CVE-2023-53433

In the Linux kernel, the following vulnerability has been resolved: net: add vlangetprotocolanddepth helper Before blamed commit, pskbmaypull was used instead of skbheaderpointer in vlangetprotocol and friends. Few callers depended on skb-head being populated with MAC header, syzbot caught one of...

DEBIAN-CVE-2023-53433

In the Linux kernel, the following vulnerability has been resolved: net: add vlangetprotocolanddepth helper Before blamed commit, pskbmaypull was used instead of skbheaderpointer in vlangetprotocol and friends. Few callers depended on skb-head being populated with MAC header, syzbot caught one of...

SUSE CVE-2021-47397

In the Linux kernel, the following vulnerability has been resolved: sctp: break out if skbheaderpointer returns NULL in sctprcvootb We should always check if skbheaderpointer's return is NULL before using it, otherwise it may cause null-ptr-deref, as syzbot reported: KASAN: null-ptr-deref in rang...

DEBIAN-CVE-2021-47397

In the Linux kernel, the following vulnerability has been resolved: sctp: break out if skbheaderpointer returns NULL in sctprcvootb We should always check if skbheaderpointer's return is NULL before using it, otherwise it may cause null-ptr-deref, as syzbot reported: KASAN: null-ptr-deref in rang...

UBUNTU-CVE-2021-47397

In the Linux kernel, the following vulnerability has been resolved: sctp: break out if skbheaderpointer returns NULL in sctprcvootb We should always check if skbheaderpointer's return is NULL before using it, otherwise it may cause null-ptr-deref, as syzbot reported: KASAN: null-ptr-deref in rang...

SUSE CVE-2014-2523

net/netfilter/nfconntrackprotodccp.c in the Linux kernel through 3.13.6 uses a DCCP header pointer incorrectly, which allows remote attackers to cause a denial of service system crash or possibly execute arbitrary code via a DCCP packet that triggers a call to the 1 dccpnew, 2 dccppacket, or 3...

PT-2021-30059

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.151 Description The issue is related to the sctp module in the Linux Kernel, where it fails to handle a NULL return from the skb header pointer function in sctp rcv ootb. This could potentially lead to...

PT-2021-30025

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.209 Description The issue is related to the sctp module in the Linux Kernel, where it may not properly handle a NULL return value from the skb header pointer function in sctp rcv ootb. This could potentiall...

PT-2021-26117

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description The issue is related to the sctp protocol in the Linux Kernel, where it may not properly handle a NULL return from the skb header pointer function in sctp rcv ootb. This could potentially lea...

PT-2021-26030

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.209 Description The issue is related to the sctp protocol in the Linux Kernel, where it may not properly handle a NULL return from the skb header pointer function in sctp rcv ootb. The actual impact and...

PT-2021-26004

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.249 Description The issue is related to the sctp module in the Linux Kernel, where it fails to handle a NULL return from the skb header pointer function in sctp rcv ootb. The actual impact and attack...

PT-2021-26064

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.151 Description The issue is related to the sctp module in the Linux Kernel, where it fails to handle a NULL return from the skb header pointer function in sctp rcv ootb. This could potentially lead to...

kernel: netfilter: nf_conntrack_dccp: incorrect skb_header_pointer API usages

net/netfilter/nfconntrackprotodccp.c in the Linux kernel through 3.13.6 uses a DCCP header pointer incorrectly, which allows remote attackers to cause a denial of service system crash or possibly execute arbitrary code via a DCCP packet that triggers a call to the 1 dccpnew, 2 dccppacket, or 3...

kernel: netfilter: nf_conntrack_dccp: incorrect skb_header_pointer API usages

net/netfilter/nfconntrackprotodccp.c in the Linux kernel through 3.13.6 uses a DCCP header pointer incorrectly, which allows remote attackers to cause a denial of service system crash or possibly execute arbitrary code via a DCCP packet that triggers a call to the 1 dccpnew, 2 dccppacket, or 3...

kernel: netfilter: nf_conntrack_dccp: incorrect skb_header_pointer API usages

net/netfilter/nfconntrackprotodccp.c in the Linux kernel through 3.13.6 uses a DCCP header pointer incorrectly, which allows remote attackers to cause a denial of service system crash or possibly execute arbitrary code via a DCCP packet that triggers a call to the 1 dccpnew, 2 dccppacket, or 3...