549 matches found
SUSE CVE-2016-3841
The IPv6 stack in the Linux kernel before 4.3.3 mishandles options data, which allows local users to gain privileges or cause a denial of service use-after-free and system crash via a crafted sendmsg system call...
SUSE CVE-2016-9806
Race condition in the netlinkdump function in net/netlink/afnetlink.c in the Linux kernel before 4.6.3 allows local users to cause a denial of service double free or possibly have unspecified other impact via a crafted application that makes sendmsg system calls, leading to a free operation...
SUSE CVE-2019-8956
In the Linux Kernel before versions 4.20.8 and 4.19.21 a use-after-free error in the "sctpsendmsg" function net/sctp/socket.c when handling SCTPSENDALL flag can be exploited to corrupt memory...
SUSE CVE-2021-3640
A flaw use-after-free in function scosocksendmsg of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIOREGISTER or other way triggers race condition of the call scoconndel together with the call scosocksendmsg with the expected controllable faulting memory page. A privilege...
PT-2025-37659
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where a process waiting for an rxrpc call could be interrupted, leading to subsequent sendmsg calls failing with an EBUSY error until an assignment is...
The vulnerability of the CServer::SendMsg function (engine/server/server.cpp) in the teeworlds operating system for Linux allows a hacker to cause a service failure.
The vulnerability of the CServer::SendMsg function located in engine/server/server.cpp of the teeworlds package on Linux operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
kernel: use-after-free vulnerability in function sco_sock_sendmsg()
A flaw use-after-free in function scosocksendmsg of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIOREGISTER or other way triggers race condition of the call scoconndel together with the call scosocksendmsg with the expected controllable faulting memory page. A privilege...
PT-2022-35542 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.10.141 through 5.10.149 Description: A potential security issue exists due to the handling of zero-sized raw sendmsg in the net/ieee802154 module. The actual impact and attack plausibility have not yet been proven...
PT-2022-35098 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns a potential security vulnerability in the Linux Kernel. It is related to the rejection of zero-sized raw sendmsg in the net/ieee802154 module. The actual impact and attack...
PT-2022-35678
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.4.212 through 5.4.219 Description A potential security issue exists due to the acceptance of zero-sized raw sendmsg in the net/ieee802154 module. The actual impact and attack plausibility have not yet been proven...
PT-2022-35347 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.15.65 through 5.15.74 Description: A potential security issue exists due to the handling of zero-sized raw sendmsg in the net/ieee802154 module. The actual impact and attack plausibility have not yet been proven...
kernel: use-after-free vulnerability in function sco_sock_sendmsg()
A flaw use-after-free in function scosocksendmsg of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIOREGISTER or other way triggers race condition of the call scoconndel together with the call scosocksendmsg with the expected controllable faulting memory page. A privilege...
GSD-2022-1005742 rxrpc: Fix locking in rxrpc's sendmsg
rxrpc: Fix locking in rxrpc's sendmsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...
PT-2022-34000 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.15 through 5.10.139 Description: The issue concerns a locking problem in the rxrpc's sendmsg function. The actual impact and potential for attack have not been proven yet. Recommendations: For Linux Kernel versions 4.1...
GSD-2022-1005442 rxrpc: Fix locking in rxrpc's sendmsg
rxrpc: Fix locking in rxrpc's sendmsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.64 by commit 2bc769b8edb158be7379d15f36e23d66cf85005...
GSD-2022-1005036 rxrpc: Fix locking in rxrpc's sendmsg
rxrpc: Fix locking in rxrpc's sendmsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.6 by commit 091dc91e119fdd61432347231724f4e861c6b465...
PT-2022-33700 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.64 Description: The issue concerns a locking problem in rxrpc's sendmsg. The actual impact and potential for attack have not been proven yet. Recommendations: For Linux Kernel versions prior to v5.15.64,...
PT-2022-33294 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.6 Description: The issue concerns a locking problem in rxrpc's sendmsg. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.19.6, upda...
PT-2022-37871
Уязвимость функций mptcp sendmsg frag и mptcp subflow get send модуля net/mptcp/protocol.c реализации протокола MPTCP ядра операционной системы Linux связана с недостаточной блокировкой ресурса. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность,...
PT-2022-32918
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.124 Description The issue is related to a signed integer overflow in the l2tp ip6 sendmsg function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...