PT-2022-33026

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.200 Description The issue is related to a signed integer overflow in the l2tp ip6 sendmsg function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-33209

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.320 Description The issue is related to a signed integer overflow in the l2tp ip6 sendmsg function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-33162

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.285 Description The issue is related to a signed integer overflow in the l2tp ip6 sendmsg function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32768

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.49 Description The issue is related to a signed integer overflow in the l2tp ip6 sendmsg function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-32576

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.6 Description The issue is related to a signed integer overflow in the l2tp ip6 sendmsg function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-33103

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.249 Description The issue is related to a signed integer overflow in the l2tp ip6 sendmsg function. This problem has been identified but its actual impact and potential for attack have not been confirmed...

kernel: tcp: fix page frag corruption on page fault

A vulnerability was found in the Linux kernel's TCP subsystem in the tcpsendmsglocked function, which can lead to page fragment corruption during a page fault, which occurs when a TCP stream experiences nested access to the task page fragment due to a page fault while handling memory-mapped...

GSD-2022-1002241 bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full

bpf, sockmap: Fix memleak in tcpbpfsendmsg while sk msg is full This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.189 by commit...

GSD-2022-1002079 bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full

bpf, sockmap: Fix memleak in tcpbpfsendmsg while sk msg is full This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by commit...

GSD-2022-1001208 bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full

bpf, sockmap: Fix memleak in tcpbpfsendmsg while sk msg is full This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

PT-2022-30107

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to a memory leak in the tcp bpf sendmsg function when the socket message is full. This problem was introduced in version v4.20 and is fixed in Linux Kernel version...

PT-2022-29481

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to a memory leak in the tcp bpf sendmsg function when the socket message is full. This problem was introduced in version v4.20 and is fixed in version v5.17.2. The actual...

PT-2022-29791

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to a memory leak in the tcp bpf sendmsg function when the socket message is full. This problem was introduced in version v4.20 and is fixed in version v5.16.19. The actua...

PT-2022-30514

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description A memory leak issue exists in the Linux Kernel, specifically in the tcp bpf sendmsg function when the socket message is full. The actual impact and attack plausibility of this issue have not...

PT-2022-30352

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.20 through 5.10.109 Description A memory leak issue exists in the Linux Kernel, specifically in the tcp bpf sendmsg function when the socket message is full. The actual impact and attack plausibility of this issue have...

PT-2025-8126

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A crash issue has been identified in the Linux kernel related to the mptcp module. The problem occurs when the system is under memory pressure, causing sk wmem schedule to return false,...

PT-2025-8133

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, related to the bpf and sockmap components. The issue occurs when the tcp bpf sendmsg function is running during a tear-down...

PT-2022-38083

Уязвимость функции tcp bpf sendmsg redir модуля net/ipv4/tcp bpf.c ядра операционной системы Linux связана с повторным освобождением памяти. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации...

kernel: tcp: fix page frag corruption on page fault

A vulnerability was found in the Linux kernel's TCP subsystem in the tcpsendmsglocked function, which can lead to page fragment corruption during a page fault, which occurs when a TCP stream experiences nested access to the task page fragment due to a page fault while handling memory-mapped...

GSD-2022-1000506 tcp: take care of mixed splice()/sendmsg(MSG_ZEROCOPY) case

tcp: take care of mixed splice/sendmsgMSGZEROCOPY case This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.10 by commit...