Lucene search
+L

60 matches found

Positive Technologies
Positive Technologies
added 2025/05/01 12:0 a.m.12 views

PT-2025-18534 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the MHI driver of the Linux kernel. The driver registers a network device without setting the needs free netdev flag and fails to call free...

5AI score0.00164EPSS
Exploits0References12
SUSE CVE
SUSE CVE
added 2025/04/18 11:19 p.m.3 views

SUSE CVE-2025-22116

In the Linux kernel, the following vulnerability has been resolved: idpf: check error for registernetdev on init Current init logic ignores the error code from registernetdev, which will cause WARNON on attempt to unregister it, if there was one, and there is no info for the user that the creatio...

2.3CVSS7.6AI score0.00188EPSS
Exploits0References18
Vulnrichment
Vulnrichment
added 2025/03/27 4:43 p.m.2 views

CVE-2023-53028 Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()"

In the Linux kernel, the following vulnerability has been resolved: Revert "wifi: mac80211: fix memory leak in ieee80211ifadd" This reverts commit 13e5afd3d773c6fc6ca2b89027befaaaa1ea7293. ieee80211iffree is already called from freenetdevndev because ndev-privdestructor == ieee80211iffree syzbot...

6.1AI score0.00176EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/02/28 2:22 a.m.4 views

SUSE CVE-2025-21715

In the Linux kernel, the following vulnerability has been resolved: net: davicom: fix UAF in dm9000drvremove dm is netdev private data and it cannot be used after freenetdev call. Using dm after freenetdev can cause UAF bug. Fix it by moving freenetdev at the end of the function. This is similar ...

5.5CVSS7.7AI score0.00205EPSS
Exploits0References13
OSV
OSV
added 2025/02/27 2:15 a.m.1 views

DEBIAN-CVE-2025-21715

In the Linux kernel, the following vulnerability has been resolved: net: davicom: fix UAF in dm9000drvremove dm is netdev private data and it cannot be used after freenetdev call. Using dm after freenetdev can cause UAF bug. Fix it by moving freenetdev at the end of the function. This is similar ...

7.8CVSS5.7AI score0.00205EPSS
Exploits0References1
OSV
OSV
added 2025/02/27 2:15 a.m.8 views

UBUNTU-CVE-2025-21715

In the Linux kernel, the following vulnerability has been resolved: net: davicom: fix UAF in dm9000drvremove dm is netdev private data and it cannot be used after freenetdev call. Using dm after freenetdev can cause UAF bug. Fix it by moving freenetdev at the end of the function. This is similar ...

7.8CVSS6.2AI score0.00205EPSS
Exploits0References58
BDU FSTEC
BDU FSTEC
added 2024/12/03 12:0 a.m.9 views

The vulnerability of the macsec_free_netdev() function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the macsecfreenetdev function in the drivers/net/macsec.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

7.8CVSS6.8AI score0.0022EPSS
Exploits0References15Affected Software5
OSV
OSV
added 2024/08/22 2:15 a.m.2 views

DEBIAN-CVE-2022-48914

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: destroy queues before realnumtxqueues is zeroed xennetdestroyqueues relies on info-netdev-realnumtxqueues to delete queues. Since d7dac083414eb5bb99a6d2ed53dc2c1b405224e5 "net-sysfs: update the queue counts in the...

5.5CVSS5.2AI score0.00215EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2024/08/18 2:2 a.m.3 views

SUSE CVE-2024-42282

In the Linux kernel, the following vulnerability has been resolved: net: mediatek: Fix potential NULL pointer dereference in dummy netdevice handling Move the freeing of the dummy netdevice from mtkfreedev to mtkremove. Previously, if allocnetdevdummy failed in mtkprobe, eth-dummydev would be NUL...

5.5CVSS6.4AI score0.00193EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/08/17 12:0 a.m.7 views

PT-2024-29833 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential NULL pointer dereference in dummy net device handling has been resolved. The issue occurred when alloc netdev dummy failed in mtk probe, causing eth-dummy dev to be NULL. T...

5.5CVSS6.4AI score0.00193EPSS
Exploits0References11
OSV
OSV
added 2024/05/21 3:15 p.m.1 views

DEBIAN-CVE-2021-47310

In the Linux kernel, the following vulnerability has been resolved: net: ti: fix UAF in tlanremoveone priv is netdev private data and it cannot be used after freenetdev call. Using priv after freenetdev can cause UAF bug. Fix it by moving freenetdev at the end of the function...

7.8CVSS5.4AI score0.00252EPSS
Exploits0References1
OSV
OSV
added 2024/05/21 3:15 p.m.4 views

DEBIAN-CVE-2021-47237

In the Linux kernel, the following vulnerability has been resolved: net: hamradio: fix memory leak in mkissclose My local syzbot instance hit memory leak in mkissopen1. The problem was in missing freenetdev in mkissclose. In mkissopen netdevice is allocated and then registered, but in mkissclose...

5.5CVSS5.2AI score0.00226EPSS
Exploits0References1
OSV
OSV
added 2024/05/21 3:15 p.m.7 views

UBUNTU-CVE-2021-47310

In the Linux kernel, the following vulnerability has been resolved: net: ti: fix UAF in tlanremoveone priv is netdev private data and it cannot be used after freenetdev call. Using priv after freenetdev can cause UAF bug. Fix it by moving freenetdev at the end of the function...

7.8CVSS6.2AI score0.00252EPSS
Exploits0References11
SUSE CVE
SUSE CVE
added 2024/04/15 11:20 p.m.4 views

SUSE CVE-2021-47204

In the Linux kernel, the following vulnerability has been resolved: net: dpaa2-eth: fix use-after-free in dpaa2ethremove Access to netdev after freenetdev will cause use-after-free bug. Move debug log before freenetdev call to avoid it...

5.5CVSS6.3AI score0.00227EPSS
Exploits0References13
OSV
OSV
added 2024/04/10 7:15 p.m.2 views

DEBIAN-CVE-2021-47204

In the Linux kernel, the following vulnerability has been resolved: net: dpaa2-eth: fix use-after-free in dpaa2ethremove Access to netdev after freenetdev will cause use-after-free bug. Move debug log before freenetdev call to avoid it...

7.8CVSS5.5AI score0.00227EPSS
Exploits0References1
OSV
OSV
added 2024/03/04 6:15 p.m.5 views

CVE-2021-47082

In the Linux kernel, the following vulnerability has been resolved: tun: avoid double free in tunfreenetdev Avoid double free in tunfreenetdev by moving the dev-tstats and tun-security allocs to a new ndoinit routine tunnetinit that will be called by registernetdevice. ndoinit is paired with the...

7.8CVSS7.4AI score
Exploits0References5
CNNVD
CNNVD
added 2024/03/04 12:0 a.m.4 views

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a double release in tunfreenetdev...

7.8CVSS6.2AI score0.0025EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2021/12/17 12:0 a.m.16 views

PT-2021-8138 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to a double-free issue in the tun free netdev function. This issue can be exploited to execute arbitrary code and elevate privileges. The problem arises fr...

7.8CVSS7.7AI score0.08555EPSS
Exploits13References1756
Positive Technologies
Positive Technologies
added 2021/07/09 12:0 a.m.8 views

PT-2024-11311 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free UAF bug has been resolved in the Linux kernel. The issue occurs because priv, which is netdev private data, cannot be used after the free netdev call. Using priv after...

9.8CVSS6.7AI score0.01401EPSS
Exploits7References834
Positive Technologies
Positive Technologies
added 2021/06/17 12:0 a.m.8 views

PT-2024-11245

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak vulnerability has been resolved in the Linux kernel. The issue was caused by a missing free netdev call in the mkiss close function, which led to a memory leak when the mki...

5.5CVSS6.6AI score0.00226EPSS
Exploits0
Rows per page
Query Builder