66 matches found
Linux Distros Unpatched Vulnerability : CVE-2024-44945
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink: Initialise extack before use in ACKs Add missing extack initialisation...
SUSE CVE-2025-38665
In the Linux kernel, the following vulnerability has been resolved: can: netlink: canchangelink: fix NULL pointer deref of struct canpriv::dosetmode Andrei Lalaev reported a NULL pointer deref when a CAN device is restarted from Bus Off and the driver does not implement the struct...
DEBIAN-CVE-2025-38665
In the Linux kernel, the following vulnerability has been resolved: can: netlink: canchangelink: fix NULL pointer deref of struct canpriv::dosetmode Andrei Lalaev reported a NULL pointer deref when a CAN device is restarted from Bus Off and the driver does not implement the struct...
AZL-73638 CVE-2025-38665 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: can: netlink: canchangelink: fix NULL pointer deref of struct canpriv::dosetmode Andrei Lalaev reported a NULL pointer deref when a CAN device is restarted from Bus Off and the driver does not implement the struct...
CVE-2025-38665 can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode
In the Linux kernel, the following vulnerability has been resolved: can: netlink: canchangelink: fix NULL pointer deref of struct canpriv::dosetmode Andrei Lalaev reported a NULL pointer deref when a CAN device is restarted from Bus Off and the driver does not implement the struct...
Azure Linux 3.0 Security Update: kernel (CVE-2024-45018)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45018 advisory. - In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: initialise extack...
CVE-2024-53212
In the Linux kernel, the following vulnerability has been resolved: netlink: fix false positive warning in extack during dumps Commit under fixes extended extack reporting to dumps. It works under normal conditions, because extack errors are usually reported during -start or the first -dump, it's...
SUSE CVE-2024-53212
In the Linux kernel, the following vulnerability has been resolved: netlink: fix false positive warning in extack during dumps Commit under fixes extended extack reporting to dumps. It works under normal conditions, because extack errors are usually reported during -start or the first -dump, it's...
DEBIAN-CVE-2024-53212
In the Linux kernel, the following vulnerability has been resolved: netlink: fix false positive warning in extack during dumps Commit under fixes extended extack reporting to dumps. It works under normal conditions, because extack errors are usually reported during -start or the first -dump, it's...
UBUNTU-CVE-2024-53212
In the Linux kernel, the following vulnerability has been resolved: netlink: fix false positive warning in extack during dumps Commit under fixes extended extack reporting to dumps. It works under normal conditions, because extack errors are usually reported during -start or the first -dump, it's...
CVE-2024-53212
In the Linux kernel, the following vulnerability has been resolved: netlink: fix false positive warning in extack during dumps Commit under fixes extended extack reporting to dumps. It works under normal conditions, because extack errors are usually reported during -start or the first -dump, it's...
CVE-2024-53212 netlink: fix false positive warning in extack during dumps
In the Linux kernel, the following vulnerability has been resolved: netlink: fix false positive warning in extack during dumps Commit under fixes extended extack reporting to dumps. It works under normal conditions, because extack errors are usually reported during -start or the first -dump, it's...
CVE-2024-53212
CVE-2024-53212 is a Linux kernel vulnerability where a false positive warning in netlink extack could occur during dumps. The fix reworks the validation by using the netlink message header (nlh) instead of scanning skb->data, addressing a scenario where a dump is initiated but not completed du...
CVE-2024-53212: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: netlink: fix false positive warning in extack during dumps Commit under fixes extended extack reporting to dumps. It works under normal conditions, because extack errors are usually reported during -start or the first -dump, it's...
kernel: netfilter: flowtable: initialise extack before use
A flaw was found in the Linux kernel's netfilter flowtable feature. A local attacker could exploit a missing initialization of the extack structure, leading to a denial of service. This vulnerability could allow an attacker with local access to crash the system...
PT-2024-35659
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been resolved in the Linux kernel related to netlink, specifically fixing a false positive warning in extack during dumps. The issue arises when the dump starts okay...
kernel: netfilter: flowtable: initialise extack before use
A flaw was found in the Linux kernel's netfilter flowtable feature. A local attacker could exploit a missing initialization of the extack structure, leading to a denial of service. This vulnerability could allow an attacker with local access to crash the system...
kernel: netfilter: flowtable: initialise extack before use
A flaw was found in the Linux kernel's netfilter flowtable feature. A local attacker could exploit a missing initialization of the extack structure, leading to a denial of service. This vulnerability could allow an attacker with local access to crash the system...
kernel: netfilter: flowtable: initialise extack before use
A flaw was found in the Linux kernel's netfilter flowtable feature. A local attacker could exploit a missing initialization of the extack structure, leading to a denial of service. This vulnerability could allow an attacker with local access to crash the system...