Lucene search
K

23 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.4 views

Astra Linux - уязвимость в linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: gve: Prevent ethtool operations after shutdown A crash can occur if an ethtool operation is invoked after the shutdown function is called. shutdown is invoked during system shutdown to stop DMA operations without performing...

5.5CVSS6.5AI score0.00026EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.3 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: ethtool: do not perform operations on net devices being unregistered There is a short period between a net device starts to be unregistered and when it is actually gone. In that time frame ethtool operations could still be...

7.8CVSS6.3AI score0.00016EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/05/01 7:33 p.m.2 views

CVE-2026-31695

A flaw was found in the Linux kernel's virtwifi component. A local user can exploit a race condition during the unregistration of a virtwifi network device, where its parent pointer might refer to freed memory during ethtool operations. This use-after-free vulnerability can lead to system...

7.8CVSS5.8AI score0.00015EPSS
Exploits0References4
NVD
NVD
added 2026/05/01 2:16 p.m.2 views

CVE-2026-31695

In the Linux kernel, the following vulnerability has been resolved: wifi: virtwifi: remove SETNETDEVDEV to avoid use-after-free Currently we execute SETNETDEVDEVdev, &priv-lowerdev-dev for the virtwifi net devices. However, unregistering a virtwifi device in netdevruntodo can happen together with...

7.8CVSS0.00015EPSS
Exploits0References7
CVE
CVE
added 2026/05/01 1:53 p.m.6 views

CVE-2026-31695

CVE-2026-31695 is a Linux kernel issue affecting the virt_wifi driver. The root cause is a race during unregistration where a device’s parent pointer could reference freed memory, causing a use-after-free during ethtool operations. The vulnerability arises from using SET_NETDEV_DEV(dev, &priv-&gt...

7.8CVSS5.8AI score0.00015EPSS
Exploits0References7Affected Software1
CNNVD
CNNVD
added 2026/05/01 12:0 a.m.4 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the use of the virtwifi device to reallocate memory after release. This could lead to access to...

7.8CVSS5.8AI score0.00015EPSS
Exploits0References1
NVD
NVD
added 2025/12/24 11:15 a.m.1 views

CVE-2023-54037

In the Linux kernel, the following vulnerability has been resolved: ice: prevent NULL pointer deref during reload Calling ethtool during reload can lead to call trace, because VSI isn't configured for some time, but netdev is alive. To fix it add rtnl lock for VSI deconfig and config. Set...

0.0003EPSS
Exploits0References2
CVE
CVE
added 2025/12/24 10:56 a.m.4 views

CVE-2023-54037

CVE-2023-54037 involves the Linux kernel ice driver where ethtool reload can trigger a NULL pointer deref if VSI is not yet configured. The fix adds a rtnl lock around VSI deconfig/config, zeros num_q_vectors after freeing, guards tx/rx_rings in ring-related ethtool ops, and ensures proper unroll...

5.8AI score0.0003EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/11/05 12:0 a.m.2 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989155)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989155 advisory. In the Linux kernel, the following vulnerability has been resolved: ethtool: do not perform operations on net devices being unregistered There is a short period...

7.8CVSS5.9AI score0.00016EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/09/08 11:23 p.m.1 views

SUSE CVE-2025-38735

In the Linux kernel, the following vulnerability has been resolved: gve: prevent ethtool ops after shutdown A crash can occur if an ethtool operation is invoked after shutdown is called. shutdown is invoked during system shutdown to stop DMA operations without performing expensive deallocations. ...

5.5CVSS6.4AI score0.00026EPSS
Exploits0References22
Microsoft CVE
Microsoft CVE
added 2025/09/07 1:4 a.m.2 views

gve: prevent ethtool ops after shutdown

...

5.5CVSS6.8AI score0.00026EPSS
Exploits0
OSV
OSV
added 2025/09/05 6:15 p.m.3 views

DEBIAN-CVE-2025-38735

In the Linux kernel, the following vulnerability has been resolved: gve: prevent ethtool ops after shutdown A crash can occur if an ethtool operation is invoked after shutdown is called. shutdown is invoked during system shutdown to stop DMA operations without performing expensive deallocations. ...

5.5CVSS5.3AI score0.00026EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/09/05 5:20 p.m.6 views

CVE-2025-38735 gve: prevent ethtool ops after shutdown

In the Linux kernel, the following vulnerability has been resolved: gve: prevent ethtool ops after shutdown A crash can occur if an ethtool operation is invoked after shutdown is called. shutdown is invoked during system shutdown to stop DMA operations without performing expensive deallocations. ...

0.00026EPSS
Exploits0References5
CVE
CVE
added 2025/09/05 5:20 p.m.21 views

CVE-2025-38735

The CVE-2025-38735 entry concerns the Linux kernel gve driver. A crash could occur if an ethtool operation is issued after shutdown() has begun, because shutdown() tears down internal data structures and ethtool IOCTLs could dereference freed/NULL pointers, triggering a kernel panic. The document...

5.5CVSS5.8AI score0.00026EPSS
Exploits0References7Affected Software1
Debian CVE
Debian CVE
added 2025/09/05 5:20 p.m.3 views

CVE-2025-38735

In the Linux kernel, the following vulnerability has been resolved: gve: prevent ethtool ops after shutdown A crash can occur if an ethtool operation is invoked after shutdown is called. shutdown is invoked during system shutdown to stop DMA operations without performing expensive deallocations. ...

5.5CVSS5.3AI score0.00026EPSS
Exploits0
CNNVD
CNNVD
added 2025/09/05 12:0 a.m.2 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the possibility that gve may perform ethtool operations after shutdown...

5.5CVSS6AI score0.00026EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2025/06/19 3:43 a.m.2 views

SUSE CVE-2022-50054

In the Linux kernel, the following vulnerability has been resolved: iavf: Fix NULL pointer dereference in iavfgetlinkksettings Fix possible NULL pointer dereference, due to freeing of adapter-vfres in iavfinitgetresources. Previous commit introduced a regression, where receiving...

5.5CVSS6AI score0.00074EPSS
Exploits0References6
OSV
OSV
added 2025/06/18 11:15 a.m.0 views

UBUNTU-CVE-2022-50054

In the Linux kernel, the following vulnerability has been resolved: iavf: Fix NULL pointer dereference in iavfgetlinkksettings Fix possible NULL pointer dereference, due to freeing of adapter-vfres in iavfinitgetresources. Previous commit introduced a regression, where receiving...

5.5CVSS6AI score0.00074EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2021-47517

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ethtool: do not perform operations on net devices being unregistered There is a short period...

7.8CVSS5.5AI score0.00016EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/02/27 12:0 a.m.2 views

PT-2025-8800 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue is related to the kvzalloc node function not performing a runtime check on the node argument, which can lead to...

7.8CVSS7.5AI score0.00279EPSS
Exploits3References814
Rows per page
Query Builder