Lucene search
+L

22 matches found

ATTACKERKB
ATTACKERKB
added yesterday3 views

CVE-2026-64110

In the Linux kernel, the following vulnerability has been resolved: igc: fix potential skb leak in igcfpexmitsmdframe When igcfpeinittxdescriptor fails, no one takes care of an allocated skb, leaking it. 1 Use devkfreeskbany on failure. Tested on an I226 adapter with the following command, while...

5.3AI score
Exploits0References4Affected Software1
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.29 views

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: ntbnetdev: Use devkfreeskbany in interrupt context. TX/RX callback handlers ntbnetdevtxhandler, ntbnetdevrxhandler can be called in interrupt context via the DMA framework after the respective DMA operations are completed...

5.5CVSS5.9AI score0.00149EPSS
Exploits0References1
NVD
NVD
added 2026/04/24 3:16 p.m.5 views

CVE-2026-31658

In the Linux kernel, the following vulnerability has been resolved: net: altera-tse: fix skb leak on DMA mapping error in tsestartxmit When dmamapsingle fails in tsestartxmit, the function returns NETDEVTXOK without freeing the skb. Since NETDEVTXOK tells the stack the packet was consumed, the sk...

5.5CVSS0.0012EPSS
Exploits0References10
OSV
OSV
added 2026/04/24 3:16 p.m.6 views

DEBIAN-CVE-2026-31658

In the Linux kernel, the following vulnerability has been resolved: net: altera-tse: fix skb leak on DMA mapping error in tsestartxmit When dmamapsingle fails in tsestartxmit, the function returns NETDEVTXOK without freeing the skb. Since NETDEVTXOK tells the stack the packet was consumed, the sk...

5.5CVSS5.2AI score0.0012EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/04/21 12:0 a.m.11 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-006950)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006950 advisory. In the Linux kernel, the following vulnerability has been resolved: ntbnetdev: Use devkfreeskbany in interrupt context TX/RX callback handlers ntbnetdevtxhandler,...

5.5CVSS5.9AI score0.00149EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/01/27 12:0 a.m.4 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005163)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005163 advisory. In the Linux kernel, the following vulnerability has been resolved: be2net: fix potential memory leak in bexmit The bexmit returns NETDEVTXOK without freeing skb in...

5.5CVSS6.8AI score0.00253EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/10/08 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2022-50476

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntbnetdev: Use devkfreeskbany in interrupt context TX/RX callback handlers ntbnetdevtxhandler, ntbnetdevrxhandler can be called in interrupt context via the DMA...

5.5CVSS5.7AI score0.00149EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2025/10/07 1:22 a.m.5 views

SUSE CVE-2022-50476

In the Linux kernel, the following vulnerability has been resolved: ntbnetdev: Use devkfreeskbany in interrupt context TX/RX callback handlers ntbnetdevtxhandler, ntbnetdevrxhandler can be called in interrupt context via the DMA framework when the respective DMA operations have completed. As such...

5.5CVSS6.5AI score0.00149EPSS
Exploits0References3
NVD
NVD
added 2025/10/04 4:15 p.m.8 views

CVE-2022-50476

In the Linux kernel, the following vulnerability has been resolved: ntbnetdev: Use devkfreeskbany in interrupt context TX/RX callback handlers ntbnetdevtxhandler, ntbnetdevrxhandler can be called in interrupt context via the DMA framework when the respective DMA operations have completed. As such...

5.5CVSS0.00149EPSS
Exploits0References9
OSV
OSV
added 2025/10/04 4:15 p.m.4 views

UBUNTU-CVE-2022-50476

In the Linux kernel, the following vulnerability has been resolved: ntbnetdev: Use devkfreeskbany in interrupt context TX/RX callback handlers ntbnetdevtxhandler, ntbnetdevrxhandler can be called in interrupt context via the DMA framework when the respective DMA operations have completed. As such...

5.5CVSS5.9AI score0.00149EPSS
Exploits0References12
Cvelist
Cvelist
added 2025/10/04 3:16 p.m.11 views

CVE-2022-50476 ntb_netdev: Use dev_kfree_skb_any() in interrupt context

In the Linux kernel, the following vulnerability has been resolved: ntbnetdev: Use devkfreeskbany in interrupt context TX/RX callback handlers ntbnetdevtxhandler, ntbnetdevrxhandler can be called in interrupt context via the DMA framework when the respective DMA operations have completed. As such...

0.00149EPSS
Exploits0References9
BDU FSTEC
BDU FSTEC
added 2025/02/26 12:0 a.m.6 views

The vulnerability of the dev_kfree_skb_any() function (drivers/net/ethernet/google/gve/gve_rx_dqo.c) in the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the devkfreeskbany function drivers/net/ethernet/google/gve/gverxdqo.c in the Linux kernel is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00253EPSS
Exploits0References17Affected Software11
OSV
OSV
added 2024/11/07 10:15 a.m.2 views

DEBIAN-CVE-2024-50167

In the Linux kernel, the following vulnerability has been resolved: be2net: fix potential memory leak in bexmit The bexmit returns NETDEVTXOK without freeing skb in case of bexmitenqueue fails, add devkfreeskbany to fix it...

5.5CVSS5.7AI score0.00253EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/07/30 7:46 a.m.23 views

CVE-2024-42108 net: rswitch: Avoid use-after-free in rswitch_poll()

In the Linux kernel, the following vulnerability has been resolved: net: rswitch: Avoid use-after-free in rswitchpoll The use-after-free is actually in rswitchtxfree, which is inlined in rswitchpoll. Since skb and gq-skbsgq-dirty are in fact the same pointer, the skb is first freed using...

6.9AI score0.00232EPSS
Exploits0References3
NVD
NVD
added 2024/07/12 1:15 p.m.17 views

CVE-2024-40937

In the Linux kernel, the following vulnerability has been resolved: gve: Clear napi-skb before devkfreeskbany gverxfreeskb incorrectly leaves napi-skb referencing an skb after it is freed with devkfreeskbany. This can result in a subsequent call to napigetfrags returning a dangling pointer. Fix...

5.5CVSS0.00253EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2024/07/12 12:25 p.m.44 views

CVE-2024-40937

In the Linux kernel, the following vulnerability has been resolved: gve: Clear napi-skb before devkfreeskbany gverxfreeskb incorrectly leaves napi-skb referencing an skb after it is freed with devkfreeskbany. This can result in a subsequent call to napigetfrags returning a dangling pointer. Fix...

5.5CVSS5.6AI score0.00253EPSS
Exploits0
Cvelist
Cvelist
added 2024/07/12 12:25 p.m.33 views

CVE-2024-40937 gve: Clear napi->skb before dev_kfree_skb_any()

In the Linux kernel, the following vulnerability has been resolved: gve: Clear napi-skb before devkfreeskbany gverxfreeskb incorrectly leaves napi-skb referencing an skb after it is freed with devkfreeskbany. This can result in a subsequent call to napigetfrags returning a dangling pointer. Fix...

0.00253EPSS
Exploits0References5
CVE
CVE
added 2024/07/12 12:25 p.m.124 views

CVE-2024-40937

CVE-2024-40937 refers to a Linux kernel vulnerability in the gve driver where napi->skb was not cleared before freeing the skb with dev_kfree_skb_any(), potentially leaving a dangling napi pointer returned by napi_get_frags. The fix clears napi->skb before the skb is freed. Connected docume...

5.5CVSS6.5AI score0.00253EPSS
Exploits0References6Affected Software1
NVD
NVD
added 2024/04/28 1:15 p.m.15 views

CVE-2022-48637

In the Linux kernel, the following vulnerability has been resolved: bnxt: prevent skb UAF after handing over to PTP worker When reading the timestamp is required bnxttxint hands over the ownership of the completed skb to the PTP worker. The skb should not be used afterwards, as the worker may run...

7.8CVSS7.4AI score0.00227EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2024/04/28 1:15 p.m.19 views

CVE-2022-48637

In the Linux kernel, the following vulnerability has been resolved: bnxt: prevent skb UAF after handing over to PTP worker When reading the timestamp is required bnxttxint hands over the ownership of the completed skb to the PTP worker. The skb should not be used afterwards, as the worker may run...

7.8CVSS6.4AI score0.00227EPSS
Exploits0References5
Rows per page
Query Builder