Lucene search
K

3137 matches found

OSV
OSV
added 2025/12/30 12:3 p.m.3 views

CVE-2022-50784 wifi: iwlwifi: mei: fix potential NULL-ptr deref after clone

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: fix potential NULL-ptr deref after clone If cloning the SKB fails, don't try to use it, but rather return as if we should pass it. Coverity CID: 1503456...

6.4AI score0.00155EPSS
Exploits0References6
Cvelist
Cvelist
added 2025/12/30 12:3 p.m.23 views

CVE-2022-50784 wifi: iwlwifi: mei: fix potential NULL-ptr deref after clone

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: fix potential NULL-ptr deref after clone If cloning the SKB fails, don't try to use it, but rather return as if we should pass it. Coverity CID: 1503456...

0.00155EPSS
Exploits0References3
CVE
CVE
added 2025/12/30 12:3 p.m.10 views

CVE-2022-50784

The CVE-2022-50784 issue affects the Linux kernel in the wifi/iwlwifi/mei path, where a NULL-pointer dereference can occur after attempting to clone an SKB. If SKB cloning fails, the code may proceed to use the invalid SKB instead of aborting, risking a system crash or instability. The vulnerabil...

6.1AI score0.00155EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2025/12/30 12:3 p.m.4 views

CVE-2022-50784

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: fix potential NULL-ptr deref after clone If cloning the SKB fails, don't try to use it, but rather return as if we should pass it. Coverity CID: 1503456...

5.2AI score0.00155EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/12/30 12:0 a.m.2 views

PT-2025-53935

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-syzkaller-02734-g0326074ff465 Description The Linux kernel contained a flaw within the networking component, specifically in the hsr High Speed Resilient functionality. A null dereference issue was identifi...

6.7AI score0.002EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/12/30 12:0 a.m.4 views

PT-2025-53924

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's iwlwifi component related to the mei driver. Specifically, a potential NULL pointer dereference can occur after an attempt to clone an SKB Socket Buff...

6.4AI score0.00155EPSS
Exploits0References8
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.1 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the possible use of a null pointer after a failed clone of SKB, which could lead to a null pointer dereference...

5.8AI score0.00155EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/12/30 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2022-50784

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: iwlwifi: mei: fix potential NULL-ptr deref after clone If cloning the SKB fails, don't try to use it, but rather return as if we should pass it. Coverity...

5.8AI score0.00155EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/12/30 12:0 a.m.4 views

PT-2025-53961

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF issue was identified and resolved in the Linux kernel related to dm clone functionality within the clone dtr function. The issue also exists when dm resume and dm...

7.8CVSS7.2AI score0.00465EPSS
Exploits2References896
Tenable Nessus
Tenable Nessus
added 2025/12/30 12:0 a.m.6 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992637)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992637 advisory. In the Linux kernel, the following vulnerability has been resolved: llc: do not use skbget before devqueuexmit syzbot is able to crash hosts 1, using llc and devices...

5.5CVSS6.2AI score0.00174EPSS
Exploits0References4
OSV
OSV
added 2025/12/29 10:4 a.m.1 views

MAL-2025-192958 Malicious code in smtmlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e871336d0effe99cb62efeda3a287186e75c1bd4ca5770efd81718db8ababe4e Malicious copy of a standard library module that during class initialization downloads and executes remote code and after that attempts to cover its tracks by...

7.5AI score
Exploits0References2
OSV
OSV
added 2025/12/24 11:16 a.m.6 views

AZL-78413 CVE-2025-68725 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Do not let BPF test infra emit invalid GSO types to stack Yinhao et al. reported that their fuzzer tool was able to trigger a skbwarnbadoffload from netifskbfeatures - gsofeaturescheck. When a BPF program - triggered via BPF...

5.5CVSS5.8AI score0.00161EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2025/12/24 11:16 a.m.3 views

CVE-2025-68725

In the Linux kernel, the following vulnerability has been resolved: bpf: Do not let BPF test infra emit invalid GSO types to stack Yinhao et al. reported that their fuzzer tool was able to trigger a skbwarnbadoffload from netifskbfeatures - gsofeaturescheck. When a BPF program - triggered via BPF...

5.5CVSS5.9AI score0.00161EPSS
Exploits0References28
ATTACKERKB
ATTACKERKB
added 2025/12/24 10:33 a.m.2 views

CVE-2025-68725

In the Linux kernel, the following vulnerability has been resolved: bpf: Do not let BPF test infra emit invalid GSO types to stack Yinhao et al. reported that their fuzzer tool was able to trigger a skbwarnbadoffload from netifskbfeatures - gsofeaturescheck. When a BPF program - triggered via BPF...

5.7AI score0.00161EPSS
Exploits0References8Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/24 10:33 a.m.3 views

CVE-2025-68725 bpf: Do not let BPF test infra emit invalid GSO types to stack

In the Linux kernel, the following vulnerability has been resolved: bpf: Do not let BPF test infra emit invalid GSO types to stack Yinhao et al. reported that their fuzzer tool was able to trigger a skbwarnbadoffload from netifskbfeatures - gsofeaturescheck. When a BPF program - triggered via BPF...

5.3AI score0.00161EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/12/24 12:0 a.m.3 views

PT-2025-52918

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel where BPF test infrastructure could emit invalid GSO types to the stack. This issue stemmed from a fuzzer tool triggering a warning in netif skb feature...

5.5CVSS5.9AI score0.00161EPSS
Exploits0
NVD
NVD
added 2025/12/23 5:15 p.m.5 views

CVE-2025-29228

Linksys E5600 V1.1.0.26 is vulnerable to command injection in the runtime.macClone function via the mc.ip parameter...

9.8CVSS0.01134EPSS
Exploits0References1
OSV
OSV
added 2025/12/23 11:7 a.m.14 views

CLSA-2025-1766488019 kernel: Fix of 63 CVEs

scsi: target: iscsi: Fix timeout on deleted connection CVE-2025-38075 - tls: wait for pending async decryptions if tlsstrpmsghold fails CVE-2025-40176 - cloneprivatemnt: make sure that caller has CAPSYSADMIN in the right userns CVE-2025-38499 - rcu: Fix rcureadunlock deadloop due to IRQ work...

7.8CVSS7.1AI score0.00618EPSS
Exploits4References1
Positive Technologies
Positive Technologies
added 2025/12/23 12:0 a.m.3 views

PT-2025-52770

Name of the Vulnerable Software and Affected Versions Linksys E5600 version 1.1.0.26 Description The Linksys E5600 router firmware version 1.1.0.26 contains a command injection issue in the runtime.macClone function. The issue is triggered via the mc.ip parameter. Recommendations Update to a newe...

9.8CVSS7.4AI score0.01134EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/12/23 12:0 a.m.7 views

Linksys E5600 安全漏洞

Linksys E5600 is a powerful, compact and reliable WiFi 5 router from Linksys, Inc. A security vulnerability exists in Linksys E5600 version V1.1.0.26, which originates from a command injection in the runtime.macClone function via the mc.ip parameter...

9.8CVSS7.4AI score0.01134EPSS
Exploits0References2
Rows per page
Query Builder