The vulnerability of ZyEE software in Wi-Fi amplifiers, subscriber terminals, DSL/Ethernet CPE routers allows a perpetrator to execute arbitrary commands.

The vulnerability of ZyEE software for Wi-Fi amplifiers, subscriber terminals, DSL/Ethernet CPE routers exists due to the lack of measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the zyUtilMailSend function in Wi-Fi amplifiers, subscriber terminals, DSL/Ethernet CPE routers allows a perpetrator to execute arbitrary commands.

The vulnerability of the zyUtilMailSend function in Wi-Fi amplifiers, subscriber terminals, DSL/Ethernet CPE routers exists due to the lack of measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

USN-7455-5: Linux kernel (AWS) vulnerabilities

Jann Horn discovered that the watchqueue event notification subsystem in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service system crash or escalate their privileges. CVE-2022-0995 Several security issues were discovered i...

USN-7455-5 linux-aws-5.15 vulnerabilities

Jann Horn discovered that the watchqueue event notification subsystem in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service system crash or escalate their privileges. CVE-2022-0995 Several security issues were discovered i...

PT-2025-22196

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been resolved, specifically in the mtk eth soc component of the Ethernet network driver. The problem occurs when the mtk poll rx function detects the MTK...

Ubuntu 24.04 LTS : Linux kernel (Azure, N-Series) vulnerabilities (USN-7468-1)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7468-1 advisory. Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker...

USN-7455-4: Linux kernel (Oracle) vulnerabilities

Jann Horn discovered that the watchqueue event notification subsystem in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service system crash or escalate their privileges. CVE-2022-0995 Several security issues were discovered i...

USN-7455-3 linux-intel-iot-realtime, linux-realtime vulnerabilities

Jann Horn discovered that the watchqueue event notification subsystem in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service system crash or escalate their privileges. CVE-2022-0995 Several security issues were discovered i...

USN-7455-1 linux, linux-aws, linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-gcp, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-igx, linux-oracle, linux-raspi vulnerabilities

Jann Horn discovered that the watchqueue event notification subsystem in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service system crash or escalate their privileges. CVE-2022-0995 Several security issues were discovered i...

USN-7455-1: Linux kernel vulnerabilities

Jann Horn discovered that the watchqueue event notification subsystem in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service system crash or escalate their privileges. CVE-2022-0995 Several security issues were discovered i...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-7455-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7455-1 advisory. Jann Horn discovered that the watchqueue event notification subsystem in the Linux kernel contained an out-of-bounds write vulnerability. A...

kernel: asix: fix uninit-value in asix_mdio_read()

In the Linux kernel, the following vulnerability has been resolved: asix: fix uninit-value in asixmdioread asixreadcmd may read less than sizeofsmsr bytes and in this case smsr will be uninitialized. Fail log: BUG: KMSAN: uninit-value in asixcheckhostenable drivers/net/usb/asixcommon.c:82 inline...

kernel: bonding: stop the device in bond_setup_by_slave()

In the Linux kernel, the following vulnerability has been resolved: bonding: stop the device in bondsetupbyslave Commit 9eed321cde22 "net: lapbether: only support ethernet devices" has been able to keep syzbot away from net/lapb, until today. In the following splat 1, the issue is that a lapbethe...

Vulnerability of the mlx5_cmd_init() function in the drivers/net/ethernet/mellanox/mlx5/core/cmd.c file – This is a driver for supporting Mellanox Ethernet network adapters in Linux operating systems. It allows a hacker to cause a service failure.

Vulnerability of the mlx5cmdinit function in the drivers/net/ethernet/mellanox/mlx5/core/cmd.c file – The Mellanox Ethernet network adapter driver for Linux operating systems is vulnerable due to a reliance on the NULL pointer dereferencing mechanism. Exploiting this vulnerability could allow an...

Vulnerability of the mlx5_coredestroy_cq() function in the drivers/net/ethernet/mellanox/mlx5/core/cq.c file – a driver for supporting Mellanox Ethernet network adapters in the Linux operating system, which allows an attacker to cause a service failure.

Vulnerability of the mlx5coredestroycq function in the drivers/net/ethernet/mellanox/mlx5/core/cq.c module – The drivers for Mellanox Ethernet network adapters in Linux operating systems are vulnerable to a memory leak before the last reference is freed. Exploiting this vulnerability could allow ...

Vulnerability of the iavf_init_module() function in the drivers/net/ethernet/intel/iavf/iavf_main.c module – This is a driver for supporting Ethernet network adapters in Linux kernel-based operating systems. It allows attackers to gain access to protected information.

The vulnerability of the iavfinitmodule function in the drivers/net/ethernet/intel/iavf/iavfmain.c module exists. This vulnerability in the Linux kernel’s Ethernet driver code allows attackers to access protected information...

Vulnerability of the qlcnic_83xx_add_rings() function in the drivers/net/ethernet/qlogic/qlcnic/qlcnic_83xx_hw.c module – A driver for supporting QLogic Ethernet network adapters in Linux kernels, which allows a hacker to cause service failure.

Vulnerability of the qlcnic83xxaddrings function in the drivers/net/ethernet/qlogic/qlcnic/qlcnic83xxhw.c module – The Linux operating system’s Ethernet adapter support driver is vulnerable due to a reliance on the NULL pointer pointer. Exploiting this vulnerability could allow an attacker to cau...

Vulnerability of the rvu_mbox_init() function in the drivers/net/ethernet/marvell/octeontx2/af/rvu.c file – This is a driver for supporting Ethernet adapter cards in Linux kernel-based operating systems. It allows an attacker to cause a service failure.

Vulnerability of the rvumboxinit function in the drivers/net/ethernet/marvell/octeontx2/af/rvu.c module – The Marvell Ethernet network adapter driver for Linux operating systems is vulnerable due to improper memory release before deleting the last reference memory leak. Exploiting this...

Vulnerability of the nfp_cpp_area_cache_add() function in the drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c file – a driver for supporting Ethernet network adapters in the Linux operating system, which allows an attacker to cause a service failure.

Vulnerability of the nfpcppareacacheadd function in the drivers/net/ethernet/netronome/nfp/nfpcore/nfpcppcore.c file – The Linux kernel’s Ethernet adapter support driver has a vulnerability related to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to caus...

Vulnerability of the hclgeFetchRegPfReg() function in the drivers/net/ethernet/hisilicon/hns3/hns3pf/hclgeRegs.c module – Linux kernel’s Ethernet adapter support driver, which allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the hclgeFetchRegPfReg function in the drivers/net/ethernet/hisilicon/hns3/hns3pf/hclgeRegCs.c module – The Linux kernel’s Ethernet adapter support driver has a vulnerability related to buffer overflow attacks. Exploiting this vulnerability could allow attackers to compromise the...