PT-2022-36469 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.267 Description: The issue concerns the macvlan component, where a consistent minimal MTU is not enforced. This is an automated ID intended to aid in discovery of potential security vulnerabilities, and th...

PT-2022-36389

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.225 Description The issue concerns the macvlan feature, where a consistent minimal MTU is not enforced. This could potentially lead to security vulnerabilities, although the actual impact and attack...

PT-2022-36536

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.300 Description The issue concerns the macvlan component, where a consistent minimal MTU is not enforced. This is an automated ID intended to aid in discovery of potential security vulnerabilities, and the...

PT-2022-36278

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.156 Description The issue concerns the macvlan component, which does not enforce a consistent minimal MTU. This could potentially lead to security vulnerabilities, although the actual impact and attack...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

kernel: tunnels: do not assume mac header is set in skb_tunnel_check_pmtu()

In the Linux kernel, the following vulnerability has been resolved: tunnels: do not assume mac header is set in skbtunnelcheckpmtu Recently added debug in commit f9aefd6b2aa3 "net: warn if mac header was not set" caught a bug in skbtunnelcheckpmtu, as shown in this syzbot report 1. In ndostartxmi...

GSD-2022-1007169 ipv6: ensure sane device mtu in tunnels

ipv6: ensure sane device mtu in tunnels This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.153 by commit...

GSD-2022-1006942 ipv6: ensure sane device mtu in tunnels

ipv6: ensure sane device mtu in tunnels This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.77 by commit...

GSD-2022-1006625 ipv6: ensure sane device mtu in tunnels

ipv6: ensure sane device mtu in tunnels This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit ccd94bd4939690e24d13e23814bce7ed853a09f...

PT-2022-35197 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.77 Description: The issue concerns the handling of device MTU in IPv6 tunnels. It was introduced in version v3.7 and fixed in version v5.15.77. The actual impact and attack plausibility have not yet been...

PT-2022-34880

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.7 Description The issue concerns the handling of device MTU in IPv6 tunnels. It was introduced in version v3.7 and fixed in version v6.0.7. The actual impact and attack plausibility have not yet been proven...

PT-2022-35424

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.153 Description The issue concerns the handling of device MTU in IPv6 tunnels. It was introduced in version v3.7 and fixed in version v5.10.153. The actual impact and attack plausibility have not yet been...

uglos.mtu.edu Cross Site Scripting vulnerability OBB-2881499

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-32618

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.58 Description The issue concerns a data-race around sysctl tcp mtu probing in the tcp module. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to...

PT-2022-32796

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.134 Description A data-race issue exists around sysctl tcp mtu probe floor. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.10.134,...

PT-2022-32389

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.15 Description A data-race issue exists around sysctl tcp mtu probe floor. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.18.15,...

PT-2022-32940

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.208 Description A data-race issue exists around sysctl tcp mtu probe floor. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.4.208,...

PT-2022-33043

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.254 Description The issue concerns a data-race condition around sysctl tcp mtu probing in the TCP protocol handling. This condition may potentially lead to security vulnerabilities, although the actual impa...

PT-2022-32943

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.208 Description The issue concerns a data-race around sysctl tcp mtu probing in the tcp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-32393

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.15 Description The issue concerns a data-race around sysctl tcp mtu probing in the tcp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...