CVE-2022-3545

A vulnerability was found in areacacheget in drivers/net/ethernet/netronome/nfp/nfpcore/nfpcppcore.c in the Netronome Flow Processor NFP driver in the Linux kernel. This flaw allows a manipulation that may lead to a use-after-free issue. Mitigation This flaw can be mitigated by preventing the...

Linux Kernel IPsec nfp_cppcore.c area_cache_get use after free

...

AZL-11136 CVE-2022-3545 affecting package kernel for versions less than 5.15.86.1-1

A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability is the function areacacheget of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfpcppcore.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a...

GSD-2022-1000889 nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac()

nfp: flower: Fix a potential leak in nfptunneladdsharedmac This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.182 by commit...

GSD-2022-1000859 nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac()

nfp: flower: Fix a potential leak in nfptunneladdsharedmac This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

GSD-2022-1000807 nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac()

nfp: flower: Fix a potential leak in nfptunneladdsharedmac This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.26 by commit...

GSD-2022-1000741 nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac()

nfp: flower: Fix a potential leak in nfptunneladdsharedmac This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.12 by commit...

PT-2022-29015

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.12 Description A potential leak was identified in the nfp tunnel add shared mac function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

PT-2022-29133

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.103 Description A potential leak was identified in the nfp tunnel add shared mac function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

PT-2022-29163

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.182 Description A potential leak was identified in the nfp tunnel add shared mac function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

PT-2022-29081

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.26 Description A potential leak was discovered in the nfp tunnel add shared mac function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

malteser-nfp.de Improper Access Control vulnerability OBB-2402782

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-7493

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential leak in the nfp tunnel add shared mac function. The ida simple get function returns an id between 0 and NFP MAX MAC INDEX inclusive, and NFP MAX MAC...

PT-2022-6186

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description The issue is related to the use of memory after it has been freed, which can be exploited to execute arbitrary code. The vulnerability affects the area cache get function in the...

GSD-2021-1002590 nfp: Fix memory leak in nfp_cpp_area_cache_add()

nfp: Fix memory leak in nfpcppareacacheadd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.8 by commit...

GSD-2021-1002426 nfp: Fix memory leak in nfp_cpp_area_cache_add()

nfp: Fix memory leak in nfpcppareacacheadd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.221 by commit...

GSD-2021-1002402 nfp: Fix memory leak in nfp_cpp_area_cache_add()

nfp: Fix memory leak in nfpcppareacacheadd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.258 by commit...

PT-2021-27058

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.8 Description A memory leak issue was discovered in the nfp cpp area cache add function. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to v5.15.8,...

PT-2021-26870

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.258 Description A memory leak issue was discovered in the nfp cpp area cache add function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

PT-2021-26894

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.221 Description A memory leak issue was discovered in the nfp cpp area cache add function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...