Lucene search
K

37 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.3 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001555)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001555 advisory. net/nfc/llcpsock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service NULL pointer dereference and BUG by making a...

5.5CVSS6.4AI score0.00493EPSS
Exploits1References4
SUSE CVE
SUSE CVE
added 2025/11/14 12:25 a.m.1 views

SUSE CVE-2025-40139

In the Linux kernel, the following vulnerability has been resolved: smc: Use skdstget and dstdevrcu in in smcclcprfxset. smcclcprfxset is called during connect and not under RCU nor RTNL. Using skdstgetsk-dev could trigger UAF. Let's use skdstget and devdstrcu under rcureadlock after...

7.8CVSS6.5AI score0.00162EPSS
Exploits0References31
EUVD
EUVD
added 2025/11/12 12:30 p.m.10 views

EUVD-2025-124944

In the Linux kernel, the following vulnerability has been resolved: smc: Use skdstget and dstdevrcu in in smcclcprfxset. smcclcprfxset is called during connect and not under RCU nor RTNL. Using skdstgetsk-dev could trigger UAF. Let's use skdstget and devdstrcu under rcureadlock after...

5.8AI score0.00162EPSS
Exploits0References3
OSV
OSV
added 2025/11/12 11:15 a.m.8 views

UBUNTU-CVE-2025-40139

In the Linux kernel, the following vulnerability has been resolved: smc: Use skdstget and dstdevrcu in in smcclcprfxset. smcclcprfxset is called during connect and not under RCU nor RTNL. Using skdstgetsk-dev could trigger UAF. Let's use skdstget and devdstrcu under rcureadlock after...

5.7AI score0.00162EPSS
Exploits0References10
Cvelist
Cvelist
added 2025/11/12 10:23 a.m.10 views

CVE-2025-40139 smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().

In the Linux kernel, the following vulnerability has been resolved: smc: Use skdstget and dstdevrcu in in smcclcprfxset. smcclcprfxset is called during connect and not under RCU nor RTNL. Using skdstgetsk-dev could trigger UAF. Let's use skdstget and devdstrcu under rcureadlock after...

0.00162EPSS
Exploits0References2
NVD
NVD
added 2025/10/07 4:15 p.m.7 views

CVE-2023-53643

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: don't access released socket during error recovery While the error recovery work is temporarily failing reconnect attempts, running the 'nvme list' command causes a kernel NULL pointer dereference by calling getsockname...

5.5CVSS0.0014EPSS
Exploits0References3
CVE
CVE
added 2025/10/07 3:19 p.m.11 views

CVE-2023-53643

CVE-2023-53643 affects the Linux kernel’s nvme-tcp path. When error recovery runs, the nvme TCP socket is released and a new one is created; if a user runs a command like nvme list, it may dereference a released socket via getsockname(), causing a kernel NULL pointer dereference. The issue is tie...

5.5CVSS6.1AI score0.0014EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/10/07 12:0 a.m.1 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414555)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414555 advisory. net/nfc/llcpsock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service NULL pointer dereference and BUG by making a...

5.5CVSS6.4AI score0.00493EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2025/09/16 12:0 a.m.7 views

PT-2025-46614

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the smc module. The smc clc prfx set function is called during the connect process without proper read-copy update RCU or routing table lock RTNL...

6.8CVSS5.5AI score0.00162EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2021-38208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/nfc/llcpsock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service NULL pointer dereference and BUG by making a...

5.5CVSS6.7AI score0.00493EPSS
Exploits1References2
SUSE CVE
SUSE CVE
added 2023/02/15 6:15 a.m.3 views

SUSE CVE-2006-1342

net/ipv4/afinet.c in Linux kernel 2.4 does not clear sockaddrin.sinzero before returning IPv4 socket names from the 1 getsockname, 2 getpeername, and 3 accept functions, which allows local users to obtain portions of potentially sensitive memory...

2.1CVSS6.4AI score0.00712EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 6:2 a.m.5 views

SUSE CVE-2009-3002

The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows local users to read the contents of some kernel memory locations by calling getsockname on 1 an AFAPPLETALK socket, related to the atalkgetname function in net/appletalk/ddp.c; 2 ...

4.9CVSS6.4AI score0.01029EPSS
Exploits7References8
BDU FSTEC
BDU FSTEC
added 2021/08/20 12:0 a.m.5 views

The vulnerability of the net/nfc/llcp_sock.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the net/nfc/llcpsock.c component of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure by calling the getsockname function after a failed bind attempt for example, when...

5.5CVSS6.5AI score0.00493EPSS
Exploits1References30Affected Software4
Microsoft CVE
Microsoft CVE
added 2021/08/13 7:0 a.m.2 views

net/nfc/llcp_sock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service (NULL pointer dereference and BUG) by making a getsockname call after a certain type of failure of a bind call.

...

5.5CVSS7.1AI score0.00493EPSS
Exploits1
OSV
OSV
added 2021/08/08 8:15 p.m.4 views

AZL-6592 CVE-2021-38208 affecting package kernel for versions less than 5.10.78.1-1

net/nfc/llcpsock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service NULL pointer dereference and BUG by making a getsockname call after a certain type of failure of a bind call...

5.5CVSS6.7AI score0.00493EPSS
Exploits1References1
OSV
OSV
added 2021/08/08 8:15 p.m.1 views

DEBIAN-CVE-2021-38208

net/nfc/llcpsock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service NULL pointer dereference and BUG by making a getsockname call after a certain type of failure of a bind call...

5.5CVSS6.2AI score0.00493EPSS
Exploits1References1
Prion
Prion
added 2021/08/08 8:15 p.m.24 views

Null pointer dereference

net/nfc/llcpsock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service NULL pointer dereference and BUG by making a getsockname call after a certain type of failure of a bind call...

2.1CVSS5.2AI score0.00493EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2021/08/08 8:15 p.m.0 views

UBUNTU-CVE-2021-38208

net/nfc/llcpsock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service NULL pointer dereference and BUG by making a getsockname call after a certain type of failure of a bind call...

5.5CVSS6.7AI score0.00493EPSS
Exploits1References6
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.17 views

Linux Kernel <= 2.6.31-rc7 AF_LLC getsockname 5-Byte Stack Disclosure

No description provided by source. / llc-getsockname-leak.c Linux Kernel = 2.6.31-rc7 AFLLC getsockname 5-Byte Stack Disclosure Jon Oberheide [email protected] http://jon.oberheide.org Information: http://git.kernel.org/linus/28e9fc592cb8c7a43e4d3147b38be6032a0e81bc sllcarphrd member of sockaddrl...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.19 views

Linux Kernel <= 2.6.30 atalk_getname() 8-bytes Stack Disclosure Exploit

No description provided by source. / appleak.c Linux keunouille = 2.6.30 AppleTalk getsockname 8-bytes kernel stack disclosure http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=3d392475c873c10c10d6d96b94d092a34ebd4791 atalkgetname can leak 8 bytes of kernel memory to use...

7.1AI score
Exploits0
Rows per page
Query Builder