PT-2022-34184 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.212 Description: The issue is related to the bpf component, which does not correctly handle packets with invalid pkt len. This could potentially lead to security vulnerabilities, although the actual impact...

GSD-2022-1005412 bpf: Don't redirect packets with invalid pkt_len

bpf: Don't redirect packets with invalid pktlen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.65 by commit...

PT-2022-33670 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.65 Description: The issue concerns packets with invalid pkt len. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.15.65, update to...

CVE-2022-25635

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for broadcast network packet length. An unauthenticated attacker in the adjacent network can exploit this vulnerability to disrupt service...

CVE-2022-25635 Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for broadcast network packet length. An unauthenticated attacker in the adjacent network can exploit this vulnerability to disrupt service...

CVE-2022-25635

The CVE-2022-25635 entry concerns Realtek Linux/Android Bluetooth Mesh SDK. Affected component: the Bluetooth Mesh SDK (Realtek) with a buffer overflow caused by insufficient validation of broadcast network packet length. According to sources, an unauthenticated attacker in an adjacent network ca...

Realtek Linux/Android Bluetooth Mesh SDK 安全漏洞

Realtek Linux/Android Bluetooth Mesh SDK is a Bluetooth mesh networking software development kit from Realtek Semiconductor China. A security vulnerability exists in previous versions of the Realtek Linux/Android Bluetooth Mesh SDK v4.18-4.18-20220218, which stems from insufficient authentication...

PT-2025-25901

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been identified in the Linux kernel where the bpf prog test run skb function runs a bpf program that redirects empty skbs, causing the fq codel drop function to attem...

Global overflow in pppdump leads to RCE

Global overflow vulnerability in pppdump A global overflow vulnerability is present in the pppdump utility of the ppp repo which may lead to code execution. Specifically when the -p flag is given for enabling the pppmodeon the pppdump command, a malicious crafted pppdump file can trigger a global...

Unbreakable Enterprise kernel security update

4.14.35-2047.512.6 - Revert 'rds/ib: recover rds connection from stuck rx path' Rohit Nair Orabug: 34039271 - uek-rpm: update kABI lists for new symbols Saeed Mirzamohammadi Orabug: 33993774 4.14.35-2047.512.5 - netfilter: nftables: initialize registers in nftdochain Pablo Neira Ayuso Orabug:...

Buffer Overflow

FRRouting/frr is vulnerable to Buffer overflows. The vulnerability exists due to wrong checks within the input packet length in isisd/isistlvs.c. This could allow an attacker to perform arbitrary out of bound writes...

GSD-2022-1000953 sr9700: sanity check for packet length

sr9700: sanity check for packet length This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.304 by commit...

GSD-2022-1000892 sr9700: sanity check for packet length

sr9700: sanity check for packet length This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.182 by commit...

GSD-2022-1000866 sr9700: sanity check for packet length

sr9700: sanity check for packet length This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

GSD-2022-1000751 sr9700: sanity check for packet length

sr9700: sanity check for packet length This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.12 by commit...

PT-2022-29187

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.232 Description A potential security issue has been identified in the Linux Kernel, related to a sanity check for packet length. The actual impact and attack plausibility have not yet been proven...

PT-2022-29166

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.182 Description A potential security issue has been identified in the Linux Kernel, related to a sanity check for packet length. The actual impact and attack plausibility have not yet been proven...

PT-2022-29227

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.304 Description A potential security issue has been identified in the Linux Kernel, related to a sanity check for packet length. The actual impact and attack plausibility have not yet been proven...

PT-2022-29025

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.12 Description A potential security issue exists due to a sanity check for packet length. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

PT-2022-29091

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.26 Description A potential security issue exists due to a sanity check for packet length. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...