless function in the net/bridge/brioctl.c module, which implements networking functions in the Linux kernel, is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the ipcomp_free_scratches() function in the net/xfrm/xfrm_ipcomp.c module, a component of the Linux kernel’s networking functions, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ipcompfreescratches function in the net/xfrm/xfrmipcomp.c module, which is part of the Linux kernel’s networking functions, relates to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow an attacker to compromise...
The vulnerability of the kcm_sendmsg() function in the net/kcm/kcmsock.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.
The vulnerability of the kcmsendmsg function in the net/kcm/kcmsock.c module, which implements networking functions in the Linux kernel, is related to improper memory release memory leak. Exploiting this vulnerability may allow a remote attacker to cause service interruptions...
The vulnerability of the xfrm_dev_policy_add() function in the net/xfrm/xfrm_device.c module, which is part of the Linux kernel’s networking functions, allows a hacker to trigger a service failure.
The vulnerability of the xfrmdevpolicyadd function in the net/xfrm/xfrmdevice.c module, which implements networking functions in the Linux kernel, is related to the introduction of an inappropriate developer. Exploiting this vulnerability could allow a perpetrator to cause service failures...
CVE-2025-71182 can: j1939: make j1939_session_activate() fail if device is no longer registered
In the Linux kernel, the following vulnerability has been resolved: can: j1939: make j1939sessionactivate fail if device is no longer registered syzbot is still reporting unregisternetdevice: waiting for vcan0 to become free. Usage count = 2 even after commit 93a27b5891b8 "can: j1939: add missing...
CVE-2025-71152 net: dsa: properly keep track of conduit reference
In the Linux kernel, the following vulnerability has been resolved: net: dsa: properly keep track of conduit reference Problem description ------------------- DSA has a mumbo-jumbo of reference handling of the conduit net device and its kobject which, sadly, is just wrong and doesn't make sense...
CVE-2025-71066
Summary of CVE-2025-71066 (Linux kernel, net/sched ETS): A race condition between ets_qdisc_dequeue and ets_qdisc_change can cause use-after-free on a Qdisc object. The underlying issue is that some classes with qdiscs set to NULL remain in the active list, allowing a concurrent dequeue to access...
CVE-2022-50780 net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed
In the Linux kernel, the following vulnerability has been resolved: net: fix UAF issue in nfqnlnfhookdrop when opsinit failed When the opsinit interface is invoked to initialize the net, but ops-init fails, data is released. However, the ptr pointer in net-gen is invalid. In this case, when...
CVE-2025-68379 RDMA/rxe: Fix null deref on srq->rq.queue after resize failure
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix null deref on srq-rq.queue after resize failure A NULL pointer dereference can occur in rxesrqchkattr when ibvmodifysrq is invoked twice in succession under certain error conditions. The first call may fail in...
EUVD-2023-60171
In the Linux kernel, the following vulnerability has been resolved: kcm: Fix error handling for SOCKDGRAM in kcmsendmsg. syzkaller found a memory leak in kcmsendmsg, and commit c821a88bd720 "kcm: Fix memory leak in error path of kcmsendmsg" suppressed it by updating kcmtxmsghead-lastskb if partia...
Linux Distros Unpatched Vulnerability : CVE-2025-40280
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tipc: Fix use-after-free in tipcmonreinitself. syzbot reported use-after-free of tipcnetnet-monitors in tipcmonreinitself. 0 The array is protected by RTNL, but...
The vulnerability of the vsock_sk_destruct() function in the net/vmw_vsock/af_vsock.c module, which is part of the networking functions in the Linux kernel, allows a hacker to cause a service failure.
The vulnerability of the vsockskdestruct function in the net/vmwvsock/afvsock.c module, which implements networking functions in the Linux kernel, is related to the lack of memory release after the effective lifespan of these functions has ended. Exploiting this vulnerability could allow an...
The vulnerability of the sock_map_link_update_prog() function in the net/core/sock_map.c module allows a hacker to cause a service failure in Linux kernel-based networking functions.
The vulnerability of the sockmaplinkupdateprog function in the net/core/sockmap.c module relates to pointer manipulation in Linux kernel’s network functions. Exploiting this vulnerability could allow an attacker to cause a service failure...
