CVE-2025-21676 net: fec: handle page_pool_dev_alloc_pages error

In the Linux kernel, the following vulnerability has been resolved: net: fec: handle pagepooldevallocpages error The fecenetupdatecbd function calls pagepooldevallocpages but did not handle the case when it returned NULL. There was a WARNON!newpage but it would still proceed to use the NULL point...

CVE-2025-21669

CVE-2025-21669 concerns the Linux kernel’s vsock/virtio transport: when a socket is de-assigned or reassigned to another transport, incoming packets must be discarded to avoid accessing vsk->transport in an inconsistent state. The advisory notes a scenario where a connect() interrupted by a si...

CVE-2025-21669 vsock/virtio: discard packets if the transport changes

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: discard packets if the transport changes If the socket has been de-assigned or assigned to another transport, we must discard any packets received because they are not expected and would cause issues when we access...

CVE-2025-21669 vsock/virtio: discard packets if the transport changes

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: discard packets if the transport changes If the socket has been de-assigned or assigned to another transport, we must discard any packets received because they are not expected and would cause issues when we access...

CVE-2025-21669 vsock/virtio: discard packets if the transport changes

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: discard packets if the transport changes If the socket has been de-assigned or assigned to another transport, we must discard any packets received because they are not expected and would cause issues when we access...

CVE-2025-21669

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: discard packets if the transport changes If the socket has been de-assigned or assigned to another transport, we must discard any packets received because they are not expected and would cause issues when we access...

The vulnerability of the read_hexstring() function in the tcprewrite editor for editing and replaying PCAP files, allows a hacker to cause a service failure.

The vulnerability of the readhexstring function in the tcprewrite tool for editing and replaying PCAP files involves pointer manipulation. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of the parse_list() function in the tcpprep editor for processing PCAP files, as well as in the Tcpreplay tool for editing and replaying PCAP files, allows a hacker to cause a service failure.

The vulnerability of the parselist function in the tcpprep editing and playback PCAP file utility lies in pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Linux kernel 输入验证错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a buffer overflow vulnerability that originates from a boundary checking error in the imixentries array in the getimixentries function of pktgen, whic...

bpf: fix recursive lock when verdict program return SK_PASS

...

bpf, sockmap: Several fixes to bpf_msg_pop_data

...

bpf: Check validity of link->type in bpf_link_show_fdinfo()

...

macsec: Fix use-after-free while sending the offloading packet

...

bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx

...

bpf: Fix overloading of MEM_UNINIT's meaning

...

CVE-2024-6351 Malformed packet leads to denial of service in NWK/APS layer

A malformed packet can cause a buffer overflow in the NWK/APS layer of the Ember ZNet stack and lead to an assert...

CVE-2024-6351

CVE-2024-6351 concerns a buffer overflow in the Ember ZNet NWK/APS layer caused by a malformed packet, potentially leading to a denial of service via an assertion. Affected component: Ember ZNet stack’s NWK/APS processing. Root cause: malformed incoming packet; no exploitation details are provide...

Open5GS 安全漏洞

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS has a security vulnerability that can be exploited by attackers to cause a denial of service...

Silicon Simplicity SDK 安全漏洞

Silicon Simplicity SDK is an embedded software development platform from Silicon, Inc. for building IoT products based on our Series 2 and upcoming Series 3 wireless and MCU devices. A security vulnerability exists in the Silicon Simplicity SDK that stems from a misformatted packet that could cau...

PT-2025-3681 · Ember · Ember Znet Stack

Name of the Vulnerable Software and Affected Versions: Ember ZNet stack affected versions not specified Description: A malformed packet can cause a buffer overflow in the NWK/APS layer of the Ember ZNet stack and lead to an assert. Recommendations: At the moment, there is no information about a...