789 matches found
CVE-2025-39987
The CVE-2025-39987 entry concerns the Linux kernel hi311x CAN/PCI driver stack and PF_PACKET handling. The vulnerability arises when sun4i_can does not populate net_device_ops -> ndo_change_mtu(), allowing an attacker to set an invalid MTU (e.g., ip link set can0 mtu 9999). A crafted PF_PACKET...
CVE-2025-39987 can: hi311x: populate ndo_change_mtu() to prevent buffer overflow
In the Linux kernel, the following vulnerability has been resolved: can: hi311x: populate ndochangemtu to prevent buffer overflow Sending an PFPACKET allows to bypass the CAN framework logic and to directly reach the xmit function of a CAN driver. The only check which is performed by the PFPACKET...
CVE-2025-39985
In CVE-2025-39985, the Linux kernel mcba_usb driver fails to populate net_device_ops->ndo_change_mtu(), allowing an attacker using PF_PACKET (ETH_P_CANXL) to set an invalid MTU (e.g., can0 mtu 9999). The PF_PACKET framework only verifies skb->len against the interface MTU, so a crafted CAN ...
PT-2025-42261
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the sun4i can driver within the Linux kernel where a missing check in the ndo change mtu function allows an attacker to configure an invalid MTU. This can be exploited b...
PT-2025-42263
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's CAN subsystem, specifically within the etas es58x driver. Sending a PF PACKET can bypass the CAN framework's logic and directly reach the driver's xmi...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the etases58x driver's failure to implement the ndochangemtu function, which could lead to a buffer overflow...
PT-2025-42260
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's mcba usb CAN driver related to handling PF PACKET sockets and CAN XL frames. Specifically, the driver lacks proper MTU validation through the ndo chan...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the mcbausb driver's failure to implement the ndochangemtu function, which could lead to a buffer overflow...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the sun4ican driver not implementing the ndochangemtu function, which could lead to a buffer overflow attack...
Linux Distros Unpatched Vulnerability : CVE-2023-53517
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tipc: do not update mtu if msgmax is too small in mtu negotiation When doing link mtu negotiation, a malicious peer may send Activate msg with a very small mtu,...
EUVD-2001-0323
Malware in sbrugna...
EUVD-2018-17276
Malware in sbrugna...
EUVD-2004-0257
Malware in sbrugna...
EUVD-2015-0286
Malware in sbrugna...
EUVD-2002-0273
Malware in sbrugna...
EUVD-2004-0002
Malware in sbrugna...
EUVD-2015-4346
Malware in sbrugna...
EUVD-2013-6884
Malware in sbrugna...