CVE-2021-30335

CVE-2021-30335 describes a logic issue in Qualcomm’s Snapdragon family where an assertion may occur in QOS handling due to improper validation when multiple add/update requests arrive concurrently. The vulnerability is reported against Qualcomm Snapdragon Auto/Compute/Connectivity/IoT/Industrial ...

CVE-2021-30335: Reachable Assertion

Possible assertion in QOS request due to improper validation when multiple add or update request are received simultaneously in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

PT-2022-9998

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions affected versions not specified Description The issue is related to a possible assertion in QOS request due to improper validation when multiple add or update requests are received simultaneously. This affects...

GSD-2021-1002735 mac80211: track only QoS data frames for admission control

mac80211: track only QoS data frames for admission control This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...

GSD-2021-1002692 mac80211: track only QoS data frames for admission control

mac80211: track only QoS data frames for admission control This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...

GSD-2021-1002670 mac80211: track only QoS data frames for admission control

mac80211: track only QoS data frames for admission control This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.168 by commit...

GSD-2021-1002647 mac80211: track only QoS data frames for admission control

mac80211: track only QoS data frames for admission control This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.222 by commit...

PT-2021-27138

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.168 Description The issue is related to the mac80211 component, specifically with tracking QoS data frames for admission control. The actual impact and attack plausibility have not yet been proven...

PT-2021-27203

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.11 Description The issue is related to the mac80211 component, which tracks QoS data frames for admission control. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2021-27160

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.88 Description The issue is related to the mac80211 component, specifically with tracking QoS data frames for admission control. The actual impact and attack plausibility have not yet been proven...

PT-2021-27115

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.222 Description The issue is related to the mac80211 component, specifically with tracking QoS data frames for admission control. The actual impact and attack plausibility have not yet been proven...

PT-2021-26170

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.14.11 Description: The issue is related to a potential security vulnerability in the Linux Kernel. It involves not calling rq qos ops-done bio if the bio isn't tracked. The actual impact and attack plausibilit...

PT-2021-30165

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.14.11 Description The issue is related to a potential security vulnerability in the Linux Kernel, where the rq qos ops-done bio function is called even if the bio isn't tracked. The actual impact and attack...

PT-2024-11408

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the block layer in the Linux kernel, where the rq qos ops-done bio function is called even when the bio isn't tracked. This can lead to a potential kernel panic...

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 13.0 (openstack-neutron) security update

An update for openstack-neutron is now available for Red Hat OpenStack Platform 13 Queens. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 16.1 (openstack-neutron) security update

An update for openstack-neutron is now available for Red Hat OpenStack Platform 16.1 Train. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2020-24588

The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames which is mandatory as part of 802.11...

CVE-2020-24588

The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames which is mandatory as part of 802.11...

CVE-2021-27705

Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.179502CN allows remote attackers to execute arbitrary code via a crafted action/"qosIndex "request. This occurs because the "formQOSRuleDel" function directly passes the parameter "qosIndex" to strcpy without limit...

CVE-2021-27705

Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.179502CN allows remote attackers to execute arbitrary code via a crafted action/"qosIndex "request. This occurs because the "formQOSRuleDel" function directly passes the parameter "qosIndex" to strcpy without limit...