Lucene search
+L

1034 matches found

OSV
OSV
•added 2024/09/13 6:15 a.m.•10 views

DEBIAN-CVE-2024-46679

In the Linux kernel, the following vulnerability has been resolved: ethtool: check device is present when getting link settings A sysfs reader can race with a device reset or removal, attempting to read device state when the device is not actually present. eg: exception RIP: qedgetcurrentlink+17 ...

4.7CVSS5.6AI score0.00246EPSS
SaveExploits0References1
OSV
OSV
•added 2024/09/13 6:15 a.m.•15 views

UBUNTU-CVE-2024-46679

In the Linux kernel, the following vulnerability has been resolved: ethtool: check device is present when getting link settings A sysfs reader can race with a device reset or removal, attempting to read device state when the device is not actually present. eg: exception RIP: qedgetcurrentlink+17 ...

4.7CVSS6.1AI score0.00246EPSS
SaveExploits0References26
Debian CVE
Debian CVE
•added 2024/09/13 5:29 a.m.•29 views

CVE-2024-46679

In the Linux kernel, the following vulnerability has been resolved: ethtool: check device is present when getting link settings A sysfs reader can race with a device reset or removal, attempting to read device state when the device is not actually present. eg: exception RIP: qedgetcurrentlink+17 ...

4.7CVSS5.6AI score0.00246EPSS
SaveExploits0
Cvelist
Cvelist
•added 2024/09/13 5:29 a.m.•52 views

CVE-2024-46679 ethtool: check device is present when getting link settings

In the Linux kernel, the following vulnerability has been resolved: ethtool: check device is present when getting link settings A sysfs reader can race with a device reset or removal, attempting to read device state when the device is not actually present. eg: exception RIP: qedgetcurrentlink+17 ...

0.00246EPSS
SaveExploits0References7
CVE
CVE
•added 2024/09/13 5:29 a.m.•180 views

CVE-2024-46679

CVE-2024-46679 (Linux kernel) : A race between sysfs reading of ethtool link settings and device removal can read state when the device is not present, causing a crash. The fix moves a device-presence check into ethtool (and related callers) to ensure link settings are only shown when the device ...

4.7CVSS5.9AI score0.00246EPSS
SaveExploits0References12Affected Software1
Vulnrichment
Vulnrichment
•added 2024/09/13 5:29 a.m.•36 views

CVE-2024-46679 ethtool: check device is present when getting link settings

In the Linux kernel, the following vulnerability has been resolved: ethtool: check device is present when getting link settings A sysfs reader can race with a device reset or removal, attempting to read device state when the device is not actually present. eg: exception RIP: qedgetcurrentlink+17 ...

6.8AI score0.00246EPSS
SaveExploits0References7
OSV
OSV
•added 2024/09/13 5:29 a.m.•28 views

CVE-2024-46679 ethtool: check device is present when getting link settings

In the Linux kernel, the following vulnerability has been resolved: ethtool: check device is present when getting link settings A sysfs reader can race with a device reset or removal, attempting to read device state when the device is not actually present. eg: exception RIP: qedgetcurrentlink+17 ...

6AI score
SaveExploits0References15
CNNVD
CNNVD
•added 2024/09/13 12:00 a.m.•8 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a failure of the ethtool component to check for the presence of a device when fetching link settings...

4.7CVSS6.3AI score0.00246EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/13 12:00 a.m.•5 views

CVE-2024-46679: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ethtool: check device is present when getting link settings A sysfs reader can race with a device reset or removal, attempting to read device state when the device is not actually present. eg: exception RIP: qedgetcurrentlink+17 ...

4.7CVSS5.6AI score0.00246EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/09/13 12:00 a.m.•104 views

Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-7005-2)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7005-2 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to caus...

9.8CVSS7AI score0.02701EPSS
SaveExploits3References218
BDU FSTEC
BDU FSTEC
•added 2024/08/27 12:00 a.m.•14 views

The vulnerability of the find_compatible_node() function in the ethtool component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the findcompatiblenode function in the ethtool component of the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.8AI score0.00211EPSS
SaveExploits0References8Affected Software2
Positive Technologies
Positive Technologies
•added 2024/08/26 12:00 a.m.•3 views

PT-2024-32107

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A sysfs reader can race with a device reset or removal, attempting to read device state when the device is not actually present. This issue is related to the ethtool functionality,...

4.7CVSS5.7AI score0.00246EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/08/21 12:00 a.m.•14 views

PT-2024-32185

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.52 Description The issue arises when ethtool callbacks are executed while a reset is in progress, attempting to access deleted resources. This can result in a NULL pointer dereference. The reproduction steps...

5.5CVSS5.7AI score0.0024EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/08/20 12:00 a.m.•6 views

PT-2024-32206

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference issue has been resolved in the Linux kernel. The issue occurs when the number of TX queues is set to 1, resulting in a NULL pointer dereference during XDP TX...

7.5CVSS5.5AI score0.00443EPSS
SaveExploits0References19
SUSE CVE
SUSE CVE
•added 2024/08/18 2:01 a.m.•11 views

SUSE CVE-2024-43836

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: pse-pd: Fix possible null-deref Fix a possible null dereference when a PSE supports both c33 and PoDL, but only one of the netlink attributes is specified. The c33 or PoDL PSE capabilities are already validated in t...

5.5CVSS6.5AI score0.0018EPSS
SaveExploits0References3
NVD
NVD
•added 2024/08/17 10:15 a.m.•44 views

CVE-2024-43836

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: pse-pd: Fix possible null-deref Fix a possible null dereference when a PSE supports both c33 and PoDL, but only one of the netlink attributes is specified. The c33 or PoDL PSE capabilities are already validated in t...

5.5CVSS0.0018EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2024/08/17 10:15 a.m.•17 views

CVE-2024-43836

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: pse-pd: Fix possible null-deref Fix a possible null dereference when a PSE supports both c33 and PoDL, but only one of the netlink attributes is specified. The c33 or PoDL PSE capabilities are already validated in t...

5.5CVSS5.9AI score0.0018EPSS
SaveExploits0References4
OSV
OSV
•added 2024/08/17 10:15 a.m.•17 views

UBUNTU-CVE-2024-43836

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: pse-pd: Fix possible null-deref Fix a possible null dereference when a PSE supports both c33 and PoDL, but only one of the netlink attributes is specified. The c33 or PoDL PSE capabilities are already validated in t...

5.5CVSS5.9AI score0.0018EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2024/08/17 10:15 a.m.•39 views

CVE-2024-43834

In the Linux kernel, the following vulnerability has been resolved: xdp: fix invalid wait context of pagepooldestroy If the driver uses a page pool, it creates a page pool with pagepoolcreate. The reference count of page pool is 1 as default. A page pool will be destroyed only when a reference...

5.5CVSS5.9AI score0.00247EPSS
SaveExploits0References18
Cvelist
Cvelist
•added 2024/08/17 9:21 a.m.•40 views

CVE-2024-43836 net: ethtool: pse-pd: Fix possible null-deref

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: pse-pd: Fix possible null-deref Fix a possible null dereference when a PSE supports both c33 and PoDL, but only one of the netlink attributes is specified. The c33 or PoDL PSE capabilities are already validated in t...

0.0018EPSS
SaveExploits0References2
Rows per page
Query Builder