Lucene search
+L

524 matches found

SUSE CVE
SUSE CVE
added 2025/02/28 2:22 a.m.11 views

SUSE CVE-2025-21711

In the Linux kernel, the following vulnerability has been resolved: net/rose: prevent integer overflows in rosesetsockopt In case of possible unpredictably large arguments passed to rosesetsockopt and multiplied by extra values on top of that, integer overflows may occur. Do the safest minimum an...

6.6CVSS7.8AI score0.00224EPSS
SaveExploits0References13
OSV
OSV
added 2025/02/27 8:16 p.m.13 views

DEBIAN-CVE-2025-21812

In the Linux kernel, the following vulnerability has been resolved: ax25: rcu protect dev-ax25ptr syzbot found a lockdep issue 1. We should remove ax25 RTNL dependency in ax25setsockopt This should also fix a variety of possible UAF in ax25. 1 WARNING: possible circular locking dependency detecte...

7.8CVSS6.2AI score0.00227EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/27 8:16 p.m.37 views

UBUNTU-CVE-2025-21812

In the Linux kernel, the following vulnerability has been resolved: ax25: rcu protect dev-ax25ptr syzbot found a lockdep issue 1. We should remove ax25 RTNL dependency in ax25setsockopt This should also fix a variety of possible UAF in ax25. 1 WARNING: possible circular locking dependency detecte...

7.8CVSS6.5AI score0.00227EPSS
SaveExploits0References20
SUSE CVE
SUSE CVE
added 2025/02/27 3:06 a.m.7 views

SUSE CVE-2022-49456

In the Linux kernel, the following vulnerability has been resolved: bonding: fix missed rcu protection When removing the rcureadlock in bondethtoolgettsinfo as discussed 1, I didn't notice it could be called via setsockopt, which doesn't hold rcu lock, as syzbot pointed: stack backtrace: CPU: 0...

7.8CVSS6.5AI score0.00272EPSS
SaveExploits0References3
OSV
OSV
added 2025/02/27 2:15 a.m.13 views

AZL-58005 CVE-2025-21711 affecting package kernel for versions less than 5.15.179.1-1

In the Linux kernel, the following vulnerability has been resolved: net/rose: prevent integer overflows in rosesetsockopt In case of possible unpredictably large arguments passed to rosesetsockopt and multiplied by extra values on top of that, integer overflows may occur. Do the safest minimum an...

5.5CVSS6.7AI score0.00224EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/27 2:15 a.m.6 views

DEBIAN-CVE-2025-21711

In the Linux kernel, the following vulnerability has been resolved: net/rose: prevent integer overflows in rosesetsockopt In case of possible unpredictably large arguments passed to rosesetsockopt and multiplied by extra values on top of that, integer overflows may occur. Do the safest minimum an...

5.5CVSS5.7AI score0.00224EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/27 2:15 a.m.24 views

UBUNTU-CVE-2025-21711

In the Linux kernel, the following vulnerability has been resolved: net/rose: prevent integer overflows in rosesetsockopt In case of possible unpredictably large arguments passed to rosesetsockopt and multiplied by extra values on top of that, integer overflows may occur. Do the safest minimum an...

5.5CVSS6.2AI score0.00224EPSS
SaveExploits0References34
CNNVD
CNNVD
added 2025/02/27 12:00 a.m.8 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a rosesetsockopt integer overflow...

5.5CVSS6.6AI score0.00224EPSS
SaveExploits0References7
NVD
NVD
added 2025/02/26 7:01 a.m.32 views

CVE-2022-49456

In the Linux kernel, the following vulnerability has been resolved: bonding: fix missed rcu protection When removing the rcureadlock in bondethtoolgettsinfo as discussed 1, I didn't notice it could be called via setsockopt, which doesn't hold rcu lock, as syzbot pointed: stack backtrace: CPU: 0...

7.8CVSS0.00272EPSS
SaveExploits0References3
OSV
OSV
added 2025/02/26 7:01 a.m.8 views

DEBIAN-CVE-2022-49456

In the Linux kernel, the following vulnerability has been resolved: bonding: fix missed rcu protection When removing the rcureadlock in bondethtoolgettsinfo as discussed 1, I didn't notice it could be called via setsockopt, which doesn't hold rcu lock, as syzbot pointed: stack backtrace: CPU: 0...

5.5CVSS5.5AI score0.00272EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/26 7:01 a.m.50 views

UBUNTU-CVE-2022-49456

In the Linux kernel, the following vulnerability has been resolved: bonding: fix missed rcu protection When removing the rcureadlock in bondethtoolgettsinfo as discussed 1, I didn't notice it could be called via setsockopt, which doesn't hold rcu lock, as syzbot pointed: stack backtrace: CPU: 0...

7.8CVSS5.7AI score0.00272EPSS
SaveExploits0References6
OSV
OSV
added 2025/02/26 2:13 a.m.25 views

CVE-2022-49456 bonding: fix missed rcu protection

In the Linux kernel, the following vulnerability has been resolved: bonding: fix missed rcu protection When removing the rcureadlock in bondethtoolgettsinfo as discussed 1, I didn't notice it could be called via setsockopt, which doesn't hold rcu lock, as syzbot pointed: stack backtrace: CPU: 0...

7.8CVSS5AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/02/26 12:00 a.m.13 views

PT-2025-8390 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.18.0-rc5-syzkaller-01392-g01f4685797a5 Description: A vulnerability in the Linux kernel has been resolved. The issue was related to the removal of the rcu read lock in the bond ethtool get ts info function,...

6.5AI score0.00272EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2025/01/03 12:00 a.m.27 views

PT-2025-9003

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.13.0-rc3 Description A potential issue has been identified in the Linux kernel related to the ax25 protocol. The problem arises from a possible circular locking dependency detected between rtnl mutex and sk...

7.8CVSS7.1AI score0.00227EPSS
SaveExploits0
Amazon
Amazon
added 2024/09/18 12:00 a.m.8 views

Important: kernel

Issue Overview: A vulnerability, which was classified as problematic, was found in Linux Kernel. This affects the function tcpgetsockopt/tcpsetsockopt of the component TCP Handler. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. The identifier...

7.8CVSS6.5AI score0.00731EPSS
SaveExploits0
Amazon
Amazon
added 2024/09/18 12:00 a.m.8 views

Important: kernel

Issue Overview: A vulnerability, which was classified as problematic, was found in Linux Kernel. This affects the function tcpgetsockopt/tcpsetsockopt of the component TCP Handler. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. The identifier...

7.8CVSS6.2AI score0.00757EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/09/13 12:00 a.m.17 views

The vulnerability of the smc_setsockopt function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the smcsetsockopt function in the Linux operating system’s kernel is related to the assignment of a null pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.00221EPSS
SaveExploits0References12Affected Software2
OSV
OSV
added 2024/08/29 11:15 a.m.37 views

CVE-2021-4442

In the Linux kernel, the following vulnerability has been resolved: tcp: add sanity tests to TCPQUEUESEQ Qingyu Li reported a syzkaller bug where the repro changes RCV SEQ after restoring data in the receive queue. mprotect0x4aa000, 12288, PROTREAD = 0 mmap0x1ffff000, 4096, PROTNONE,...

5.5CVSS6.6AI score
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2024/08/29 11:15 a.m.35 views

CVE-2021-4442

In the Linux kernel, the following vulnerability has been resolved: tcp: add sanity tests to TCPQUEUESEQ Qingyu Li reported a syzkaller bug where the repro changes RCV SEQ after restoring data in the receive queue. mprotect0x4aa000, 12288, PROTREAD = 0 mmap0x1ffff000, 4096, PROTNONE,...

5.5CVSS6.4AI score0.00393EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
added 2024/08/29 9:05 a.m.21 views

CVE-2021-4442 tcp: add sanity tests to TCP_QUEUE_SEQ

In the Linux kernel, the following vulnerability has been resolved: tcp: add sanity tests to TCPQUEUESEQ Qingyu Li reported a syzkaller bug where the repro changes RCV SEQ after restoring data in the receive queue. mprotect0x4aa000, 12288, PROTREAD = 0 mmap0x1ffff000, 4096, PROTNONE,...

7AI score0.00393EPSS
SaveExploits1References5
Rows per page
Query Builder