3629 matches found
CVE-2024-53140 netlink: terminate outstanding dump on socket close
In the Linux kernel, the following vulnerability has been resolved: netlink: terminate outstanding dump on socket close Netlink supports iterative dumping of data. It provides the families the following ops: - start - optional kicks off the dumping process - dump - actual dump helper, keeps getti...
CVE-2024-53140
In the Linux kernel, the following vulnerability has been resolved: netlink: terminate outstanding dump on socket close Netlink supports iterative dumping of data. It provides the families the following ops: - start - optional kicks off the dumping process - dump - actual dump helper, keeps getti...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a netlink socket failing to properly terminate an ongoing data dump operation upon shutdown, which could...
CVE-2024-53140: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: netlink: terminate outstanding dump on socket close Netlink supports iterative dumping of data. It provides the families the following ops: - start - optional kicks off the dumping process - dump - actual dump helper, keeps getti...
kernel: mptcp: pm: Fix uaf in __timer_delete_sync
A use-after-free flaw was found in the Linux kernel’s Multipath TCP MPTCP subsystem. This flaw allows a local user to crash or potentially escalate their privileges on the system...
PT-2024-35659
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been resolved in the Linux kernel related to netlink, specifically fixing a false positive warning in extack during dumps. The issue arises when the dump starts okay...
SUSE CVE-2024-50304
In the Linux kernel, the following vulnerability has been resolved: ipv4: iptunnel: Fix suspicious RCU usage warning in iptunnelfind The per-netns IP tunnel hash table is protected by the RTNL mutex and iptunnelfind is only called from the control path where the mutex is taken. Add a lockdep...
AZL-53441 CVE-2024-50304 affecting package kernel for versions less than 6.6.76.1-1
In the Linux kernel, the following vulnerability has been resolved: ipv4: iptunnel: Fix suspicious RCU usage warning in iptunnelfind The per-netns IP tunnel hash table is protected by the RTNL mutex and iptunnelfind is only called from the control path where the mutex is taken. Add a lockdep...
kernel: tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
In the Linux kernel, the following vulnerability has been resolved: tipc: Check the bearer type before calling tipcudpnlbeareradd syzbot reported the following general protection fault 1: general protection fault, probably for non-canonical address 0xdffffc0000000010: 0000 1 PREEMPT SMP KASAN...
kernel: Kernel: Denial of Service due to a Netlink subsystem deadlock
A flaw was found in the Linux kernel. A local attacker with low privileges could exploit a timing issue, specifically a potential deadlock in the Netlink communication subsystem. This could cause the system to become unresponsive, leading to a Denial of Service DoS...
kernel: netfilter: nft_set_pipapo: walk over current view on netlink dump
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetpipapo: walk over current view on netlink dump The Linux kernel CVE team has assigned CVE-2024-27017 to this issue. Upstream advisory:...
kernel: dpll: fix possible deadlock during netlink dump operation
A vulnerability was found in the Linux kernel, where an ABBA deadlock condition may be created if multiple CPUs attempt a DPLL netlink dump operation simultaneously. This deadlock could lead to performance issues...
kernel: wireguard: netlink: check for dangling peer via is_dead instead of empty list
A flaw was found in the Linux kernel's WireGuard component. A local user could trigger a use-after-free vulnerability when retrieving configuration data while network peers are concurrently removed. This flaw can lead to a Denial of Service DoS through a kernel crash or potentially enable local...
kernel: wireguard: netlink: access device through ctx instead of peer
A flaw was found in the Linux kernel's WireGuard implementation. When processing Netlink communication messages, the network driver improperly references device data through a peer structure rather than the operation context, potentially triggering a null pointer dereference. A local user could...
kernel: ipv6: sr: fix invalid unregister error path
A flaw was found in the Linux kernel's IPv6 segment routing component. An improper error-handling path fails to unregister network communication interfaces if an initialization step fails under certain kernel configurations. This incomplete cleanup leaves residual state in the kernel, which may...
kernel: af_netlink: Fix shift out of bounds in group mask calculation
In the Linux kernel, the following vulnerability has been resolved: afnetlink: Fix shift out of bounds in group mask calculation When a netlink message is received, netlinkrecvmsg fills in the address of the sender. One of the fields is the 32-bit bitfield nlgroups, which carries the multicast...
SUSE CVE-2019-12984
A NULL pointer dereference vulnerability in the function nfcgenldeactivatetarget in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be triggered by a malicious user-mode program that omits certain NFC attributes, leading to denial of service...
netfilter: nft_set_pipapo: walk over current view on netlink dump
...
Linux kernel netlink DoS
The vulnerability of the netlink component in the Linux operating system’s kernel is related to the use of an uninitialized resource in the netlinkgroupmask function. Exploiting this vulnerability could allow a attacker to cause a service failure...
Linux kernel netlink DoS
The vulnerability of the netlink component in the Linux operating system’s kernel is related to the use of an uninitialized resource in the sizeof function. Exploiting this vulnerability can allow a attacker to cause a service failure...