PT-2025-4359

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.177, 6.1.127, 6.6.74, and 6.12.11 Description The issue is related to the gtp newlink function in the Linux kernel's drivers/net/gtp.c module. It incorrectly links a device to a list in dev netdev instead of...

PT-2024-41808

Уязвимость функции nsim pp hold write модуля drivers/net/netdevsim/netdev.c ядра операционной системы Linux связана с отсутствием проверки возвращаемого значения. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2024-41806

Уязвимость функции ionic dev teardown модуля drivers/net/ethernet/pensando/ionic/ionic dev.c драйвера поддержки сетевых адаптеров Ethernet Pensando ядра операционной системы Linux связана с неправильным контролем идентификаторов ресурсов «внедрение ресурсов». Эксплуатация уязвимости может позволи...

PT-2024-41794

Уязвимость функции oa tc6 prepare spi tx buf for tx skbs модуля drivers/net/ethernet/oa tc6.c драйвера поддержки сетевых адаптеров Ethernet ядра операционной системы Linux связана с ошибками синхронизации при использовании общего ресурса. Эксплуатация уязвимости может позволить нарушителю вызвать...

PT-2024-41635

Уязвимость функции virtnet enable queue pair модуля drivers/net/virtio net.c - драйвера поддержки сетевых устройств ядра операционной системы Linux связана с операциями с ресурсом после истечения его срока действия. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

The vulnerability of the macsec_free_netdev() function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the macsecfreenetdev function in the drivers/net/macsec.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

PT-2024-41809

Уязвимость функции ath12k htt print tx selfgen ac stats tlv модуля drivers/net/wireless/ath/ath12k/debugfs htt stats.c - драйвера поддержки адаптеров беспроводной связи Atheros/Qualcomm ядра операционной системы Linux связана с чтением за границами буфера. Эксплуатация уязвимости может позволить...

CVE-2024-50252

CVE-2024-50252 describes a memory leak in the Linux kernel mlxsw spectrum_ipip implementation when changing the remote IPv6 address of an ip6gre net device. The root cause is that the driver failed to add the new address to its hash table and did not remove the old one, leading to leaks and a war...

PT-2024-41553

Уязвимость функции idpf init hard reset модуля drivers/net/ethernet/intel/idpf/idpf lib.c - драйвера поддержки сетевых адаптеров Ethernet Intel ядра операционной системы Linux связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2024-41573

Уязвимость функции iwl mvm mac remove interface модуля drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c - драйвера поддержки адаптеров беспроводной связи Intel ядра операционной системы Linux связана с неосвобождением ресурса после истечения действительного срока его эксплуатирования. Эксплуатац...

CVE-2024-50033: Use of Uninitialized Resource

In the Linux kernel, the following vulnerability has been resolved: slip: make slhcremember more robust against malicious packets syzbot found that slhcremember was missing checks against malicious packets 1. slhcremember only checked the size of the packet was at least 20, which is not good...

PT-2024-10032

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an out-of-bounds access when iterating over PI structures in the Linux kernel. This is due to a loop not being properly bounded, potentially allowing access beyon...

PT-2024-33875

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: A vulnerability has been resolved in the Linux kernel related to the ppp async encode function. The issue occurs when pppoe sendmsg is called with a zero size, leading to ppp async encode bei...

CVE-2024-44999: Use of Uninitialized Resource

In the Linux kernel, the following vulnerability has been resolved: gtp: pull network headers in gtpdevxmit syzbot/KMSAN reported use of uninit-value in getdevxmit 1 We must make sure the IPv4 or Ipv6 header is pulled in skb-head before accessing fields in them. Use pskbinetmaypull to fix this...

CVE-2024-42148

In the Linux kernel, the following vulnerability has been resolved: bnx2x: Fix multiple UBSAN array-index-out-of-bounds Fix UBSAN warnings that occur when using a system with 32 physical cpu cores or more, or when the user defines a number of Ethernet queues greater than or equal to FPSBMAXE1x...

CVE-2024-42148 bnx2x: Fix multiple UBSAN array-index-out-of-bounds

In the Linux kernel, the following vulnerability has been resolved: bnx2x: Fix multiple UBSAN array-index-out-of-bounds Fix UBSAN warnings that occur when using a system with 32 physical cpu cores or more, or when the user defines a number of Ethernet queues greater than or equal to FPSBMAXE1x...

CVE-2024-42148 bnx2x: Fix multiple UBSAN array-index-out-of-bounds

In the Linux kernel, the following vulnerability has been resolved: bnx2x: Fix multiple UBSAN array-index-out-of-bounds Fix UBSAN warnings that occur when using a system with 32 physical cpu cores or more, or when the user defines a number of Ethernet queues greater than or equal to FPSBMAXE1x...

CVE-2024-42148: Improper Validation of Array Index

In the Linux kernel, the following vulnerability has been resolved: bnx2x: Fix multiple UBSAN array-index-out-of-bounds Fix UBSAN warnings that occur when using a system with 32 physical cpu cores or more, or when the user defines a number of Ethernet queues greater than or equal to FPSBMAXE1x...

PT-2024-7049

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a double free vulnerability in the ltq etop free channel function in the drivers/net/ethernet/lantiq etop.c module of the Linux kernel's Ethernet driver. This...

PT-2024-6772

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the swap endian function in the drivers/net/wireguard/allowedips.c module of the Linux kernel, which is associated with incorrect data reading. This can lead to...