Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the presence of the MSGPEEK issue in the handling of the vlangetprotocoldgram function...

Observium 跨站脚本漏洞

Observium is a free server monitoring platform from Observium UK. Written in PHP, the platform is an auto-discovery SNMP-based network monitoring platform that supports a very wide range of network hardware and operating systems, including Cisco, Windows, Linux, HP, NetApp, and more. A cross-site...

PT-2025-2755

Name of the Vulnerable Software and Affected Versions: Observium CE version 24.4.13528 Description: A html code injection vulnerability exists in the vlan management part of Observium CE. This issue can be exploited by an attacker sending a specially crafted HTTP request, potentially leading to t...

CVE-2024-47002: Improper Neutralization of Input During Web Page Generation

A html code injection vulnerability exists in the vlan management part of Observium CE 24.4.13528. A specially crafted HTTP request can lead to an arbitrary html code. An authenticated user would need to click a malicious link provided by the attacker...

CVE-2024-5872

On affected platforms running Arista EOS, a specially crafted packet with incorrect VLAN tag might be copied to CPU, which may cause incorrect control plane behavior related to the packet, such as route flaps, multicast routes learnt, etc...

CVE-2024-5872 On affected platforms running Arista EOS, a specially crafted packet with incorrect VLAN tag might be copied to CPU, which may cause incorrect control plane behavior related to the packet, such as route flaps, multicast routes learnt, etc.

On affected platforms running Arista EOS, a specially crafted packet with incorrect VLAN tag might be copied to CPU, which may cause incorrect control plane behavior related to the packet, such as route flaps, multicast routes learnt, etc...

CVE-2024-5872

CVE-2024-5872 affects Arista EOS where a specially crafted packet with an incorrect VLAN tag can be copied to the CPU, potentially causing incorrect control plane behavior (e.g., route flaps, learned multicast routes). The issue is rooted in how VLAN-tagged packets may be misrouted to the CPU und...

CVE-2024-5872 On affected platforms running Arista EOS, a specially crafted packet with incorrect VLAN tag might be copied to CPU, which may cause incorrect control plane behavior related to the packet, such as route flaps, multicast routes learnt, etc.

On affected platforms running Arista EOS, a specially crafted packet with incorrect VLAN tag might be copied to CPU, which may cause incorrect control plane behavior related to the packet, such as route flaps, multicast routes learnt, etc...

SUSE CVE-2024-56648

In the Linux kernel, the following vulnerability has been resolved: net: hsr: avoid potential out-of-bound access in fillframeinfo syzbot is able to feed a packet with 14 bytes, pretending it is a vlan one. Since fillframeinfo is relying on skb-maclen already, extend the check to cover this case...

CVE-2024-5872: Undefined Security Weakness

On affected platforms running Arista EOS, a specially crafted packet with incorrect VLAN tag might be copied to CPU, which may cause incorrect control plane behavior related to the packet, such as route flaps, multicast routes learnt, etc...

PT-2025-3678

Name of the Vulnerable Software and Affected Versions Arista EOS affected versions not specified Description The issue is related to a specially crafted packet with an incorrect VLAN tag that may be copied to the CPU, potentially causing incorrect control plane behavior. This behavior can include...

kernel: i40e: fix race condition by adding filter's intermediate sync state

A flaw was found in the Linux kernel's i40e network driver. A local user can exploit this race condition to cause a Denial of Service DoS through memory corruption. The issue occurs when multiple concurrent operations modify Media Access Control MAC and Virtual Local Area Network VLAN filters und...

PT-2026-2873

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the networking subsystem related to the hns3 driver. Specifically, the system lacks proper validation of VLAN IDs received from a Virtual Function VF...

PT-2025-3627

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A vulnerability in the Linux kernel has been resolved, specifically in the af packet module, where the function vlan get tci did not handle the MSG PEEK case correctly, allowing a crash to occu...

PT-2025-3626

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A vulnerability in the Linux kernel has been resolved, specifically in the af packet module. The issue was caused by a forgotten case for MSG PEEK in the vlan get protocol dgram function,...

AZL-54841 CVE-2024-56659 affecting package kernel for versions less than 6.6.76.1-1

In the Linux kernel, the following vulnerability has been resolved: net: lapb: increase LAPBHEADERLEN It is unclear if net/lapb code is supposed to be ready for 8021q. We can at least avoid crashes like the following : skbuff: skbunderpanic: text:ffffffff8aabe1f6 len:24 put:20 head:ffff88802824a4...

AZL-54818 CVE-2024-56648 affecting package kernel for versions less than 6.6.76.1-1

In the Linux kernel, the following vulnerability has been resolved: net: hsr: avoid potential out-of-bound access in fillframeinfo syzbot is able to feed a packet with 14 bytes, pretending it is a vlan one. Since fillframeinfo is relying on skb-maclen already, extend the check to cover this case...

CVE-2024-56648

In the Linux kernel, the following vulnerability has been resolved: net: hsr: avoid potential out-of-bound access in fillframeinfo syzbot is able to feed a packet with 14 bytes, pretending it is a vlan one. Since fillframeinfo is relying on skb-maclen already, extend the check to cover this case...

AZL-54785 CVE-2024-56648 affecting package kernel for versions less than 5.15.176.3-1

In the Linux kernel, the following vulnerability has been resolved: net: hsr: avoid potential out-of-bound access in fillframeinfo syzbot is able to feed a packet with 14 bytes, pretending it is a vlan one. Since fillframeinfo is relying on skb-maclen already, extend the check to cover this case...

UBUNTU-CVE-2024-56659

In the Linux kernel, the following vulnerability has been resolved: net: lapb: increase LAPBHEADERLEN It is unclear if net/lapb code is supposed to be ready for 8021q. We can at least avoid crashes like the following : skbuff: skbunderpanic: text:ffffffff8aabe1f6 len:24 put:20 head:ffff88802824a4...