CVE-2022-33743

network backend may cause Linux netfront to use freed SKBs While adding logic to support XDP eXpress Data Path, a code label was moved in a way allowing for SKBs having references pointers retained for further processing to nevertheless be freed...

CVE-2022-33743

CVE-2022-33743 maps to a Xen netfront memory-handling issue in the Linux kernel where SKBs with retained references can be freed, caused by a label move while adding XDP support. This can lead to use-after-free in the network backend and a potential Denial of Service when interacting with the Xen...

CVE-2022-33743

network backend may cause Linux netfront to use freed SKBs While adding logic to support XDP eXpress Data Path, a code label was moved in a way allowing for SKBs having references pointers retained for further processing to nevertheless be freed...

CVE-2022-33743

network backend may cause Linux netfront to use freed SKBs While adding logic to support XDP eXpress Data Path, a code label was moved in a way allowing for SKBs having references pointers retained for further processing to nevertheless be freed...

network backend may cause Linux netfront to use freed SKBs

ISSUE DESCRIPTION While adding logic to support XDP eXpress Data Path, a code label was moved in a way allowing for SKBs having references pointers retained for further processing to nevertheless be freed. IMPACT A misbehaving or malicious backend may cause a Denial of Service DoS in the guest...

CVE-2022-33743: Undefined Security Weakness

network backend may cause Linux netfront to use freed SKBs While adding logic to support XDP eXpress Data Path, a code label was moved in a way allowing for SKBs having references pointers retained for further processing to nevertheless be freed...

PT-2025-8620

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bug in the Linux kernel's virtio net driver causes a driver bug warning when using virtio net after a suspend/resume sequence. The issue arises because the virtnet freeze function free...

PT-2025-8628

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18.3-apu2 9 Description A use-after-free issue has been identified in the igb clean tx ring routine when the NIC is running in XDP mode. This issue can be triggered by redirecting traffic into the igb NIC and...

PT-2022-3490

Name of the Vulnerable Software and Affected Versions Xen affected versions not specified Linux affected versions not specified Description The issue is related to insufficient input validation in the Xen hypervisor and Linux kernel, which can be exploited by a remote attacker to execute arbitrar...

new packages: xdp-tools

An update is available for xdp-tools. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9....

kernel: igc: avoid kernel warning when changing RX ring parameters

In the Linux kernel, the following vulnerability has been resolved: igc: avoid kernel warning when changing RX ring parameters Calling ethtool changing the RX ring parameters like this: $ ethtool -G eth0 rx 1024 on igc triggers kernel warnings like this: 225.198467 ------------ cut here...

ALEA-2022:1925 xdp-tools bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

xdp-tools bug fix and enhancement update

An update is available for xdp-tools. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8....

GSD-2022-1001692 net: sfc: add missing xdp queue reinitialization

net: sfc: add missing xdp queue reinitialization This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.34 by commit...

GSD-2022-1001023 net: sfc: add missing xdp queue reinitialization

net: sfc: add missing xdp queue reinitialization This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

PT-2022-29639

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue concerns a missing XDP queue reinitialization in the Linux Kernel's sfc module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-29296

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to a missing XDP queue reinitialization in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-29965

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue concerns a missing XDP queue reinitialization in the Linux Kernel's sfc module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

GSD-2022-1000619 i40e: Fix queues reservation for XDP

i40e: Fix queues reservation for XDP This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.5 by commit 4b3aa858268b7b9aeef02e5f9c4cd8f8fac101c8,...

PT-2022-28893

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.12 through v5.16.4 Description The issue concerns a problem with queues reservation for XDP in the i40e driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...