689 matches found
CVE-2022-49198
CVE-2022-49198 targets the Linux kernel’s mptcp path. According to multiple sources, the vulnerability stems from a race in __mptcp_alloc_tx_skb where skb->tcp_tsorted_anchor is initialized before the skb release path under memory pressure, causing kfree_skb to release the destination twice an...
CVE-2022-49084
In the Linux kernel, the following vulnerability has been resolved: qede: confirm skb is allocated before using qedebuildskb assumes buildskb always works and goes straight to skbreserve. However, buildskb can fail under memory pressure. This results in a kernel panic because the skb to reserve i...
CVE-2022-49084 qede: confirm skb is allocated before using
In the Linux kernel, the following vulnerability has been resolved: qede: confirm skb is allocated before using qedebuildskb assumes buildskb always works and goes straight to skbreserve. However, buildskb can fail under memory pressure. This results in a kernel panic because the skb to reserve i...
CVE-2022-49084
CVE-2022-49084 is addressed in the Linux kernel component related to qede: a null pointer dereference can occur when build_skb() fails under memory pressure in qede_build_skb(); the fix adds a check for NULL and ensures callers handle NULL returns to prevent kernel panics. Connected advisories (E...
CVE-2022-49198: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: mptcp: Fix crash due to tcptsortedanchor was initialized before release skb Got crash when doing pressure test of mptcp: =========================================================================== dstrelease: dst:ffffa06ce6e5c058...
Azure Linux 3.0 Security Update: kernel (CVE-2024-50001)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50001 advisory. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix error path in multi- packe...
SUSE CVE-2025-21676
In the Linux kernel, the following vulnerability has been resolved: net: fec: handle pagepooldevallocpages error The fecenetupdatecbd function calls pagepooldevallocpages but did not handle the case when it returned NULL. There was a WARNON!newpage but it would still proceed to use the NULL point...
UBUNTU-CVE-2025-21676
In the Linux kernel, the following vulnerability has been resolved: net: fec: handle pagepooldevallocpages error The fecenetupdatecbd function calls pagepooldevallocpages but did not handle the case when it returned NULL. There was a WARNON!newpage but it would still proceed to use the NULL point...
CVE-2025-21676
Summary: CVE-2025-21676 affects the Linux kernel’s fec_enet driver (net: fec: handle page_pool_dev_alloc_pages error). The root cause is that page_pool_dev_alloc_pages can return NULL and the code (fec_enet_update_cbd) did not properly handle that NULL, continuing to use it and potentially crash ...
CVE-2025-21676: NULL Pointer Dereference
In the Linux kernel, the following vulnerability has been resolved: net: fec: handle pagepooldevallocpages error The fecenetupdatecbd function calls pagepooldevallocpages but did not handle the case when it returned NULL. There was a WARNON!newpage but it would still proceed to use the NULL point...
PT-2025-8793
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A problem has been identified in the Linux kernel's handling of extreme memory squeeze situations, specifically in the way TCP handles window advertising. Under memory pressure, a socket...
PT-2025-4357
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.73/6.12.10 Description The issue is related to a null pointer dereference in the page pool dev alloc pages function of the Linux kernel's drivers/net/ethernet/freescale/fec main.c module. This can occur when...
CVE-2024-7095 On affected platforms running Arista EOS with SNMP configured, if “snmp-server transmit max-size” is configured, under some circumstances a specially crafted packet can cause the snmpd process to leak memory. This may result in the snmpd process being term
On affected platforms running Arista EOS with SNMP configured, if “snmp-server transmit max-size” is configured, under some circumstances a specially crafted packet can cause the snmpd process to leak memory. This may result in the snmpd process being terminated causing SNMP requests to time out...
CVE-2024-7095: Missing Release of Memory after Effective Lifetime
On affected platforms running Arista EOS with SNMP configured, if “snmp-server transmit max-size” is configured, under some circumstances a specially crafted packet can cause the snmpd process to leak memory. This may result in the snmpd process being terminated causing SNMP requests to time out...
CVE-2024-50219
In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: let GFPATOMIC order-0 allocs access highatomic reserves Under memory pressure it's possible for GFPATOMIC order-0 allocations to fail even though free pages are available in the highatomic reserves. GFPATOMIC...
Security Advisory 0107
Security Advisory 0107 . CSAF PDF Date: November 19, 2024 Revision | Date | Changes ---|---|--- 1.0 | November 19, 2024 | Initial release The CVE-ID tracking this issue: CVE-2024-7095 CVSSv3.1 Base Score: 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Common Weakness Enumeration: CWE-401: Missi...
kernel: netfilter: nf_tables: set dormant flag on hook register failure
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: set dormant flag on hook register failure We need to set the dormant flag again if we fail to register the hooks. During memory pressure hook registration can fail and we end up with a table marked as active...
kernel: mm/swapfile: add cond_resched() in get_swap_pages()
In the Linux kernel, the following vulnerability has been resolved: mm/swapfile: add condresched in getswappages The softlockup still occurs in getswappages under memory pressure. 64 CPU cores, 64GB memory, and 28 zram devices, the disksize of each zram device is 50MB with same priority as si. Us...
PT-2025-13308
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A softlockup issue in the Linux kernel has been identified, specifically in the get swap pages function under memory pressure. This issue can occur when the system is under heavy load,...