129 matches found
GSD-2022-1004869 xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue
xen/netback: avoid entering xenvifrxnextskb with an empty rx queue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.289 by commit...
GSD-2022-1004417 xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue
xen/netback: avoid entering xenvifrxnextskb with an empty rx queue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.56 by commit...
PT-2022-33131
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.289 Description The issue is related to the xen/netback component, specifically with the function xenvif rx next skb, which can be entered with an empty rx queue. The actual impact and attack plausibility...
PT-2022-32463
Name of the Vulnerable Software and Affected Versions xen/netback versions prior to v5.18.13 Description The issue is related to the xen/netback component, where it may enter the xenvif rx next skb function with an empty rx queue. The actual impact and attack plausibility have not yet been proven...
PT-2022-32974
Name of the Vulnerable Software and Affected Versions xen/netback versions prior to v5.4.207 Linux Kernel versions v4.9 through v5.4.206 Description The issue is related to the xen/netback component, specifically with the function xenvif rx next skb. It is possible to enter this function with an...
PT-2022-33063
Name of the Vulnerable Software and Affected Versions xen/netback versions prior to v4.19.253 Description The issue is related to the xen/netback component, where it may enter the xenvif rx next skb function with an empty rx queue. The actual impact and attack plausibility have not yet been prove...
PT-2022-33182
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.324 Description The issue is related to the xen/netback component, specifically with the function xenvif rx next skb, which can be entered with an empty rx queue. The actual impact and attack plausibility ha...
PT-2022-32849
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.132 Description The issue is related to the xen/netback component, specifically with the function xenvif rx next skb, which can be entered with an empty rx queue. The actual impact and attack plausibility...
CVE-2021-28715
Guest can force Linux netback driver to hog large amounts of kernel memory This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Incoming data packets for a guest in the Linux kernel's netback driver are buffered until the...
Design/Logic Flaw
Guest can force Linux netback driver to hog large amounts of kernel memory This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Incoming data packets for a guest in the Linux kernel's netback driver are buffered until the...
CVE-2021-28715
Guest can force Linux netback driver to hog large amounts of kernel memory This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Incoming data packets for a guest in the Linux kernel's netback driver are buffered until the...
CVE-2021-28714
Guest can force Linux netback driver to hog large amounts of kernel memory This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Incoming data packets for a guest in the Linux kernel's netback driver are buffered until the...
CVE-2021-28714
Guest can force Linux netback driver to hog large amounts of kernel memory This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Incoming data packets for a guest in the Linux kernel's netback driver are buffered until the...
CVE-2021-28714: Allocation of Resources Without Limits or Throttling
Guest can force Linux netback driver to hog large amounts of kernel memory This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Incoming data packets for a guest in the Linux kernel's netback driver are buffered until the...
CVE-2021-28715: Allocation of Resources Without Limits or Throttling
Guest can force Linux netback driver to hog large amounts of kernel memory This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Incoming data packets for a guest in the Linux kernel's netback driver are buffered until the...
An issue was discovered in the Linux kernel through 5.11.10. drivers/net/ethernet/freescale/gianfar.c in the Freescale Gianfar Ethernet driver allows attackers to cause a system crash because a negative fragment size is calculated in situations involving an rx queue overrun when jumbo packets are used and NAPI is enabled aka CID-d8861bab48b6.
...
DEBIAN-CVE-2021-29264
An issue was discovered in the Linux kernel through 5.11.10. drivers/net/ethernet/freescale/gianfar.c in the Freescale Gianfar Ethernet driver allows attackers to cause a system crash because a negative fragment size is calculated in situations involving an rx queue overrun when jumbo packets are...
CVE-2021-29264
An issue was discovered in the Linux kernel through 5.11.10. drivers/net/ethernet/freescale/gianfar.c in the Freescale Gianfar Ethernet driver allows attackers to cause a system crash because a negative fragment size is calculated in situations involving an rx queue overrun when jumbo packets are...
UBUNTU-CVE-2021-29264
An issue was discovered in the Linux kernel through 5.11.10. drivers/net/ethernet/freescale/gianfar.c in the Freescale Gianfar Ethernet driver allows attackers to cause a system crash because a negative fragment size is calculated in situations involving an rx queue overrun when jumbo packets are...
CVE-2021-29264
An issue was discovered in the Linux kernel through 5.11.10. drivers/net/ethernet/freescale/gianfar.c in the Freescale Gianfar Ethernet driver allows attackers to cause a system crash because a negative fragment size is calculated in situations involving an rx queue overrun when jumbo packets are...