910 matches found
kernel: i40e: add validation for ring_len param
A flaw was identified in the Intel “i40e” Ethernet driver in the Linux Kernel where the ringlen parameter supplied by a VF virtual function is passed unchecked to the hardware memory context. If a malicious Virtual function provides a too-large or misaligned ringlen, it may allow the device to...
kernel: i40e: add validation for ring_len param
A flaw was identified in the Intel “i40e” Ethernet driver in the Linux Kernel where the ringlen parameter supplied by a VF virtual function is passed unchecked to the hardware memory context. If a malicious Virtual function provides a too-large or misaligned ringlen, it may allow the device to...
CVE-2025-31146
Time-of-check time-of-use race condition for some Intel Ethernet Adapter Complete Driver Pack software before version 1.5.1.0 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable...
EUVD-2025-124908
In the Linux kernel, the following vulnerability has been resolved: idpf: cleanup remaining SKBs in PTP flows When the driver requests Tx timestamp value, one of the first steps is to clone SKB using skbget. It increases the reference counter for that SKB to prevent unexpected freeing by another...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990767)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990767 advisory. In the Linux kernel, the following vulnerability has been resolved: i40e: Fix kernel crash during reboot when adapter is in recovery mode If the driver detects durin...
EUVD-2025-93491
Time-of-check time-of-use race condition for some Intel Ethernet Adapter Complete Driver Pack software before version 1.5.1.0 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable...
CVE-2025-31146
Time-of-check time-of-use race condition for some Intel Ethernet Adapter Complete Driver Pack software before version 1.5.1.0 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable...
CVE-2025-31146
The CVE-2025-31146 issue affects Intel Ethernet Adapter Complete Driver Pack before version 1.5.1.0. The Red Hat / ENISA entries describe a time-of-check time-of-use race condition in Ring 3 (User Applications) that can allow a denial of service, with an unprivileged authenticated user and low-co...
CVE-2025-31146
Time-of-check time-of-use race condition for some Intel Ethernet Adapter Complete Driver Pack software before version 1.5.1.0 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable...
PT-2025-46418
Name of the Vulnerable Software and Affected Versions Intel Ethernet Adapter Complete Driver Pack versions prior to 1.5.1.0 Description A time-of-check time-of-use race condition exists in some Intel Ethernet Adapter Complete Driver Pack software within Ring 3: User Applications. This may allow f...
Intel Ethernet Adapter Complete Driver Pack 安全漏洞
Intel Ethernet Adapter Complete Driver Pack is a complete driver for Ethernet adapters from Intel Corporation. A security vulnerability exists in Intel Ethernet Adapter Complete Driver Pack versions prior to 1.5.1.0, which originates from a competitive condition in the user's application and coul...
ESXi RDMA driver for Intel® 800 Series Ethernet Advisory
Summary: A potential security vulnerability in some ESXi drivers for the Intel® 800 Series Ethernet may allow denial of service. Intel is releasing updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-31146 Description: Time-of-check time-of-use race condition...
iavf: fix hang on reboot with ice
...
Siemens SIMATIC Devices Buffer Overflow (CVE-2023-45871)
An issue was discovered in drivers/net/ethernet/intel/igb/igbmain.c in the IGB driver in the Linux kernel before 6.5.3. A buffer size may not be adequate for frames larger than the MTU. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
EUVD-2025-34602
In the Linux kernel, the following vulnerability has been resolved: i40e: fix input validation logic for actionmeta Fix condition to check 'greater or equal' to prevent OOB dereference...
CVE-2025-39971 i40e: fix idx validation in config queues msg
In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in config queues msg Ensure idx is within range of active/initialized TCs when iterating over vf-chidx in i40evcconfigqueuesmsg...
PT-2025-41367
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc4-enjuk-tnguy-00865-gc4940196ab02 Description The Linux kernel contains an issue where a failure in the igc led setup function during the probe process can lead to a kernel panic. This occurs because the...
EUVD-2025-31853
The Community Events plugin for WordPress is vulnerable to SQL Injection via the eventcategory parameter in all versions up to, and including, 1.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...