Oracle Linux 9 : kernel (ELSA-2025-3937)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3937 advisory. - ALSA: usb-audio: Fix out of bounds reads when finding clock sources CKI Backport Bot RHEL-86726 CVE-2024-53150 - gve: guard XSK operations on the existence of...

SUSE: Security Advisory (SUSE-SU-2025:0565-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-57932

A flaw was found in the Google Virtual Ethernet gve module in the Linux kernel. The eXpress Data Path XDP xmit Network Device Operation NDO callback does not properly check for an empty XDP queue, causing a divide-by-zero error or a NULL pointer dereference, resulting in a denial of service...

CVE-2024-57932

In the Linux kernel, the following vulnerability has been resolved: gve: guard XDP xmit NDO on existence of xdp queues In GVE, dedicated XDP queues only exist when an XDP program is installed and the interface is up. As such, the NDO XDP XMIT callback should return early if either of these...

CVE-2024-57932

creationtimestamp| type| source ---|---|--- 2025-01-21 12:04:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113866248271940250 2025-01-21 12:16:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgatfsnlt72j 2025-01-21 12:59:32+00:00| seen|...

CVE-2024-57932

CVE-2024-57932 is resolved in the Linux kernel. It concerns the GVE/XDP path: dedicated XDP queues exist only when an XDP program is loaded and the interface is up. The NDO XDP XMIT callback must return early if no XDP program is loaded or if the interface is down. Otherwise, priv->num_xdp_que...