9685 matches found
SUSE-SU-2025:20703-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_3
This update for kernel-livepatch-MICRO-6-0-RTUpdate3 fixes the following issues: - CVE-2025-38087: net/sched: fix use-after-free in tapriodevnotifier bsc1245505 - CVE-2025-21999: proc: fix UAF in procgetinode bsc1242579 - CVE-2025-38001: netsched: hfsc: Address reentrant enqueue adding class to...
kernel: udp: Fix memory accounting leak.
A memory overflow vulnerability exists within the Linux kernel's networking subsystem. Specifically, an application can set the SORCVBUF socket option to its maximum value INTMAX, which triggers an integer overflow within the udprmemrelease function during socket closure. The udpdestructcommon...
CVE-2025-20340
Cisco IOS XR Software contains an ARP processing vulnerability that can be triggered by an unauthenticated, adjacent attacker sending excessive ARP traffic to the management interface, causing a broadcast storm and DoS. Affected behavior includes degraded device performance, loss of management co...
EulerOS 2.0 SP12 : kernel (EulerOS-SA-2025-2012)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : netsched: hfsc: Fix a UAF vulnerability in class with netem as child qdiscCVE-2025-37890 crypto: lzo - Fix compression buffer overrunCVE-2025-3806...
Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-20553)
The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20553 advisory. - netsched: schsfq: move the limit validation Octavian Purdila Orabug: 38377926 CVE-2025-37752 - netsched: schsfq: don't allow 1 packet limit...
Linux Distros Unpatched Vulnerability : CVE-2016-6753
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information disclosure vulnerability in kernel components, including the process-grouping subsystem and the networking subsystem, in Android before 2016-11-0...
NVIDIA Networking Bluefield, ConnectX and Mellanox DPDK - September 2025 - Lenovo Support US
No description provided...
PT-2025-36836
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: A time-of-check time-of-use toctou race condition exists in the Windows TCP/IP stack. This condition allows a locally authorized attacker to elevate privileges. The issue allows attackers t...
Exploit for CVE-2025-54914
Azure-Networking-Privilege-Escalation-Exploit-CVE-2025-54914...
CVE-2025-9998
The sequence of packets received by a Networking server are not correctly checked. An attacker could exploit this vulnerability to send specially crafted messages to force the application to stop...
CVE-2025-54914
Azure Networking Elevation of Privilege Vulnerability...
Linux Distros Unpatched Vulnerability : CVE-2025-38730
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring/net: commit partial buffers on retry Ring provided buffers are potentially only valid within the single execution context in which they were acquired...
CVE-2025-39703 net, hsr: reject HSR frame if skb can't hold tag
In the Linux kernel, the following vulnerability has been resolved: net, hsr: reject HSR frame if skb can't hold tag Receiving HSR frame with insufficient space to hold HSR tag in the skb can result in a crash kernel BUG: 45.390915 skbuff: skbunderpanic: text:ffffffff86f32cac len:26 put:14...
CVE-2025-9999 Improper validation of payload elements
Some payload elements of the messages sent between two stations in a networking architecture are not properly checked on the receiving station allowing an attacker to execute unauthorized commands in the application...
CVE-2025-9998 Improper validation of packets sequencing
The sequence of packets received by a Networking server are not correctly checked. An attacker could exploit this vulnerability to send specially crafted messages to force the application to stop...
SUSE-SU-2025:20653-1 Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-46733: btrfs: fix qgroup reserve leaks in cowfilerange bsc1230708. - CVE-2025-38006: net: mctp: Do not access ifaindex when missing bsc1244930. -...
PT-2025-36256
Name of the Vulnerable Software and Affected Versions affected versions not specified Description Some payload elements of the messages sent between two stations in a networking architecture are not properly checked on the receiving station, potentially allowing an attacker to execute unauthorize...
ROS-20250905-02
A vulnerability in the twisted.web component of the Twisted networking framework is related to inconsistent interpretation of HTTP requests. interpretation of HTTP requests. Exploitation of the vulnerability could allow an attacker acting remotely affect the integrity of protected information as ...
