Siemens SIMATIC Devices Linux Kernel Improper Locking (CVE-2022-4129)

A flaw was found in the Linux kernel's Layer 2 Tunneling Protocol L2TP. A missing lock when clearing skuserdata can lead to a race condition and NULL pointer dereference. A local user could use this flaw to potentially crash the system causing a denial of service. This plugin only works with...

Siemens SCALANCE W700 Out-of-bounds Write (CVE-2023-2194)

An out-of-bounds write vulnerability was found in the Linux kernel's SLIMpro I2C device driver. The userspace data-block0 variable was not capped to a number between 0-255 and was used as the size of a memcpy, possibly writing beyond the end of dmabuffer. This flaw could allow a local privileged...

Siemens SIMATIC and SCALANCE Devices Out-of-bounds Read (CVE-2023-39192)

A flaw was found in the Netfilter subsystem in the Linux kernel. The xtu32 module did not validate the fields in the xtu32 structure. This flaw allows a local privileged attacker to trigger an out-of- bounds read by setting the size fields with a value beyond the array boundaries, leading to a...

The vulnerability of the nilfs2 component in the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the lib/generic-radix-tree.c component in the Linux operating system’s kernel is related to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause service failures...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the printerwrite function in the files drivers/usb/gadget/function/fprinter.c from version 6.7.4 onwards does not call usbepqueue properly. This may allow attackers to cause a denial of service or result in unspecified other impacts...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: A missing size check was added in amdgpudebugfsgprwaveread. This prevents a potential buffer overflow if the size exceeds 4K. Chery picked from the commit f5d873f5825b40d886d03bd2aede91d4cf002434...

PT-2025-30764

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to the MA STATE PREALLOC flag within the mas preallocate function. This issue can lead to a warning message followed by a null pointer dereferenc...

The vulnerability of the dwmac-rk component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the dwmac-rk component in the Linux operating system is related to errors in reading beyond the boundary in the rkgmacsetup function. Exploiting this vulnerability can allow an attacker to cause a service failure...

kernel: i40e: Do not allow untrusted VF to remove administratively set MAC

A flaw was found in Intel network adapters in the Linux kernel, where untrusted virtualized network interfaces can remove MAC addresses set by the system. This flaw allows an attacker with sufficient privileges to cause a denial of service...

The vulnerability of the uvc kernel component in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the uvc component in the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to access confidential information...

The vulnerability of the af_unix component in the Linux operating system kernel allows a hacker to trigger a service failure.

The vulnerability of the afunix component in the Linux operating system kernel is related to reading data beyond the allowed range in memory within the manageoob function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the nf_tables component in the Linux operating system’s kernel allows a hacker to increase their privileges within the system.

The vulnerability of the nftables component in the Linux operating system’s kernel is related to incorrect calculations within the nftablesaddchain function. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...

The vulnerability of components related to DRM/Nouveau kernels in Linux operating systems, which allows a hacker to trigger a service failure.

The vulnerability of components of the DRM/Nouveau kernel in the Linux operating system is related to incorrect blocking in the nouveaugemioctlpushbuf function. Exploiting this vulnerability can allow a hacker to trigger a service failure...

SUSE CVE-2024-50291

In the Linux kernel, the following vulnerability has been resolved: media: dvb-core: add missing buffer index check dvbvb2expbuf didn't check if the given buffer index was for a valid buffer. Add this check...

kernel: mptcp: pm: Fix uaf in __timer_delete_sync

A use-after-free flaw was found in the Linux kernel’s Multipath TCP MPTCP subsystem. This flaw allows a local user to crash or potentially escalate their privileges on the system...

DEBIAN-CVE-2023-39179

A flaw was found within the handling of SMB2 read requests in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on...

The vulnerability of the SCSI component in the Linux operating system allows a hacker to gain access to confidential information.

The vulnerability of the Linux operating system’s SCSI kernel component is related to excessive data output in the scsihostdevrelease function. Exploiting this vulnerability can allow an attacker to gain access to confidential information...

kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102

A flaw was found in the Linux kernel. A system error can be reliably replicated with specific filesystem settings, allowing an attacker to cause a denial of service...

kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102

A flaw was found in the Linux kernel. A system error can be reliably replicated with specific filesystem settings, allowing an attacker to cause a denial of service...

kernel: zsmalloc: move LRU update from zs_map_object() to zs_malloc()

A flaw was found in the Linux kernel zsmalloc memory allocator. Under certain memory pressure and reclaim conditions, zsmalloc updated its LRU lists in an unsafe context, which could lead to list corruption due to a race between object mapping and allocation paths. A local user able to trigger...