Lucene search
+L

370 matches found

Cvelist
Cvelist
added 2024/04/28 12:59 p.m.26 views

CVE-2022-48637 bnxt: prevent skb UAF after handing over to PTP worker

In the Linux kernel, the following vulnerability has been resolved: bnxt: prevent skb UAF after handing over to PTP worker When reading the timestamp is required bnxttxint hands over the ownership of the completed skb to the PTP worker. The skb should not be used afterwards, as the worker may run...

6.9AI score0.00227EPSS
Exploits0References3
CVE
CVE
added 2024/04/28 12:59 p.m.123 views

CVE-2022-48637

CVE-2022-48637 — bnxt skb UAF in Linux kernel : The bnxt driver hands over a completed skb to the PTP worker (bnxt_tx_int). If the worker runs before the remaining code, the skb may be freed while still in use. The fix makes the loss of ownership explicit by setting the skb pointer to NULL, notin...

7.8CVSS6.7AI score0.00227EPSS
Exploits0References3Affected Software1
Debian CVE
Debian CVE
added 2024/04/28 12:59 p.m.33 views

CVE-2022-48637

In the Linux kernel, the following vulnerability has been resolved: bnxt: prevent skb UAF after handing over to PTP worker When reading the timestamp is required bnxttxint hands over the ownership of the completed skb to the PTP worker. The skb should not be used afterwards, as the worker may run...

7.8CVSS7.3AI score0.00227EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2024/03/02 5:49 a.m.9 views

SUSE CVE-2021-47015

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix RX consumer index logic in the error path. In bnxtrxpkt, the RX buffers are expected to complete in order. If the RX consumer index indicates an out of order buffer completion, it means we are hitting a hardware bug a...

5.5CVSS7.8AI score0.0025EPSS
Exploits0References11
OSV
OSV
added 2024/02/28 9:15 a.m.0 views

DEBIAN-CVE-2021-47015

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix RX consumer index logic in the error path. In bnxtrxpkt, the RX buffers are expected to complete in order. If the RX consumer index indicates an out of order buffer completion, it means we are hitting a hardware bug a...

5.5CVSS5.9AI score0.0025EPSS
Exploits0References1
Citrix
Citrix
added 2023/07/17 12:0 a.m.7 views

Driver Disk for Bnxt en 1.10.2_223.0.183.0 - For Citrix Hypervisor 8.2 LTSR

Who should install this driver disk? Customers running the Citrix Hypervisor 8.2 LTSR release who use Bnxt's en driver and wish to use the latest version of the following: Driver Module| Driver Type| Version ---|---|--- bnxten| Ethernet/NIC| 1.10.2223.0.183.0 Issues resolved in this driver disk...

7AI score
Exploits0
SUSE CVE
SUSE CVE
added 2023/02/15 4:6 a.m.2 views

SUSE CVE-2019-19077

A memory leak in the bnxtrecreatesrq function in drivers/infiniband/hw/bnxtre/ibverbs.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory consumption by triggering copy to udata failures, aka CID-4a9d46a9fe14...

5.1CVSS6.7AI score0.00393EPSS
Exploits0References14
Positive Technologies
Positive Technologies
added 2023/01/20 12:0 a.m.13 views

PT-2025-13356

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow issue was detected in the Linux kernel, specifically in the bnxt module, where test names were being concatenated beyond the end of the first name. This issue was...

5.5CVSS6.8AI score0.00176EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2022/12/08 12:0 a.m.2 views

PT-2022-36053 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.9 Description: A potential issue in the bnxt en driver may cause a crash in the bnxt hwrm set coal function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

7.2AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/12/08 12:0 a.m.5 views

PT-2022-36431 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.225 Description: A potential issue in the bnxt en driver may cause a crash in the bnxt hwrm set coal function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

7.2AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/12/08 12:0 a.m.7 views

PT-2022-36337 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.155 Description: A potential issue in the bnxt en driver may cause a crash in the bnxt hwrm set coal function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

7.2AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/11/14 12:0 a.m.4 views

PT-2022-34937 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.6 Description: A memory leak issue was discovered in the bnxt nvm test function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v6.0....

7.2AI score
Exploits0References1
OSV
OSV
added 2022/10/09 10:41 p.m.7 views

GSD-2022-1006468 bnxt: prevent skb UAF after handing over to PTP worker

bnxt: prevent skb UAF after handing over to PTP worker This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...

7.2AI score
Exploits0
Positive Technologies
Positive Technologies
added 2022/10/09 12:0 a.m.1 views

PT-2022-34808 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.71 Description: The issue is related to a potential security vulnerability in the bnxt driver, where a skb UAF use-after-free can occur after handing over to the PTP worker. The actual impact and attack...

7.2AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/10/09 12:0 a.m.1 views

PT-2022-34724 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.14 through 5.19 Description: The issue is related to a potential security vulnerability in the bnxt driver, where a skb UAF use-after-free can occur after handing over to the PTP worker. The actual impact and attack...

7.2AI score
Exploits0References1
RedHat Linux
RedHat Linux
added 2022/05/31 12:21 p.m.69 views

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

7.8CVSS6.8AI score0.06846EPSS
Exploits4References4
Oracle linux
Oracle linux
added 2022/05/17 12:0 a.m.81 views

kernel security, bug fix, and enhancement update

4.18.0-372.9.1.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

9.8CVSS8.1AI score0.67994EPSS
Exploits20
OPENSUSE Linux
OPENSUSE Linux
added 2021/10/15 12:0 a.m.174 views

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:1357-1 Rating: important References: 1065729 1148868 1152489 1154353 1159886 1167773 1170774 1173746 1176940 1184439 1184804 1185302 1185677 1185726 1185762 1187167 1188067 1188651 1188986 1189297...

7.5CVSS7.1AI score0.01736EPSS
Exploits2References49
OpenVAS
OpenVAS
added 2021/10/13 12:0 a.m.19 views

SUSE: Security Advisory (SUSE-SU-2021:3386-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.9CVSS7.6AI score0.01736EPSS
Exploits2References41
OSV
OSV
added 2021/07/20 1:30 p.m.51 views

ALSA-2021:2714 Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: sizet-to-int conversion vulnerability in the filesystem layer CVE-2021-33909 kernel: race condition for removal of the HCI controller CVE-2021-32399 For more details about the security...

7.8CVSS7.5AI score0.09729EPSS
Exploits7References2
Rows per page
Query Builder