Lucene search
+L

1705 matches found

OSV
OSV
added 2025/04/01 4:15 p.m.2 views

DEBIAN-CVE-2025-21920

In the Linux kernel, the following vulnerability has been resolved: vlan: enforce underlying device type Currently, VLAN devices can be created on top of non-ethernet devices. Besides the fact that it doesn't make much sense, this also causes a bug which leaks the address of a kernel function to...

7.1CVSS6AI score0.00221EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/01 4:15 p.m.9 views

AZL-59976 CVE-2025-21920 affecting package kernel for versions less than 5.15.180.1-1

In the Linux kernel, the following vulnerability has been resolved: vlan: enforce underlying device type Currently, VLAN devices can be created on top of non-ethernet devices. Besides the fact that it doesn't make much sense, this also causes a bug which leaks the address of a kernel function to...

7.1CVSS6.5AI score0.00221EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/01 4:15 p.m.11 views

UBUNTU-CVE-2025-21920

In the Linux kernel, the following vulnerability has been resolved: vlan: enforce underlying device type Currently, VLAN devices can be created on top of non-ethernet devices. Besides the fact that it doesn't make much sense, this also causes a bug which leaks the address of a kernel function to...

7.1CVSS6.3AI score0.00221EPSS
SaveExploits0References59
Vulnrichment
Vulnrichment
added 2025/04/01 3:40 p.m.2 views

CVE-2025-21920 vlan: enforce underlying device type

In the Linux kernel, the following vulnerability has been resolved: vlan: enforce underlying device type Currently, VLAN devices can be created on top of non-ethernet devices. Besides the fact that it doesn't make much sense, this also causes a bug which leaks the address of a kernel function to...

7.5AI score0.00221EPSS
SaveExploits0References8
OSV
OSV
added 2025/04/01 3:40 p.m.21 views

CVE-2025-21920 vlan: enforce underlying device type

In the Linux kernel, the following vulnerability has been resolved: vlan: enforce underlying device type Currently, VLAN devices can be created on top of non-ethernet devices. Besides the fact that it doesn't make much sense, this also causes a bug which leaks the address of a kernel function to...

7.1CVSS6.1AI score
SaveExploits0References13
Debian CVE
Debian CVE
added 2025/04/01 3:40 p.m.16 views

CVE-2025-21920

In the Linux kernel, the following vulnerability has been resolved: vlan: enforce underlying device type Currently, VLAN devices can be created on top of non-ethernet devices. Besides the fact that it doesn't make much sense, this also causes a bug which leaks the address of a kernel function to...

7.1CVSS6AI score0.00221EPSS
SaveExploits0
Cvelist
Cvelist
added 2025/04/01 3:40 p.m.26 views

CVE-2025-21920 vlan: enforce underlying device type

In the Linux kernel, the following vulnerability has been resolved: vlan: enforce underlying device type Currently, VLAN devices can be created on top of non-ethernet devices. Besides the fact that it doesn't make much sense, this also causes a bug which leaks the address of a kernel function to...

0.00221EPSS
SaveExploits0References8
CVE
CVE
added 2025/04/01 3:40 p.m.198 views

CVE-2025-21920

CVE-2025-21920 (Linux kernel VLAN subtype): The issue occurs when creating VLAN devices on non-Ethernet underlying devices, which can trigger an out-of-bounds read by dev_mc_add due to __dev_mc_add using dev->addr_len as the multicast length. The underlying cause is not enforcing the underlyin...

7.1CVSS7.2AI score0.00221EPSS
SaveExploits0References10Affected Software1
SUSE CVE
SUSE CVE
added 2025/03/28 3:37 a.m.5 views

SUSE CVE-2023-53033

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: incorrect arithmetics when fetching VLAN header bits If the offset + length goes over the ethernet + vlan header, then the length is adjusted to copy the bytes that are within the boundaries of the vlanethh...

5.5CVSS7.3AI score0.00189EPSS
SaveExploits0References9
NVD
NVD
added 2025/03/27 5:15 p.m.32 views

CVE-2023-53033

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: incorrect arithmetics when fetching VLAN header bits If the offset + length goes over the ethernet + vlan header, then the length is adjusted to copy the bytes that are within the boundaries of the vlanethh...

7.8CVSS0.00189EPSS
SaveExploits0References4
OSV
OSV
added 2025/03/27 5:15 p.m.2 views

DEBIAN-CVE-2023-53033

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: incorrect arithmetics when fetching VLAN header bits If the offset + length goes over the ethernet + vlan header, then the length is adjusted to copy the bytes that are within the boundaries of the vlanethh...

5.5CVSS5.3AI score0.00189EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/27 5:15 p.m.28 views

UBUNTU-CVE-2023-53033

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: incorrect arithmetics when fetching VLAN header bits If the offset + length goes over the ethernet + vlan header, then the length is adjusted to copy the bytes that are within the boundaries of the vlanethh...

7.8CVSS6.1AI score0.00189EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2025/03/27 4:44 p.m.22 views

CVE-2023-53033 netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: incorrect arithmetics when fetching VLAN header bits If the offset + length goes over the ethernet + vlan header, then the length is adjusted to copy the bytes that are within the boundaries of the vlanethh...

7.8CVSS0.00189EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2025/03/27 4:44 p.m.12 views

CVE-2023-53033

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: incorrect arithmetics when fetching VLAN header bits If the offset + length goes over the ethernet + vlan header, then the length is adjusted to copy the bytes that are within the boundaries of the vlanethh...

7.8CVSS5.3AI score0.00189EPSS
SaveExploits0
OSV
OSV
added 2025/03/27 4:44 p.m.18 views

CVE-2023-53033 netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: incorrect arithmetics when fetching VLAN header bits If the offset + length goes over the ethernet + vlan header, then the length is adjusted to copy the bytes that are within the boundaries of the vlanethh...

7.8CVSS5.9AI score
SaveExploits0References7
CVE
CVE
added 2025/03/27 4:44 p.m.181 views

CVE-2023-53033

Summary (CVE-2023-53033): The Linux kernel netfilter NFT payload code incorrectly handles VLAN header bit extraction due to arithmetic that adds, not subtracts, the VLAN header size when computing the copy length for double-tagged packets. This could permit out-of-bounds handling in VLAN header p...

7.8CVSS6.5AI score0.00189EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2025/03/27 4:18 p.m.42 views

USN-7379-1 linux, linux-aws, linux-azure, linux-gcp, linux-hwe-6.11, linux-oracle, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - x86...

10CVSS6.4AI score0.00822EPSS
SaveExploits2References309
CNNVD
CNNVD
added 2025/03/27 12:0 a.m.7 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a miscalculation when nftpayload obtains a VLAN header...

5.5CVSS5.3AI score0.00189EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/03/20 12:0 a.m.9 views

PT-2025-18417

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.14.0-rc5 Description A deadlock vulnerability has been identified in the Linux kernel, specifically in the VLAN Virtual Local Area Network implementation. This issue arises when a lower device with a VLAN is...

5.5CVSS6.5AI score0.00146EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/03/08 8:0 a.m.7 views

af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK

...

7.3CVSS7.4AI score0.0027EPSS
SaveExploits0
Rows per page
Query Builder