PT-2022-28318

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.224 Description The issue is related to the use of call rcu to free endpoint in sctp. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.14 and fixed in Linu...

PT-2022-28309

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.261 Description The issue is related to the use of call rcu to free endpoint in sctp. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-28345

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.13 Description The issue is related to the use of call rcu to free endpoint in sctp. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

GSD-2021-1002822 inet: fully convert sk->sk_rx_dst to RCU rules

inet: fully convert sk-skrxdst to RCU rules This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.12 by commit...

PT-2021-27290

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.12 Description The issue is related to the conversion of sk-sk rx dst to RCU rules in the inet code. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-8077

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a use-after-free vulnerability in the sctp sock dump function. This vulnerability occurs when the asoc is peeled off and the old sk is freed after getting it by...

UVI-2021-1001716 net: sched: flower: protect fl_walk() with rcu

net: sched: flower: protect flwalk with rcu This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by commit...

UVI-2021-1001644 net: sched: flower: protect fl_walk() with rcu

net: sched: flower: protect flwalk with rcu This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.71 by commit...

GSD-2021-1001644 net: sched: flower: protect fl_walk() with rcu

net: sched: flower: protect flwalk with rcu This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.71 by commit...

PT-2021-30109

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description A potential issue exists in the Linux Kernel, specifically in the flower component of the network scheduler. The problem is related to the protection of the fl walk function with RCU. Althoug...

PT-2021-30058

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.151 Description A potential issue exists in the Linux Kernel, specifically in the flower component of the network scheduler. The problem is related to the protection of the fl walk function with RCU. Althoug...

PT-2021-26114

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description A potential issue exists in the Linux Kernel, specifically in the flower scheduler. The problem is related to the fl walk function, which is not properly protected with RCU. This issue was...

PT-2021-30181

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.10 Description A potential issue exists in the Linux Kernel, specifically in the flower scheduler. The problem is related to the fl walk function, which is not properly protected with RCU. This issue was...

PT-2021-26186

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.10 Description: A potential issue exists in the Linux Kernel, specifically in the flower component of the network scheduler. The problem is related to the protection of the fl walk function with RCU. The...

PT-2021-26063

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.151 Description A potential issue exists in the Linux Kernel, specifically in the flower component of the network scheduler. The problem is related to the protection of the fl walk function with rcu. The...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

PT-2024-11443

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel has a vulnerability that can cause an infinite loop in the recvmsg function if the caller provides the MSG WAITALL flag, the data present in the receive queue is not...

CVE-2020-36451

An issue was discovered in the rcucell crate through 2020-11-14 for Rust. There are unconditional implementations of Send and Sync for RcuCell...

Rust 命令注入漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. Mozilla Rust is vulnerable to a command injection vulnerability that originates from rcucell crate in Rust. For RcuCell there is an unconditional send and sync implementation, which can be exploited by an attack...

PT-2024-11317 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a use-after-free vulnerability in the arch topology component of the Linux kernel. The topology scale freq tick function, which is called from scheduler tick, m...