583 matches found
Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Use After Free (CVE-2024-40958)
netns: Make getnetns handle zero refcount net Syzkaller hit a warning: refcountt: addition on 0; use-after-free. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...
Siemens SIMATIC Devices NULL Pointer Dereference (CVE-2025-21640)
In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: cookiehmacalg: avoid using current-nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the...
Siemens SIMATIC Devices Out-of-bounds Write (CVE-2025-21865)
gtp: Suppress list corruption splat in gtpnetexitbatchrtnl. Commit eb28fd76c0a0 gtp: Destroy device along with udp socket's netns dismantle. added the foreachnetdev loop in gtpnetexitbatchrtnl to destroy devices in each netns as done in geneve and ip tunnels. However, this could trigger -dellink...
Linux Distros Unpatched Vulnerability : CVE-2025-40018
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvs: Defer ipvsftp unregister during netns cleanup On the netns cleanup path, ipvsftpexit may unregister ipvsftp before connections with valid cp-app pointers...
ipvs: Defer ip_vs_ftp unregister during netns cleanup
...
EUVD-2025-35832
In the Linux kernel, the following vulnerability has been resolved: ipvs: Defer ipvsftp unregister during netns cleanup On the netns cleanup path, ipvsftpexit may unregister ipvsftp before connections with valid cp-app pointers are flushed, leading to a use-after-free. Fix this by introducing a...
CVE-2025-40018
In the Linux kernel, the following vulnerability has been resolved: ipvs: Defer ipvsftp unregister during netns cleanup On the netns cleanup path, ipvsftpexit may unregister ipvsftp before connections with valid cp-app pointers are flushed, leading to a use-after-free. Fix this by introducing a...
AZL-68769 CVE-2025-40018 affecting package kernel for versions less than 6.6.112.1-2
In the Linux kernel, the following vulnerability has been resolved: ipvs: Defer ipvsftp unregister during netns cleanup On the netns cleanup path, ipvsftpexit may unregister ipvsftp before connections with valid cp-app pointers are flushed, leading to a use-after-free. Fix this by introducing a...
CVE-2025-40018 ipvs: Defer ip_vs_ftp unregister during netns cleanup
In the Linux kernel, the following vulnerability has been resolved: ipvs: Defer ipvsftp unregister during netns cleanup On the netns cleanup path, ipvsftpexit may unregister ipvsftp before connections with valid cp-app pointers are flushed, leading to a use-after-free. Fix this by introducing a...
CVE-2025-40018
CVE-2025-40018 affects the Linux kernel IP Virtual Server (ipvs) code. On netns cleanup, __ip_vs_ftp_exit() may unregister ip_vs_ftp before flushing connections with valid cp->app pointers, causing a use-after-free. The fix introduces a global exiting_module flag, set during ip_vs_ftp_exit() b...
CVE-2025-40018
In the Linux kernel, the following vulnerability has been resolved: ipvs: Defer ipvsftp unregister during netns cleanup On the netns cleanup path, ipvsftpexit may unregister ipvsftp before connections with valid cp-app pointers are flushed, leading to a use-after-free. Fix this by introducing a...
EUVD-2019-11332
Malware in sbrugna...
EUVD-2016-5788
Malware in sbrugna...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986715)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986715 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/ipoib: Fix warning caused by destroying non-initial netns After the commit 5ce2dced8e95...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-380000)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-380000 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: unregister flowtable hooks on netns exit Unregister flowtable hooks before...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-394796)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-394796 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: properly terminate timers for kernel sockets We had various syzbot reports about tcp timers...
EUVD-2023-59883
Malicious code in bioql PyPI...
EUVD-2025-18620
Malicious code in bioql PyPI...