bnxt_en: Fix double DMA unmapping for XDP_REDIRECT

...

kernel: net/sched: taprio: extend minimum interval restriction to entire cycle too

In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: extend minimum interval restriction to entire cycle too It is possible for syzbot to side-step the restriction imposed by the blamed commit in the Fixes: tag, because the taprio UAPI permits a cycle-time...

net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb()

...

Unbreakable Enterprise kernel security update

4.14.35-2047.541.4.1 - vhost/scsi: null-ptr-dereference in vhostscsigetreq Haoran Zhang Orabug: 37137499 4.14.35-2047.541.4 - selftests: make order checking verbose in msgzerocopy selftest Zijian Zhang Orabug: 37063821 - selftests: fix OOM in msgzerocopy selftest Zijian Zhang Orabug: 37063821 -...

PT-2024-37419 · Robotware · Robotware

Name of the Vulnerable Software and Affected Versions: RobotWare versions prior to 6.15.06, except versions 6.10.10 and 6.13.07 Description: A vulnerability exists in the PROFINET stack included in RobotWare. This issue arises under specific conditions when a specially crafted message is processe...

The vulnerability of the Kernel-mode microprogramming driver for Intel Ethernet E800 series controllers in the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the Kernel-mode microprogramming driver for Intel Ethernet E800 series controllers in the Linux operating system is related to insufficient testing of unusual or exceptional states. Exploiting this vulnerability could allow a perpetrator to cause service failures...

CVE-2024-44610

PCAN-Ethernet Gateway FD before 1.3.0 and PCAN-Ethernet Gateway before 2.11.0 are vulnerable to Command injection via shell metacharacters in a Software Update to processing.php...

CVE-2024-44610

PCAN-Ethernet Gateway FD before 1.3.0 and PCAN-Ethernet Gateway before 2.11.0 are vulnerable to Command injection via shell metacharacters in a Software Update to processing.php...

CVE-2024-44610

PCAN-Ethernet Gateway FD before 1.3.0 and PCAN-Ethernet Gateway before 2.11.0 are vulnerable to Command injection via shell metacharacters in a Software Update to processing.php...

PT-2024-33835

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory disclosure issue has been identified in the Linux kernel, specifically in the lantiq etop driver. The problem occurs when applying padding to Ethernet frames, as the buffer is...

PEAK-System PCAN-Ethernet Gateway FD 安全漏洞

PEAK-System PCAN-Ethernet Gateway FD is an Ethernet gateway from PEAK-System, Germany. A security vulnerability exists in the PEAK-System PCAN-Ethernet Gateway FD that originates from a susceptibility to command injection attacks via shell metacharacters in the processing.php software update...

CVE-2024-44610

The PCAN-Ethernet Gateway FD (before version 1.3.0) and PCAN-Ethernet Gateway (before version 2.11.0) are vulnerable to command injection via shell metacharacters in the processing.php software update. An attacker with web interface credentials can execute arbitrary commands as the www-data user ...

CVE-2024-44610: Improper Neutralization of Special Elements used in a Command

PCAN-Ethernet Gateway FD before 1.3.0 and PCAN-Ethernet Gateway before 2.11.0 are vulnerable to Command injection via shell metacharacters in a Software Update to processing.php...

Exploit for Use After Free in Apple Macos

EN GenEtherExploit is a Proof-of-Concept PoC exploit for t...

PT-2024-41563

Уязвимость функции ice dpll init rclk pins модуля drivers/net/ethernet/intel/ice/ice dpll.c - драйвера поддержки сетевых адаптеров Ethernet Intel ядра операционной системы Linux связана с неосвобождением ресурса после истечения действительного срока его эксплуатирования. Эксплуатация уязвимости...

PT-2024-41549

Уязвимость функции ice sriov set msix vec count модуля drivers/net/ethernet/intel/ice/ice sriov.c драйвера поддержки сетевых адаптеров Ethernet Intel ядра операционной системы Linux связана с некорректным управлением ресурсом. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в...

PT-2024-31197

Name of the Vulnerable Software and Affected Versions PCAN-Ethernet Gateway FD versions prior to 1.3.0 PCAN-Ethernet Gateway versions prior to 2.11.0 Description The issue is related to Command injection via shell metacharacters in a Software Update to processing.php. This allows for potential...

SUSE CVE-2024-46854

In the Linux kernel, the following vulnerability has been resolved: net: dpaa: Pad packets to ETHZLEN When sending packets under 60 bytes, up to three bytes of the buffer following the data may be leaked. Avoid this by extending all packets to ETHZLEN, ensuring nothing is leaked in the padding...

DEBIAN-CVE-2024-46854

In the Linux kernel, the following vulnerability has been resolved: net: dpaa: Pad packets to ETHZLEN When sending packets under 60 bytes, up to three bytes of the buffer following the data may be leaked. Avoid this by extending all packets to ETHZLEN, ensuring nothing is leaked in the padding...

CVE-2024-20465

A vulnerability in the access control list ACL programming of Cisco IOS Software running on Cisco Industrial Ethernet 4000, 4010, and 5000 Series Switches could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to the incorrect handling of IPv4 ACLs o...