510 matches found
DEBIAN-CVE-2023-3812
An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious too big networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate their privileges on the system...
CVE-2023-3812
An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious too big networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate their privileges on the system...
kernel: iavf: Fix reset error handling
A deadlock condition exists in the linux kernel such that when calling iavfclose in iavfresettask error handling,doing so can lead to double call of napidisable thereby leading to a denial of service due to the deadlock...
PT-2025-40159
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.7 Description A race condition can occur in the wifi subsystem related to the rtw89 driver, specifically between the initialization and enabling of Network Address Translation NAPI. This condition arises if t...
Ghost Foundation node-sqlite3 code execution vulnerability
Talos Vulnerability Report TALOS-2022-1645 Ghost Foundation node-sqlite3 code execution vulnerability March 16, 2023 CVE Number CVE-2022-43441 SUMMARY A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1. A specially-crafted Javascri...
Arbitrary Code Execution
sqlite3 is vulnerable to Arbitrary Code Execution. The vulnerability exists due to the .ToString implementation because it calls the napicoercetostring function which can execute JavaScript when passed a crafted Napi::Value object, allowing an attacker to execute arbitrary JavaScript in the brows...
SUSE CVE-2021-29264
An issue was discovered in the Linux kernel through 5.11.10. drivers/net/ethernet/freescale/gianfar.c in the Freescale Gianfar Ethernet driver allows attackers to cause a system crash because a negative fragment size is calculated in situations involving an rx queue overrun when jumbo packets are...
kernel: iavf: Fix reset error handling
A deadlock condition exists in the linux kernel such that when calling iavfclose in iavfresettask error handling,doing so can lead to double call of napidisable thereby leading to a denial of service due to the deadlock...
PT-2023-33123 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.13 Description: A race condition exists on the per-CQ variable napi work done. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v6.0.13...
GSD-2022-1008265 net: tun: fix bugs for oversize packet when napi frags enabled
net: tun: fix bugs for oversize packet when napi frags enabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.265 by commit...
GSD-2022-1008196 net: tun: fix bugs for oversize packet when napi frags enabled
net: tun: fix bugs for oversize packet when napi frags enabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.224 by commit...
GSD-2022-1008166 net: tun: call napi_schedule_prep() to ensure we own a napi
net: tun: call napischeduleprep to ensure we own a napi This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.225 by commit...
GSD-2022-1008113 net: tun: fix bugs for oversize packet when napi frags enabled
net: tun: fix bugs for oversize packet when napi frags enabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.154 by commit...
GSD-2022-1007941 net: tun: call napi_schedule_prep() to ensure we own a napi
net: tun: call napischeduleprep to ensure we own a napi This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.79 by commit...
GSD-2022-1007854 net: tun: fix bugs for oversize packet when napi frags enabled
net: tun: fix bugs for oversize packet when napi frags enabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.8 by commit...
PT-2022-36327 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.155 Description: The issue is related to a potential security vulnerability in the Linux Kernel. It involves the napi schedule prep function to ensure ownership of a napi. The actual impact and attack...
PT-2022-36256 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.78 Description: The issue is related to bugs in the handling of oversize packets when napi frags are enabled. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...
PT-2022-36055 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.9 Description: The issue is related to memory leaks in the napi get frags function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...
PT-2022-36038 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.9 Description: The issue is related to a potential security vulnerability in the Linux Kernel. It involves the napi schedule prep function, which is used to ensure ownership of a napi. The actual impact and...
PT-2022-7679 · Linux +4 · Linux Kernel +4
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a potential use-after-free in the hisi femac rx function. This occurs because the skb is delivered to napi gro receive, which may free it. After this,...