CVE-2024-46799 net: ethernet: ti: am65-cpsw: Fix NULL dereference on XDP_TX

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw: Fix NULL dereference on XDPTX If number of TX queues are set to 1 we get a NULL pointer dereference during XDPTX. ethtool -L eth0 tx 1 ./xdp-trafficgen udp -A -a eth0 -t 2 Transmitting on eth0 ifinde...

CVE-2024-46799

CVE-2024-46799 — Linux kernel net: ethernet: ti: am65-cpsw : The issue is a NULL pointer dereference in am65_cpsw_ndo_xdp_xmit() that occurs when the number of TX queues is set to 1 during XDP_TX. The Astra Linux entry and canonical description confirm the root cause and the fix: use actual TX qu...

CVE-2024-46799 net: ethernet: ti: am65-cpsw: Fix NULL dereference on XDP_TX

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw: Fix NULL dereference on XDPTX If number of TX queues are set to 1 we get a NULL pointer dereference during XDPTX. ethtool -L eth0 tx 1 ./xdp-trafficgen udp -A -a eth0 -t 2 Transmitting on eth0 ifinde...

CVE-2024-46799

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw: Fix NULL dereference on XDPTX If number of TX queues are set to 1 we get a NULL pointer dereference during XDPTX. ethtool -L eth0 tx 1 ./xdp-trafficgen udp -A -a eth0 -t 2 Transmitting on eth0 ifinde...

OpenPLC 缓冲区错误漏洞

OpenPLC is an open source programmable logic controller from the individual developer Thiago Alves. It can provide low-cost industrial solutions for automation and research. A buffer error vulnerability exists in OpenPLC version b4702061dc14d1024856f71b4543298d77007b88, which stems from a false...

OpenPLC 代码问题漏洞

OpenPLC is an open source programmable logic controller from the individual developer Thiago Alves. It can provide low-cost industrial solutions for automation and research. A code issue vulnerability exists in OpenPLC version 16bf8bac1a36d95b73e7b8722d0edb8b9c5bb56a, which stems from multiple...

OpenPLC OpenPLC_v3 OpenPLC Runtime EtherNet/IP parser stack-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2024-2005 OpenPLC OpenPLCv3 OpenPLC Runtime EtherNet/IP parser stack-based buffer overflow vulnerability September 18, 2024 CVE Number CVE-2024-34026 SUMMARY A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser functionality...

OpenPLC OpenPLC_v3 OpenPLC Runtime EtherNet/IP parser invalid pointer dereference vulnerabilities

Talos Vulnerability Report TALOS-2024-2016 OpenPLC OpenPLCv3 OpenPLC Runtime EtherNet/IP parser invalid pointer dereference vulnerabilities September 18, 2024 CVE Number CVE-2024-39590,CVE-2024-39589 SUMMARY Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime...

PT-2024-28544 · Openplc · Openplc

Name of the Vulnerable Software and Affected Versions: OpenPLC v3 affected versions not specified Description: Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality. A specially crafted EtherNet/IP request can lead to denial of service...

PT-2024-27229 · Openplc · Openplc

Name of the Vulnerable Software and Affected Versions: OpenPLC v3 b4702061dc14d1024856f71b4543298d77007b88 Description: An out-of-bounds read issue exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality. A specially crafted network request can lead to denial of service. An attacker c...

OpenPLC 缓冲区错误漏洞

OpenPLC is an open source programmable logic controller from the individual developer Thiago Alves. It can provide low-cost industrial solutions for automation and research. OpenPLC suffers from a buffer error vulnerability that stems from a false comparison in the EtherNet/IP PCCC parsing...

OpenPLC OpenPLC_v3 OpenPLC Runtime EtherNet/IP PCCC out-of-bounds read vulnerability

Talos Vulnerability Report TALOS-2024-2004 OpenPLC OpenPLCv3 OpenPLC Runtime EtherNet/IP PCCC out-of-bounds read vulnerability September 18, 2024 CVE Number CVE-2024-36981,CVE-2024-36980 SUMMARY An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionalit...

OpenPLC 安全漏洞

OpenPLC is an open source programmable logic controller from the individual developer Thiago Alves. It can provide low-cost industrial solutions for automation and research. A security vulnerability exists in OpenPLC that stems from the EtherNet/IP parsing function mishandling specific requests,...

OpenPLC 代码问题漏洞

OpenPLC is an open source programmable logic controller from the individual developer Thiago Alves. It can provide low-cost industrial solutions for automation and research. A code issue vulnerability exists in OpenPLC version 16bf8bac1a36d95b73e7b8722d0edb8b9c5bb56a, which stems from multiple...

Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-7005-2)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7005-2 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to caus...

Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-7008-1)

"The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7008-1 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cau...

The vulnerability of Linux operating system’s AOE kernel driver, related to the use of memory after it is freed, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux operating system’s AOE kernel driver is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-7004-1)

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7004-1 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to caus...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2024-12618)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12618 advisory. - net: mana: Fix possible double free in error handling path Ma Ke Orabug: 36897038 CVE-2024-42069 - net: relax socket state check at accept time...

EulerOS 2.0 SP10 : kernel (EulerOS-SA-2024-2418)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : kernel: scsi: core: Put LLD module refcnt after SCSI device is releasedCVE-2021-47480 kernel: dm rq: don't queue request to blk-mq during DM...