Siemens SIMATIC Devices Use of Uninitialized Resource (CVE-2024-35893)

In the Linux kernel, the following vulnerability has been resolved: net/sched: actskbmod: prevent kernel-infoleak syzbot found that tcfskbmoddump was copying four bytes from kernel stack to user space. The issue here is that 'struct tcskbmod' has a four bytes hole. We need to clear the structure...

kernel: net/sched: act_skbmod: Skip non-Ethernet packets

A vulnerability was found in the Linux kernel’s actskbmod module, where the tcfskbmodact function mistakenly assumes all packets use Ethernet as their protocol. This issue can lead to the corruption of non-Ethernet packets, such as those from CAN devices, if skbmod actions are incorrectly applied...

SUSE CVE-2024-35893

In the Linux kernel, the following vulnerability has been resolved: net/sched: actskbmod: prevent kernel-infoleak syzbot found that tcfskbmoddump was copying four bytes from kernel stack to user space 1. The issue here is that 'struct tcskbmod' has a four bytes hole. We need to clear the structur...

PT-2021-29835

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.199 Description The issue concerns the act skbmod in the Linux Kernel, specifically affecting non-Ethernet packets. The actual impact and potential for attack have not been proven yet. Recommendations For...

PT-2021-29774

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.136 Description The issue concerns the act skbmod in the Linux Kernel's networking subsystem, specifically affecting the handling of non-Ethernet packets. The actual impact and potential for attack have not...

PT-2021-29705

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.54 Description The issue concerns the act skbmod in the Linux Kernel's networking subsystem, specifically affecting the handling of non-Ethernet packets. The actual impact and potential for attack have not...

PT-2021-29631

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.13.6 Description The issue concerns the act skbmod in the Linux Kernel's networking subsystem, specifically affecting the handling of non-Ethernet packets. The actual impact and potential for attack have not...

PT-2021-25710

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.54 Description The issue concerns the act skbmod in the Linux Kernel's networking subsystem, specifically affecting the handling of non-Ethernet packets. The actual impact and potential for attacks have not...

PT-2021-25779

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.136 Description The issue concerns the act skbmod in the Linux Kernel's networking subsystem, specifically affecting the handling of non-Ethernet packets. The actual impact and potential for attacks have not...

PT-2021-25840

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.199 Description The issue concerns the Linux Kernel, where a problem in the act skbmod component may allow skipping non-Ethernet packets. The actual impact and potential for attack have not been proven yet...

PT-2021-25636

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.13.6 Description: The issue concerns the act skbmod in the Linux Kernel's networking subsystem, specifically affecting the handling of non-Ethernet packets. The actual impact and potential for attacks have no...