Lucene search
+L

89 matches found

OSV
OSV
added 2024/04/17 11:15 a.m.13 views

UBUNTU-CVE-2024-26898

In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in aoecmdcfgpkts This patch is against CVE-2023-6270. The description of cve is: A flaw was found in the ATA over Ethernet AoE driver in the Linux kernel. The aoecmdcfgpkts function...

7.8CVSS6.2AI score0.00305EPSS
SaveExploits0References41
UbuntuCve
UbuntuCve
added 2024/04/17 11:15 a.m.36 views

CVE-2024-26898

In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in aoecmdcfgpkts This patch is against CVE-2023-6270. The description of cve is: A flaw was found in the ATA over Ethernet AoE driver in the Linux kernel. The aoecmdcfgpkts function...

7.8CVSS6.3AI score0.00305EPSS
SaveExploits0References40
Vulnrichment
Vulnrichment
added 2024/04/17 10:27 a.m.42 views

CVE-2024-26898 aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts

In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in aoecmdcfgpkts This patch is against CVE-2023-6270. The description of cve is: A flaw was found in the ATA over Ethernet AoE driver in the Linux kernel. The aoecmdcfgpkts function...

7.8CVSS6.9AI score0.00305EPSS
SaveExploits0References9
CVE
CVE
added 2024/04/17 10:27 a.m.221 views

CVE-2024-26898

Summary: CVE-2024-26898 relates to the AoE driver in the Linux kernel where aoecmd_cfg_pkts() incorrectly handled the refcnt of net_device, enabling a potential use-after-free via racing with tx paths. The issue has been resolved by patch f98364e92662, which stops calling dev_put(ifp) in the succ...

7.8CVSS6.2AI score0.00305EPSS
SaveExploits0References13Affected Software1
OSV
OSV
added 2024/04/17 10:27 a.m.8 views

CVE-2024-26898 aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts

In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in aoecmdcfgpkts This patch is against CVE-2023-6270. The description of cve is: A flaw was found in the ATA over Ethernet AoE driver in the Linux kernel. The aoecmdcfgpkts function...

7.8CVSS5.9AI score
SaveExploits0References16
SUSE CVE
SUSE CVE
added 2024/04/11 2:30 a.m.6 views

SUSE CVE-2024-26775

In the Linux kernel, the following vulnerability has been resolved: aoe: avoid potential deadlock at setcapacity Move setcapacity outside of the section procected by &d-lock. To avoid possible interrupt unsafe locking scenario: CPU0 CPU1 ---- ---- 1 lock&bdev-bdsizelock; localirqdisable; 2...

5.5CVSS6.3AI score0.00184EPSS
SaveExploits0References16
NVD
NVD
added 2024/04/03 5:15 p.m.20 views

CVE-2024-26775

In the Linux kernel, the following vulnerability has been resolved: aoe: avoid potential deadlock at setcapacity Move setcapacity outside of the section procected by &d-lock. To avoid possible interrupt unsafe locking scenario: CPU0 CPU1 ---- ---- 1 lock&bdev-bdsizelock; localirqdisable; 2...

5.5CVSS7.6AI score0.00184EPSS
SaveExploits0References5
OSV
OSV
added 2024/04/03 5:15 p.m.3 views

DEBIAN-CVE-2024-26775

In the Linux kernel, the following vulnerability has been resolved: aoe: avoid potential deadlock at setcapacity Move setcapacity outside of the section procected by &d-lock. To avoid possible interrupt unsafe locking scenario: CPU0 CPU1 ---- ---- 1 lock&bdev-bdsizelock; localirqdisable; 2...

5.5CVSS5.2AI score0.00184EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/03 5:15 p.m.13 views

AZL-54978 CVE-2024-26775 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: aoe: avoid potential deadlock at setcapacity Move setcapacity outside of the section procected by &d-lock. To avoid possible interrupt unsafe locking scenario: CPU0 CPU1 ---- ---- 1 lock&bdev-bdsizelock; localirqdisable; 2...

5.5CVSS6.4AI score0.00184EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2024/04/03 5:15 p.m.21 views

CVE-2024-26775

In the Linux kernel, the following vulnerability has been resolved: aoe: avoid potential deadlock at setcapacity Move setcapacity outside of the section procected by &d-lock. To avoid possible interrupt unsafe locking scenario: CPU0 CPU1 ---- ---- 1 lock&bdev-bdsizelock; localirqdisable; 2...

5.5CVSS5.8AI score0.00184EPSS
SaveExploits0References15
OSV
OSV
added 2024/04/03 5:15 p.m.8 views

UBUNTU-CVE-2024-26775

In the Linux kernel, the following vulnerability has been resolved: aoe: avoid potential deadlock at setcapacity Move setcapacity outside of the section procected by &d-lock. To avoid possible interrupt unsafe locking scenario: CPU0 CPU1 ---- ---- 1 lock&bdev-bdsizelock; localirqdisable; 2...

5.5CVSS6.2AI score0.00184EPSS
SaveExploits0References16
Cvelist
Cvelist
added 2024/04/03 5:01 p.m.33 views

CVE-2024-26775 aoe: avoid potential deadlock at set_capacity

In the Linux kernel, the following vulnerability has been resolved: aoe: avoid potential deadlock at setcapacity Move setcapacity outside of the section procected by &d-lock. To avoid possible interrupt unsafe locking scenario: CPU0 CPU1 ---- ---- 1 lock&bdev-bdsizelock; localirqdisable; 2...

7.8AI score0.00184EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2024/04/03 5:01 p.m.16 views

CVE-2024-26775 aoe: avoid potential deadlock at set_capacity

In the Linux kernel, the following vulnerability has been resolved: aoe: avoid potential deadlock at setcapacity Move setcapacity outside of the section procected by &d-lock. To avoid possible interrupt unsafe locking scenario: CPU0 CPU1 ---- ---- 1 lock&bdev-bdsizelock; localirqdisable; 2...

6.7AI score0.00184EPSS
SaveExploits0References5
Amazon
Amazon
added 2024/03/04 12:00 a.m.56 views

Important: kernel

Issue Overview: A flaw was found in the ATA over Ethernet AoE driver in the Linux kernel. The aoecmdcfgpkts function improperly updates the refcnt on struct netdevice, and a use-after-free can be triggered by racing between the free on the struct and the access through the skbtxq global queue. Th...

7CVSS7.3AI score0.0041EPSS
SaveExploits0
CNVD
CNVD
added 2024/01/05 12:00 a.m.66 views

Linux kernel code execution vulnerability (CNVD-2024-14767)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel. The vulnerability is due to the aoecmdcfgpkts function in the Linux kernel's ATA over Ethernet AoE driver incorrectly...

7CVSS7AI score0.0041EPSS
SaveExploits0References1
OSV
OSV
added 2024/01/04 5:15 p.m.18 views

UBUNTU-CVE-2023-6270

A flaw was found in the ATA over Ethernet AoE driver in the Linux kernel. The aoecmdcfgpkts function improperly updates the refcnt on struct netdevice, and a use-after-free can be triggered by racing between the free on the struct and the access through the skbtxq global queue. This could lead to...

7CVSS6.7AI score0.0041EPSS
SaveExploits0References33
Debian CVE
Debian CVE
added 2024/01/04 5:01 p.m.44 views

CVE-2023-6270

A flaw was found in the ATA over Ethernet AoE driver in the Linux kernel. The aoecmdcfgpkts function improperly updates the refcnt on struct netdevice, and a use-after-free can be triggered by racing between the free on the struct and the access through the skbtxq global queue. This could lead to...

7CVSS7.5AI score0.0041EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2023/02/15 4:37 a.m.7 views

SUSE CVE-2017-16808

tcpdump before 4.9.3 has a heap-based buffer over-read related to aoeprint in print-aoe.c and lookupemem in addrtoname.c...

7.5CVSS7.3AI score0.03167EPSS
SaveExploits0References12
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:23 p.m.7 views

Malicious code in aoe_playstyle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f865948cf33faf1c7357dd071a3cbdc7cf2b6c021983548afd01c0e02c82b18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2019/09/30 12:00 a.m.13 views

PT-2019-5679

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3 Description The issue is related to a buffer over-read in the bgp capabilities print function in print-bgp.c, which can cause a denial of service. This can be exploited by a remote attacker. The bgp capabilities...

9.8CVSS7.2AI score0.06816EPSS
SaveExploits4References477
Rows per page
Query Builder