CVE-2025-50159: Use After Free

Use after free in Remote Access Point-to-Point Protocol PPP EAP-TLS allows an authorized attacker to elevate privileges locally...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the PPPoE protocol processing not taking into account Ethernet headers, which could lead to uninitialized...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net: ppp: Added bound checking for skb data in pppsynctxmung. This ensures that we have enough data in the linear buffer from the skb before accessing the initial bytes. This prevents potential out-of-bounds accesses when...

The vulnerability of the formSetPPTPUserList() function (/goform/setPptpUserList) in the Tenda AC6 router software allows a hacker to trigger a service failure.

The vulnerability of the formSetPPTPUserList function /goform/setPptpUserList of the Tenda AC6 router’s microprogramming software is related to the copying of buffers without checking the size of the input data when processing the list parameter. Exploiting this vulnerability could allow an...

CVE-2001-1565

Point to Point Protocol daemon pppd in MacOS x 10.0 and 10.1 through 10.1.5 provides the username and password on the command line, which allows local users to obtain authentication information via the ps command...

kernel: net: ppp: Add bound checking for skb data on ppp_sync_txmung

An out-of-bounds read vulnerability exists in the pppsynctxmunge function in the Linux kernel's PPP subsystem. Insufficient bounds checking on incoming PPP packets may lead to a kernel crash if a packet with an empty or truncated payload is processed...

kernel: ppp: fix ppp_async_encode() illegal access

A flaw was found in the Linux kernel's Point-to-Point Protocol PPP implementation. A local attacker can exploit this vulnerability by sending a specially crafted message with a zero size to the pppoesendmsg function, which leads to an uninitialized value being used in the pppasyncencode function...

ROS-2-643

2.643 Vulnerability in PPPD CVE-2020-8597 1. Vulnerability Description: The issue CVE-2020-8597 is a stack buffer overflow vulnerability resulting from a logic error in the EAP Extensible Authentication Protocol packet parser in PPPD eaprequest and eapresponse functions in eap.c. The vulnerabilit...

OESA-2025-1479 ppp security update

The Point-to-Point Protocol PPP provides a standard way to establish a network connection over a serial link. At present, this package supports IP and IPV6 and the protocols layered above them, such as TCP and UDP. The Linux port of this package also has support for IPX. Security Fixes: The...

ppp: Fix KMSAN uninit-value warning with bpf

...

DEBIAN-CVE-2025-37749

In the Linux kernel, the following vulnerability has been resolved: net: ppp: Add bound checking for skb data on pppsynctxmung Ensure we have enough data in linear buffer from skb before accessing initial bytes. This prevents potential out-of-bounds accesses when processing short packets. When...

UBUNTU-CVE-2025-37749

In the Linux kernel, the following vulnerability has been resolved: net: ppp: Add bound checking for skb data on pppsynctxmung Ensure we have enough data in linear buffer from skb before accessing initial bytes. This prevents potential out-of-bounds accesses when processing short packets. When...

The vulnerability of the bpf_program() function in the Linux kernel’s drivers/net/ppp/ppp_generic.c file allows a hacker to cause a service failure.

The vulnerability of the bpfprogram function in the Linux kernel’s drivers/net/ppp/pppgeneric.c file is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

DEBIAN-CVE-2025-21922

In the Linux kernel, the following vulnerability has been resolved: ppp: Fix KMSAN uninit-value warning with bpf Syzbot caught an "KMSAN: uninit-value" warning 1, which is caused by the ppp driver not initializing a 2-byte header when using socket filter. The following code can generate a PPP...

UBUNTU-CVE-2025-21922

In the Linux kernel, the following vulnerability has been resolved: ppp: Fix KMSAN uninit-value warning with bpf Syzbot caught an "KMSAN: uninit-value" warning 1, which is caused by the ppp driver not initializing a 2-byte header when using socket filter. The following code can generate a PPP...

PT-2025-6381 · Mercury · Mercury Mipc552W Camera

Name of the Vulnerable Software and Affected Versions: Mercury MIPC552W Camera version 1.0 Description: The issue is related to a buffer overflow vulnerability due to the lack of length verification, which is connected to the configuration of the PPTP server. Attackers who successfully exploit th...

The vulnerability of the ppp_read() and ppp_write() functions (drivers/net/ppp/ppp_generic.c) in the Linux operating system’s PPP kernel driver allows a hacker to cause a service failure.

The vulnerability of the pppread and pppwrite functions drivers/net/ppp/pppgeneric.c in the Linux kernel-based PPP driver is related to insufficient input data validation. Exploiting this vulnerability could allow an attacker to cause a service failure...

ppp: do not assume bh is held in ppp_channel_bridge_input()

...

CLSA-2024-1733158910 kernel: Fix of 6 CVEs

hwmon: ibmpex Fix possible UAF when ibmpexregisterbmc fails CVE-2022-49029 - ppp: fix pppasyncencode illegal access CVE-2024-50035 - ext4: no need to continue when the number of entries is 1 CVE-2024-49967 - net/packet: fix slab-out-of-bounds access in packetrecvmsg CVE-2022-20368 - packet: in...

The vulnerability in the wiz_pptp.cgi script of the Netgear R8500, XR300, R7000P, and R6400 v2 router software allows a hacker to cause a service failure.

The vulnerability in the wizpptp.cgi script of Netgear router microprogramming devices such as R8500, XR300, R7000P, and R6400 v2 lies in the copying of buffers without checking the size of the input data during the processing of the pptpuserip parameter. Exploiting this vulnerability allows a...