PT-2024-29841

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.10.2 Description A malicious VF driver can request more FDIR filters than the s/w limit, exhausting resources for other VFs. The issue is resolved by adding a per-VF limit on the number of FDIR filters in the i...

PT-2024-9316

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a NULL pointer handling path in the lio vf rep copy packet function. In this function, pg info-page is compared to a NULL value, but then it is unconditionally...

UBUNTU-CVE-2024-36017

In the Linux kernel, the following vulnerability has been resolved: rtnetlink: Correct nested IFLAVFVLANLIST attribute validation Each attribute inside a nested IFLAVFVLANLIST is assumed to be a struct iflavfvlaninfo so the size of such attribute needs to be at least of sizeofstruct iflavfvlaninf...

CVE-2024-36020: Use of Uninitialized Resource

In the Linux kernel, the following vulnerability has been resolved: i40e: fix vf may be used uninitialized in this function warning To fix the regression introduced by commit 52424f974bc5, which causes servers hang in very hard to reproduce conditions with resets races. Using two sources for the...

PT-2024-28104

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the validation of length of nl attributes in the enic set vf port function. The function assumes that the nl attribute IFLA PORT PROFILE is of length PORT PROFILE...

DEBIAN-CVE-2022-48706

In the Linux kernel, the following vulnerability has been resolved: vdpa: ifcvf: Do proper cleanup if IFCVF init fails ifcvfmgmtdev leaks memory if it is not freed before returning. Call is made to correct return statement so memory does not leak. ifcvfinithw does not take care of this so it is...

SUSE CVE-2024-36003

In the Linux kernel, the following vulnerability has been resolved: ice: fix LAG and VF lock dependency in iceresetvf 9f74a3dfcf83 "ice: Fix VF Reset paths when interface in a failed over aggregate", the ice driver has acquired the LAG mutex in iceresetvf. The commit placed this lock acquisition...

CVE-2024-35958

This is a vulnerability in the Linux kernel's Elastic Network Adapter ENA driver, which manages network interfaces on certain platforms. The driver utilizes two types of transmit TX queues: one for packets from the network stack and another for packets directed by XDP eXpress Data Path operations...

DEBIAN-CVE-2024-36003

In the Linux kernel, the following vulnerability has been resolved: ice: fix LAG and VF lock dependency in iceresetvf 9f74a3dfcf83 "ice: Fix VF Reset paths when interface in a failed over aggregate", the ice driver has acquired the LAG mutex in iceresetvf. The commit placed this lock acquisition...

UBUNTU-CVE-2024-36003

In the Linux kernel, the following vulnerability has been resolved: ice: fix LAG and VF lock dependency in iceresetvf 9f74a3dfcf83 "ice: Fix VF Reset paths when interface in a failed over aggregate", the ice driver has acquired the LAG mutex in iceresetvf. The commit placed this lock acquisition...

CVE-2024-36003 ice: fix LAG and VF lock dependency in ice_reset_vf()

In the Linux kernel, the following vulnerability has been resolved: ice: fix LAG and VF lock dependency in iceresetvf 9f74a3dfcf83 "ice: Fix VF Reset paths when interface in a failed over aggregate", the ice driver has acquired the LAG mutex in iceresetvf. The commit placed this lock acquisition...

CVE-2024-36003 ice: fix LAG and VF lock dependency in ice_reset_vf()

In the Linux kernel, the following vulnerability has been resolved: ice: fix LAG and VF lock dependency in iceresetvf 9f74a3dfcf83 "ice: Fix VF Reset paths when interface in a failed over aggregate", the ice driver has acquired the LAG mutex in iceresetvf. The commit placed this lock acquisition...

CVE-2024-36003 ice: fix LAG and VF lock dependency in ice_reset_vf()

In the Linux kernel, the following vulnerability has been resolved: ice: fix LAG and VF lock dependency in iceresetvf 9f74a3dfcf83 "ice: Fix VF Reset paths when interface in a failed over aggregate", the ice driver has acquired the LAG mutex in iceresetvf. The commit placed this lock acquisition...

CVE-2024-36003

In the Linux kernel, the following vulnerability has been resolved: ice: fix LAG and VF lock dependency in iceresetvf 9f74a3dfcf83 "ice: Fix VF Reset paths when interface in a failed over aggregate", the ice driver has acquired the LAG mutex in iceresetvf. The commit placed this lock acquisition...

CVE-2024-35958 net: ena: Fix incorrect descriptor free behavior

In the Linux kernel, the following vulnerability has been resolved: net: ena: Fix incorrect descriptor free behavior ENA has two types of TX queues: - queues which only process TX packets arriving from the network stack - queues which only process TX packets forwarded to it by XDPREDIRECT or XDPT...

CVE-2024-35958 net: ena: Fix incorrect descriptor free behavior

In the Linux kernel, the following vulnerability has been resolved: net: ena: Fix incorrect descriptor free behavior ENA has two types of TX queues: - queues which only process TX packets arriving from the network stack - queues which only process TX packets forwarded to it by XDPREDIRECT or XDPT...

CVE-2024-35958 net: ena: Fix incorrect descriptor free behavior

In the Linux kernel, the following vulnerability has been resolved: net: ena: Fix incorrect descriptor free behavior ENA has two types of TX queues: - queues which only process TX packets arriving from the network stack - queues which only process TX packets forwarded to it by XDPREDIRECT or XDPT...

CVE-2024-35958: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: ena: Fix incorrect descriptor free behavior ENA has two types of TX queues: - queues which only process TX packets arriving from the network stack - queues which only process TX packets forwarded to it by XDPREDIRECT or XDPT...

CVE-2024-36003: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: ice: fix LAG and VF lock dependency in iceresetvf 9f74a3dfcf83 "ice: Fix VF Reset paths when interface in a failed over aggregate", the ice driver has acquired the LAG mutex in iceresetvf. The commit placed this lock acquisition...

PT-2024-4095

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the do setvfinfo function in the net/core/rtnetlink.c module of the Linux kernel, which is associated with a buffer overflow vulnerability. This vulnerability may...