1266 matches found
CVE-2025-40133 mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable().
In the Linux kernel, the following vulnerability has been resolved: mptcp: Use skdstget and dstdevrcu in mptcpactiveenable. mptcpactiveenable is called from subflowfinishconnect, which is icsk-icskafops-skrxdstset and it's not always under RCU. Using skdstgetsk-dev could trigger UAF. Let's use...
CVE-2025-40133
CVE-2025-40133 is a Linux kernel vulnerability affecting Multipath TCP. The issue arises in mptcp_active_enable(), called from subflow_finish_connect(), where sk_dst_get(sk)->dev may be accessed outside RCU, risking a use-after-free. The advisory notes the fix is to use __sk_dst_get() and dst_...
CVE-2025-40133: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: mptcp: Use skdstget and dstdevrcu in mptcpactiveenable. mptcpactiveenable is called from subflowfinishconnect, which is icsk-icskafops-skrxdstset and it's not always under RCU. Using skdstgetsk-dev could trigger UAF. Let's use...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989100)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989100 advisory. In the Linux kernel, the following vulnerability has been resolved: mptcp: Fix out of bounds when parsing TCP options The TCP option parser in mptcp mptcpgetoptions...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989494)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989494 advisory. In the Linux kernel, the following vulnerability has been resolved: mptcp: fix possible deadlock in subflow diag Syzbot and Eric reported a lockdep splat in the...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: mptcp: made the fallback action and decision atomic. Syzkaller reported the following errors: WARNING: CPU: 1 PID: 7704 at net/mptcp/protocol.h:1223 mptcpdofallback net/mptcp/protocol.h:1223 inline WARNING: CPU: 1 PID: 7704 at...
TencentOS Server 4: kernel (TSSA-2025:0836)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0836 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
NewStart CGSL MAIN 7.02 : kernel Multiple Vulnerabilities (NS-SA-2025-0253)
The remote NewStart CGSL host, running version MAIN 7.02, has kernel packages installed that are affected by multiple vulnerabilities: - In the Linux kernel, the following vulnerability has been resolved: rapidio: fix an API misues when rioaddnet fails rioaddnet calls deviceregister and fails whe...
Linux Distros Unpatched Vulnerability : CVE-2023-53490
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mptcp: fix disconnect vs accept race Despite commit 0ad529d9fd2b mptcp: fix possible divide ...
EUVD-2021-10121
Malware in sbrugna...
EUVD-2021-27227
Malware in sbrugna...
EUVD-2018-7196
Malware in sbrugna...
EUVD-2017-15224
Malware in sbrugna...
EUVD-2017-4558
Malware in sbrugna...
EUVD-2021-33890
Malicious code in bioql PyPI...
EUVD-2025-31924
Malicious code in bioql PyPI...
EUVD-2025-2590
Malicious code in bioql PyPI...
EUVD-2022-41552
Malicious code in bioql PyPI...