CVE-2022-49523

CVE-2022-49523 affects the Linux kernel component ath11k, specifically the spectral scan path during spectral_deinit. The issue arises when ath11k modules are removed (rmmod) with spectral scan enabled, which can trigger a crash (kernel NULL pointer dereference) as shown by the provided call trac...

CVE-2022-49504

The CVE-2022-49504 issue affects the Linux kernel SCSI lpfc path, where after an external loopback test the system oopsed in llpfc_set_rrq_active() due to a mismanaged ABTS completion and ref counting. The root cause was a mixup in completing the new FLOGI/ABTS flow, causing the original ABTS to ...

CVE-2022-49418

The CVE-2022-49418 entry concerns a Linux kernel NFSv4 crash during referral lookup caused by using an uninitialized nfs4_label. The fix, as described in the provided documents, sends along the already-allocated fattr with nfs4_fs_locations and drops the memcpy of fattr, which avoids two extra al...

CVE-2022-49234 net: dsa: Avoid cross-chip syncing of VLAN filtering

In the Linux kernel, the following vulnerability has been resolved: net: dsa: Avoid cross-chip syncing of VLAN filtering Changes to VLAN filtering are not applicable to cross-chip notifications. On a system like this: .-----. .-----. .-----. | sw1 +---+ sw2 +---+ sw3 | '-1-2-' '-1-2-' '-1-2-'...

CVE-2022-49160

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix crash during module load unload test During purex packet handling the driver was incorrectly freeing a pre-allocated structure. Fix this by skipping that entry. System crashed with the following stack during a...

Linux Kernel Null Pointer Dereference Vulnerability (CNVD-2025-04159)

The Linux Kernel is the core part of the operating system and is responsible for managing system resources. A null pointer dereference vulnerability exists in the zynqclksetup function of the Linux Kernel. The vulnerability stems from the fact that after the kmalloc function fails to allocate...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from a system crash caused by the split header function in the stmmac driver for the Tegra 194...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an out-of-bounds access in the svmupdatepiirte function, which could lead to a crash...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from netfilter's repeated deregistration of hooks in the netns path, which could lead to a system crash...

Ubuntu: Security Advisory (USN-7298-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-7288-2 linux-lowlatency-hwe-5.15 vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

CVE-2024-34035

CVE-2024-34035 affects O-RAN Near Real-time RIC H-Release, where the e2mgr can crash if it receives a large number of E2 Subscription Requests from an xApp. The root cause is an overwhelm/processing flood that targets E2 subscriptions, with impact described as HIGH for availability (CVSSv3.1: AV=...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-7293-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7293-1 advisory. Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker coul...

O-RAN RIC 安全漏洞

O-RAN RIC is a RIC application from O-RAN. A security vulnerability exists in O-RAN RIC that stems from e2mgr crashing when it receives a large number of E2 Subscription Requests...

Siemens SIMATIC Devices Linux Kernel Non-exit on Failed Initialization (CVE-2022-4662)

A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A local user could use this flaw to crash the system. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

The vulnerabilities of x86/mm kernel components of the Linux operating system, which allow a hacker to cause a service failure

The vulnerability of x86/mm kernel components of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

Siemens SIMATIC and SCALANCE Devices NULL Pointer Dereference (CVE-2023-42754)

A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer skb was assumed to be associated with a device before calling ipoptionscompile, which is not always the case if the skb is re-routed by ipvs. This issue may allow a local user with CAPNETADMIN privileges t...

Siemens SCALANCE W700 Use After Free (CVE-2023-1670)

A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA PC- card Ethernet driver was found.A local user could use this flaw to crash the system or potentially escalate their privileges on the system. This plugin only works with Tenable.ot. Please visit...

GHSA-2GW2-QGJG-XH6P Namada-apps allows Post-Genesis Validator Bypass

Impact Ledger crash. A user is able to initialize a post-genesis validator with a negative commission rate using the --force flag. If this validator gets into the consensus set, then when computing PoS inflation inside fn updaterewardsproductsandmintinflation, an instance of mulfloor will cause t...

Vulnerability of the vfio_platform_read_mmio() function in the drivers/vfio/platform/vfio_platform_common.c file – A driver for supporting platforms with VFIO devices in the Linux operating system, which allows a hacker to cause a service failure.

Vulnerability of the vfioplatformreadmmio function in the drivers/vfio/platform/vfioplatformcommon.c file – The Linux kernel’s VFIO device support driver has vulnerabilities in its code. Exploiting this vulnerability could allow an attacker to cause system failures...