USN-7276-1: Linux kernel vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

The vulnerability of the igb component in the Linux operating system’s kernel allows a hacker to gain elevated privileges within the system.

The vulnerability of the igb component in the Linux operating system’s kernel is related to an operation that goes beyond the memory buffer boundaries within the igbvfresetmsg function. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...

CVE-2024-39286

Incorrect execution-assigned permissions in the Linux kernel mode driver for the IntelR 800 Series Ethernet Driver before version 1.15.4 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2024-36274

Out-of-bounds write in the IntelR 800 Series Ethernet Driver for IntelR Ethernet Adapter Complete Driver Pack before versions 29.1 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-39286

Incorrect execution-assigned permissions in the Linux kernel mode driver for the IntelR 800 Series Ethernet Driver before version 1.15.4 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2024-36274

Out-of-bounds write in the IntelR 800 Series Ethernet Driver for IntelR Ethernet Adapter Complete Driver Pack before versions 29.1 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-36274

CVE-2024-36274 describes an out-of-bounds write in the Intel 800 Series Ethernet Driver used by the Intel Ethernet Adapter Complete Driver Pack before version 29.1, which may allow an unauthenticated user to cause a denial of service via adjacent access. Multiple sources corroborate: Intel adviso...

CVE-2024-36274

Out-of-bounds write in the IntelR 800 Series Ethernet Driver for IntelR Ethernet Adapter Complete Driver Pack before versions 29.1 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-39286

The CVE-2024-39286 issue affects the Intel® 800 Series Ethernet Linux Kernel Mode Driver prior to version 1.15.4, caused by incorrect execution‑assigned permissions. A locally authenticated user could potentially disclose information via local access. Intel’s advisory (INTEL-SA-01236) confirms mi...

CVE-2024-39286

Incorrect execution-assigned permissions in the Linux kernel mode driver for the IntelR 800 Series Ethernet Driver before version 1.15.4 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2024-39286

Incorrect execution-assigned permissions in the Linux kernel mode driver for the IntelR 800 Series Ethernet Driver before version 1.15.4 may allow an authenticated user to potentially enable information disclosure via local access...

Intel 800 Series Ethernet Driver 安全漏洞

Intel 800 Series Ethernet Driver is a driver from Intel Corporation USA. A security vulnerability exists in Intel 800 Series Ethernet Driver versions prior to 1.15.4, which arises from the implementation of incorrectly assigned privileges that could allow an authenticated user to disclose...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Networks: Ethernet: lantiqetop – fixed memory disclosure issues. When padding packets, the buffer is not zeroed, resulting in memory disclosure. The affected data is visible on the network. This patch uses skbputpadto to properly...

PT-2025-6661 · Intel · Intel 800 Series Ethernet Driver

Name of the Vulnerable Software and Affected Versions: IntelR 800 Series Ethernet Driver versions prior to 1.15.4 Description: The issue is related to incorrect execution-assigned permissions in the Linux kernel mode driver. This may allow an authenticated user to potentially enable information...

PT-2025-6670 · Intel · Intel Ethernet Connection I219 Series

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet Connection I219 Series versions prior to 12.19.1.39 Description: The issue is related to improper access control in some drivers, which may allow an authenticated user to potentially enable denial of service via local access...

PT-2025-6647 · Intel · Intel 800 Series Ethernet Driver

Name of the Vulnerable Software and Affected Versions: IntelR 800 Series Ethernet Driver for IntelR Ethernet Adapter Complete Driver Pack versions prior to 29.1 Description: The issue is related to an out-of-bounds write in the IntelR 800 Series Ethernet Driver. This may allow an unauthenticated...

Intel 800 Series Ethernet Driver Software - Lenovo Support US

No description provided...

CVE-2024-56788

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: oatc6: fix tx skb race condition between reference pointers There are two skb pointers to manage tx skb's enqueued from n/w stack. waitingtxskb pointer points to the tx skb which needs to be processed and...

The vulnerability of the hns_dsaf_ge_srst_by_port() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the function hnsdsafgesrstbyport in the Linux kernel’s drivers/net/ethernet/hisilicon/hns/hnsdsafmisc.c module is related to memory access beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the e100_xmit_prepare() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the e100xmitprepare function in the drivers/net/ethernet/intel/e100.c module of the Linux kernel is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...