6163 matches found
Ella Core code issue vulnerabilities
Ella Core is an open-source solution developed by Ella Networks for use in private networks as a 5G core network solution. Versions of Ella Core prior to 1.8.0 contained code vulnerabilities. These vulnerabilities stemmed from kernel crashes that occurred when processing messages indicating faile...
PT-2026-29899
Name of the Vulnerable Software and Affected Versions Hirschmann Industrial IT products BAT-R, BAT-F, BAT450-F, BAT867-R, BAT867-F, WLC, BAT Controller Virtual Description Hirschmann Industrial IT products are susceptible to a heap overflow in the HiLCOS web interface. Unauthenticated remote...
CVE-2026-34761: NULL Pointer Dereference
Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure message. An attacker able to cause a gNodeB to send NGAP handover failure messages to Ella Core can crash the process, causing service disruption for all connecte...
Ella Core Panics Upon NGAP handover failure
Summary Ella Core panics when processing a NGAP handover failure message. Impact If an attacker can force a gNodeB to send NGAP handover failure messages to Ella Core, the process will crash, thereby disrupting service for all connected subscribers. Fix Improve guards in NGAP handover handlers...
GHSA-6GM8-3G4H-W82M Ella Core Panics Upon NGAP handover failure
Summary Ella Core panics when processing a NGAP handover failure message. Impact If an attacker can force a gNodeB to send NGAP handover failure messages to Ella Core, the process will crash, thereby disrupting service for all connected subscribers. Fix Improve guards in NGAP handover handlers...
Atheros/Qualcomm Wireless Adapter Buffer Overflow DoS
The vulnerability of the functions ath11kdprxmondestprocess and ath11kdpfullmonprocessrx in the drivers/net/wireless/ath/ath11k/dprx.c module of the Atheros/Qualcomm wireless adapter support driver for the Linux operating system is related to incorrect initialization. Exploiting this vulnerabilit...
PT-2026-29708
Name of the Vulnerable Software and Affected Versions Ella Core versions prior to 1.8.0 Description Ella Core experiences a panic when processing a NGAP handover failure message. An attacker capable of triggering a gNodeB to send NGAP handover failure messages to Ella Core can cause a process...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the makeuffdwppte function in the fs/proc/taskmmu.c module of the Linux kernel’s file system support module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
net qrtr Heap Buffer Overflow DoS
The vulnerability of the qrtrendpointpost function in the net/qrtr/afqrtr.c module, which is part of the Qualcomm IPC kernel for Linux operating systems, is related to the use of an uninitialized variable. Exploiting this vulnerability could allow a attacker to cause a service failure...
Linux DMA Driver Heap Buffer Overflow DoS
The vulnerability of the rzn1dmamuxrouteallocate function in the drivers/dma/dw/rzn1-dmamux.c driver of the Linux kernel’s DMA engine is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a remote attacker to cause service...
Linux TTY DoS
The vulnerability of the mxseractivate function in the drivers/tty/mxser.c file of the TTY console support driver in the Linux operating system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a servic...
Linux BPF Heap Buffer Overflow DoS
The vulnerability of the bpflinkinc function in the kernel/bpf/syscall.c module, which is part of the BPF interpreter support for Linux’s operating system, relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux S390 Block Device Heap Buffer Overflow DoS
The vulnerability of the dasdeckdfreecp function in the drivers/s390/block/dasdeckd.c file of the Linux S390 kernel-based block device support driver involves improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause service failure...
Linux IOMMU Heap Buffer Overflow DoS
The vulnerability of the iommufdfaultalloc function in the drivers/iommu/iommufd/fault.c module of the Linux kernel’s IOMMU support driver is related to incorrect input validation. Exploiting this vulnerability can allow an attacker to cause a service failure...
EROFS Heap Buffer Overflow DoS
The vulnerability of the zerofsgetgbuf function in the fs/erofs/zutil.c module, which is part of the EROFS Enhanced Read-Only File System support in the Linux operating system, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to...
qla2xxx SCSI Buffer Overflow DoS
The vulnerability of the qla24xxissuesareplaceiocb function in the drivers/scsi/qla2xxx/qlaedif.c module of the SCSI device driver for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
btrfs_qgroup_check_inherit Heap Buffer Overflow DoS
The vulnerability of the btrfsqgroupcheckinherit function in the fs/btrfs/qgroup.c module of the Linux file system support module is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or cause...
Linux BPF Heap Buffer Overflow DoS
The vulnerability of the btfcheckalltypes function in the kernel/bpf/btf.c module, which is part of the BPF interpreter support for the Linux operating system, relates to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux Ethernet Network Adapter Driver Buffer Overflow DoS
The vulnerability of the sendlogin and handlequeryipoffloadrsp functions in the drivers/net/ethernet/ibm/ibmvnic.c module of the Ethernet network adapter driver for the Linux operating system lies in the copying of buffers without checking the size of the input data a classic buffer overflow...
Linux Wireless DoS
The vulnerability of the nl80211parsembssidelems function in the net/wireless/nl80211.c module of the Linux operating system’s wireless communication support is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure...