The vulnerability of the microprogrammed power switching equipment of Siemens SENTRON 3KC ATC6 Expansion Module Ethernet lies in the presence of undocumented configuration commands, which can be exploited by attackers to cause malfunctions during maintenance.

The vulnerability of the microprogrammed power switching software of Siemens SENTRON 3KC ATC6 Expansion Module Ethernet is related to the presence of undocumented configuration commands. Exploiting this vulnerability can allow a malicious actor to cause malfunctions in the service operation...

Ubuntu: Security Advisory (USN-6706-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6706-1 linux-oem-6.1 vulnerability

It was discovered that the Microchip USB Ethernet driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically proximate attacker could use this to cause a denial of service system crash...

USN-6706-1: Linux kernel (OEM) vulnerability

It was discovered that the Microchip USB Ethernet driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically proximate attacker could use this to cause a denial of service system crash...

SUSE CVE-2024-26635

In the Linux kernel, the following vulnerability has been resolved: llc: Drop support for ETHPTR8022. syzbot reported an uninit-value bug below. 0 llc supports ETHP8022 0x0004 and used to support ETHPTR8022 0x0011, and syzbot abused the latter to trigger the bug. write$tunr0,...

CVE-2024-26636

In the Linux kernel, the following vulnerability has been resolved: llc: make llcuisendmsg more robust against bonding changes syzbot was able to trick llcuisendmsg, allocating an skb with no headroom, but subsequently trying to push 14 bytes of Ethernet header 1 Like some others, llcuisendmsg...

DEBIAN-CVE-2024-26635

In the Linux kernel, the following vulnerability has been resolved: llc: Drop support for ETHPTR8022. syzbot reported an uninit-value bug below. 0 llc supports ETHP8022 0x0004 and used to support ETHPTR8022 0x0011, and syzbot abused the latter to trigger the bug. write$tunr0,...

UBUNTU-CVE-2024-26636

In the Linux kernel, the following vulnerability has been resolved: llc: make llcuisendmsg more robust against bonding changes syzbot was able to trick llcuisendmsg, allocating an skb with no headroom, but subsequently trying to push 14 bytes of Ethernet header 1 Like some others, llcuisendmsg...

UBUNTU-CVE-2024-26635

In the Linux kernel, the following vulnerability has been resolved: llc: Drop support for ETHPTR8022. syzbot reported an uninit-value bug below. 0 llc supports ETHP8022 0x0004 and used to support ETHPTR8022 0x0011, and syzbot abused the latter to trigger the bug. write$tunr0,...

CVE-2024-26636

CVE-2024-26636 : In the Linux kernel, the llc_ui_sendmsg() path could allocate an skb with insufficient headroom and then push an Ethernet header, triggering a bug path when the socket lock is reacquired. The fix reserves space with LL_RESERVED_SPACE(), re-checks all conditions after reacquiring ...

CVE-2024-26636 llc: make llc_ui_sendmsg() more robust against bonding changes

In the Linux kernel, the following vulnerability has been resolved: llc: make llcuisendmsg more robust against bonding changes syzbot was able to trick llcuisendmsg, allocating an skb with no headroom, but subsequently trying to push 14 bytes of Ethernet header 1 Like some others, llcuisendmsg...

CVE-2024-26636 llc: make llc_ui_sendmsg() more robust against bonding changes

In the Linux kernel, the following vulnerability has been resolved: llc: make llcuisendmsg more robust against bonding changes syzbot was able to trick llcuisendmsg, allocating an skb with no headroom, but subsequently trying to push 14 bytes of Ethernet header 1 Like some others, llcuisendmsg...

CVE-2024-26636

In the Linux kernel, the following vulnerability has been resolved: llc: make llcuisendmsg more robust against bonding changes syzbot was able to trick llcuisendmsg, allocating an skb with no headroom, but subsequently trying to push 14 bytes of Ethernet header 1 Like some others, llcuisendmsg...

The vulnerability of Cisco IOS XR’s Ethernet Layer 2 services allows a hacker to trigger a service failure.

The vulnerability of Cisco IOS XR’s Ethernet Layer 2 services is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted Ethernet frames...

PT-2024-8225

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an error in resource management in the Linux kernel's ethernet component. A patch was found in MediaTek's GPL-licensed SDK to resolve the issue, which involves...

[SECURITY] [DSA 5640-1] openvswitch security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5640-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 14, 2024 https://www.debian.org/security/faq -...

PT-2024-21540

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.7.0 Description The issue arises when the packet type ID field in the Ethernet header is either ETH P PRP or ETH P HSR, but it is not followed by an HSR tag. In such cases, the function hsr get skb sequence nr...

EulerOS Virtualization 2.10.0 : kernel (EulerOS-SA-2024-1381)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Improper access control in the IntelR Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an unauthenticate...

kernel: IGB driver inadequate buffer size for frames larger than MTU

A flaw was found in igbconfigurerxring in drivers/net/ethernet/intel/igb/igbmain.c in the IGB driver in the Linux kernel. An overflow of the contents from a packet that is too large will overflow into the kernel's ring buffer, leading to a system integrity issue...

CVE-2024-20318

A vulnerability in the Layer 2 Ethernet services of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the line card network processor to reset, resulting in a denial of service DoS condition. This vulnerability is due to the incorrect handling of specific Ethernet...