Ella Core Panics Upon NGAP handover failure

Summary Ella Core panics when processing a NGAP handover failure message. Impact If an attacker can force a gNodeB to send NGAP handover failure messages to Ella Core, the process will crash, thereby disrupting service for all connected subscribers. Fix Improve guards in NGAP handover handlers...

PT-2026-29708

Name of the Vulnerable Software and Affected Versions Ella Core versions prior to 1.8.0 Description Ella Core experiences a panic when processing a NGAP handover failure message. An attacker capable of triggering a gNodeB to send NGAP handover failure messages to Ella Core can cause a process...

Linux TTY DoS

The vulnerability of the mxseractivate function in the drivers/tty/mxser.c file of the TTY console support driver in the Linux operating system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a servic...

Linux DMA Driver Heap Buffer Overflow DoS

The vulnerability of the rzn1dmamuxrouteallocate function in the drivers/dma/dw/rzn1-dmamux.c driver of the Linux kernel’s DMA engine is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a remote attacker to cause service...

btrfs_qgroup_check_inherit Heap Buffer Overflow DoS

The vulnerability of the btrfsqgroupcheckinherit function in the fs/btrfs/qgroup.c module of the Linux file system support module is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or cause...

Linux BPF Heap Buffer Overflow DoS

The vulnerability of the btfcheckalltypes function in the kernel/bpf/btf.c module, which is part of the BPF interpreter support for the Linux operating system, relates to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

EROFS Heap Buffer Overflow DoS

The vulnerability of the zerofsgetgbuf function in the fs/erofs/zutil.c module, which is part of the EROFS Enhanced Read-Only File System support in the Linux operating system, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to...

Linux Wireless DoS

The vulnerability of the nl80211parsembssidelems function in the net/wireless/nl80211.c module of the Linux operating system’s wireless communication support is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure...

S390 Linux Heap Buffer Overflow DoS

The vulnerability of the hwperfeventinit function in the arch/s390/kernel/perfcpumsf.c module, which is part of the S390 platform support for the Linux operating system, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to access...

Linux IOMMU Heap Buffer Overflow DoS

The vulnerability of the iommufdfaultalloc function in the drivers/iommu/iommufd/fault.c module of the Linux kernel’s IOMMU support driver is related to incorrect input validation. Exploiting this vulnerability can allow an attacker to cause a service failure...

Atheros/Qualcomm Wireless Adapter Buffer Overflow DoS

The vulnerability of the functions ath11kdprxmondestprocess and ath11kdpfullmonprocessrx in the drivers/net/wireless/ath/ath11k/dprx.c module of the Atheros/Qualcomm wireless adapter support driver for the Linux operating system is related to incorrect initialization. Exploiting this vulnerabilit...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the makeuffdwppte function in the fs/proc/taskmmu.c module of the Linux kernel’s file system support module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Ethernet Network Adapter Driver Buffer Overflow DoS

The vulnerability of the sendlogin and handlequeryipoffloadrsp functions in the drivers/net/ethernet/ibm/ibmvnic.c module of the Ethernet network adapter driver for the Linux operating system lies in the copying of buffers without checking the size of the input data a classic buffer overflow...

Linux BPF Heap Buffer Overflow DoS

The vulnerability of the bpflinkinc function in the kernel/bpf/syscall.c module, which is part of the BPF interpreter support for Linux’s operating system, relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux S390 Block Device Heap Buffer Overflow DoS

The vulnerability of the dasdeckdfreecp function in the drivers/s390/block/dasdeckd.c file of the Linux S390 kernel-based block device support driver involves improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause service failure...

net qrtr Heap Buffer Overflow DoS

The vulnerability of the qrtrendpointpost function in the net/qrtr/afqrtr.c module, which is part of the Qualcomm IPC kernel for Linux operating systems, is related to the use of an uninitialized variable. Exploiting this vulnerability could allow a attacker to cause a service failure...

qla2xxx SCSI Buffer Overflow DoS

The vulnerability of the qla24xxissuesareplaceiocb function in the drivers/scsi/qla2xxx/qlaedif.c module of the SCSI device driver for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel trace Ring Buffer Heap Buffer Overflow DoS

The vulnerability of the rbmapvma function in the kernel/trace/ringbuffer.c module, which supports kernel tracing in Linux operating systems, is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

Tenda i12 Wireless Access Point Code Execution

The vulnerability of the formwrlSSIDget function /goform/wifiSSIDget in the Tenda i12 wireless access point software is caused by a buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

drivers phy qualcomm phy-qcom-qmp Heap Buffer Overflow DoS

The vulnerability of the qcomqmpPhyCreate function in the drivers/phy/qualcomm/phy-qcom-qmp.c file of the Linux kernel PHY support driver relates to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability could allow an attacker to cause a service...