EUVD-2022-54773

In the Linux kernel, the following vulnerability has been resolved: bonding: fix missed rcu protection When removing the rcureadlock in bondethtoolgettsinfo as discussed 1, I didn't notice it could be called via setsockopt, which doesn't hold rcu lock, as syzbot pointed: stack backtrace: CPU: 0...

Vulnerability of the mvneta_ethtool_get_strings() function in the drivers/net/ethernet/marvell/mvneta.c module – This driver provides support for Ethernet network adapters from Marvell’s Linux kernel, which can be exploited by attackers to cause service failures.

Vulnerability of the mvnetaethtoolgetstrings function in the drivers/net/ethernet/marvell/mvneta.c module – The drivers for Marvell Ethernet network adapters in Linux operating systems are vulnerable due to a reliance on the NULL pointer dereferencing mechanism. Exploiting this vulnerability coul...

CVE-2022-49456

In the Linux kernel, the following vulnerability has been resolved: bonding: fix missed rcu protection When removing the rcureadlock in bondethtoolgettsinfo as discussed 1, I didn't notice it could be called via setsockopt, which doesn't hold rcu lock, as syzbot pointed: stack backtrace: CPU: 0...

CVE-2010-2478

Integer overflow in the ethtoolgetrxnfc function in net/core/ethtool.c in the Linux kernel before 2.6.33.7 on 32-bit platforms allows local users to cause a denial of service or possibly have unspecified other impact via an ETHTOOLGRXCLSRLALL ethtool command with a large info.rulecnt value that...