Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper handling of MSDU buffer types, which can lead to kernel crashes and buffer leaks...

CVE-2022-50483

In the Linux kernel, the following vulnerability has been resolved: net: enetc: avoid buffer leaks on xdpdoredirect failure Before enetccleanrxringxdp calls xdpdoredirect, each software BD in the RX ring between index origi and i can have one of 2 refcount values on its page. We are the owner of...

CVE-2022-50483

CVE-2022-50483 concerns a Linux kernel issue in the net: enetc path where, on XDP redirects, a page reference counting race could leak pages. The root cause: enetc_flip_rx_buff() could be executed before xdp_do_redirect() completes, causing page refcounts to reach 2 (or 0 on some paths) and enabl...

CVE-2022-50483 net: enetc: avoid buffer leaks on xdp_do_redirect() failure

In the Linux kernel, the following vulnerability has been resolved: net: enetc: avoid buffer leaks on xdpdoredirect failure Before enetccleanrxringxdp calls xdpdoredirect, each software BD in the RX ring between index origi and i can have one of 2 refcount values on its page. We are the owner of...

CVE-2022-50483 net: enetc: avoid buffer leaks on xdp_do_redirect() failure

In the Linux kernel, the following vulnerability has been resolved: net: enetc: avoid buffer leaks on xdpdoredirect failure Before enetccleanrxringxdp calls xdpdoredirect, each software BD in the RX ring between index origi and i can have one of 2 refcount values on its page. We are the owner of...

PT-2025-40670

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the enetc network driver related to buffer management during XDP redirect operations. Specifically, the issue arises from improper handling of...

espintcp: fix skb leaks

...

SUSE CVE-2025-38057

In the Linux kernel, the following vulnerability has been resolved: espintcp: fix skb leaks A few error paths are missing a kfreeskb...

CVE-2025-38057 espintcp: fix skb leaks

In the Linux kernel, the following vulnerability has been resolved: espintcp: fix skb leaks A few error paths are missing a kfreeskb...

Out Of Memory Error

org.infinispan, infinispan-query is vulnerable to a Out Of Memory Error. The vulnerability is due to lack of proper memory handling when processing large POST requests, allows continual requests to trigger buffer leaks and memory exhaustion...

UBUNTU-CVE-2023-52895

In the Linux kernel, the following vulnerability has been resolved: iouring/poll: don't reissue in case of poll race on multishot request A previous commit fixed a poll race that can occur, but it's only applicable for multishot requests. For a multishot request, we can safely ignore a spurious...

CVE-2024-26912

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix several DMA buffer leaks Nouveau manages GSP-RM DMA buffers with nvkmgspmem objects. Several of these buffers are never dealloced. Some of them can be deallocated right after GSP-RM is initialized, but the rest...

CVE-2024-26912

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix several DMA buffer leaks Nouveau manages GSP-RM DMA buffers with nvkmgspmem objects. Several of these buffers are never dealloced. Some of them can be deallocated right after GSP-RM is initialized, but the rest...

SUSE-SU-2024:0167-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2021-41229: Fix leaking buffers stored in cstates cache bsc1192760. - CVE-2023-50229: Fixed an out of bounds write in the primary version counter for the Phone Book Access Profile implementation bsc1218300. - CVE-2023-50230: Fixed an out of...

SUSE-SU-2024:0166-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2021-41229: Fix leaking buffers stored in cstates cache bsc1192760. - CVE-2023-50229: Fixed an out of bounds write in the primary version counter for the Phone Book Access Profile implementation bsc1218300. - CVE-2023-50230: Fixed an out of...

SUSE-SU-2023:3689-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2021-41229: Fixed leaking buffers stored in cstates cache bsc1192760...

CVE-2023-24513

On affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine Sfe can lead to a potential denial of service attack by sending malformed packets to the switch. This causes a leak of packet buffers and if enough malformed packets are received, the switch may eventually st...

PT-2023-19682 · Arista · Arista Cloudeos

Name of the Vulnerable Software and Affected Versions: Arista CloudEOS affected versions not specified Description: The issue in the Software Forwarding Engine Sfe can lead to a potential denial of service attack by sending malformed packets to the switch, causing a leak of packet buffers. If...

PT-2023-9437 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a race condition in the io uring/poll component of the Linux kernel, specifically with multishot requests. A previous commit fixed a poll race that can occur, b...

GSD-2023-1001042 net: enetc: avoid buffer leaks on xdp_do_redirect() failure

net: enetc: avoid buffer leaks on xdpdoredirect failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...