Lucene search
+L

2 matches found

SUSE CVE
SUSE CVE
added 2025/11/13 12:24 a.m.13 views

SUSE CVE-2025-40149

In the Linux kernel, the following vulnerability has been resolved: tls: Use skdstget and dstdevrcu in getnetdevforsock. getnetdevforsock is called during setsockopt, so not under RCU. Using skdstgetsk-dev could trigger UAF. Let's use skdstget and dstdevrcu. Note that the only -ndoskgetlowerdev...

6.3CVSS6.5AI score0.00157EPSS
SaveExploits0References21
Cvelist
Cvelist
added 2025/11/12 10:23 a.m.16 views

CVE-2025-40149 tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().

In the Linux kernel, the following vulnerability has been resolved: tls: Use skdstget and dstdevrcu in getnetdevforsock. getnetdevforsock is called during setsockopt, so not under RCU. Using skdstgetsk-dev could trigger UAF. Let's use skdstget and dstdevrcu. Note that the only -ndoskgetlowerdev...

0.00157EPSS
SaveExploits0References6
Rows per page
Query Builder