13114 matches found
The vulnerability of the dr_domain_add_vport_cap() function in the drivers/net/ethernet/mellanox/mlx5/core/steering/sws/dr_domain.c file of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the drdomainaddvportcap function in the drivers/net/ethernet/mellanox/mlx5/core/steering/sws/drdomain.c file of the Linux kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the qede_build_skb() function in the drivers/net/ethernet/qlogic/qede/qede_fp.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the qedebuildskb function in the drivers/net/ethernet/qlogic/qede/qedefp.c module of the Linux kernel is related to incorrect error handling. Exploiting this vulnerability could allow an attacker to cause a service failure...
ABB M2M Gateway Stack Overflow in embedded Linux Kernel (CVE-2022-4378)
A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system. This plugin only works with Tenable.ot. Please visit...
ABB M2M Gateway Out-Of-Bound Read/Write in embedded Linux Kernel (CVE-2023-42753)
An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the h-nets array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local...
PT-2025-27962 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free issue has been identified in the Linux kernel, specifically in the r535 gsp rpc push function. This occurs when the RPC container is released after being passed to r53...
PT-2025-27716
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue occurs when the sound/soc/codecs/hdmi-codec.c calls the plugged cb with NULL as the callback function and codec dev...
The vulnerability of the altr_tse_pcs() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the altrtsepcs function in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2025-37992
In the Linux kernel, the following vulnerability has been resolved: netsched: Flush gsoskb list too during -change Previously, when reducing a qdisc's limit via the -change operation, only the main skb queue was trimmed, potentially leaving packets in the gsoskb list. This could result in NULL...
CVE-2025-37992 net_sched: Flush gso_skb list too during ->change()
In the Linux kernel, the following vulnerability has been resolved: netsched: Flush gsoskb list too during -change Previously, when reducing a qdisc's limit via the -change operation, only the main skb queue was trimmed, potentially leaving packets in the gsoskb list. This could result in NULL...
PT-2025-30864
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability exists in the Linux kernel related to the mt76/mt7925 driver. Specifically, a NULL pointer dereference can occur in the mt7925 sta set decap offload function when the...
CVE-2024-26597
In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: fix global oob in rmnetpolicy The variable rmnetlinkops assign a bigger maxtype which leads to a global out-of-bounds read when parsing the netlink attributes. See bug trace below:...
CVE-2023-52457
In the Linux kernel, the following vulnerability has been resolved: serial: 8250: omap: Don't skip resource freeing if pmruntimeresumeandget failed Returning an error code from .remove makes the driver core emit the little helpful error message: remove callback returned a non-zero value. This wil...
CVE-2023-52440
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slub overflow in ksmbddecodentlmsspauthblob If authblob-SessionKey.Length is bigger than session key sizeCIFSKEYSIZE, slub overflow can happen in key exchange codes. cifsarc4crypt copy to session key array from...
CVE-2023-51782
An issue was discovered in the Linux kernel before 6.6.8. roseioctl in net/rose/afrose.c has a use-after-free because of a roseaccept race condition...
CVE-2023-38426
An issue was discovered in the Linux kernel before 6.3.4. ksmbd has an out-of-bounds read in smb2findcontextvals when createcontext's namelen is larger than the tag length...
CVE-2023-38428
An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not properly check the UserName value because it does not consider the address of security buffer, leading to an out-of-bounds read...
The vulnerability of the btrfs_lookup_extent_info() function in the file system of the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the btrfslookupextentinfo function in the file system of the Linux operating system is related to unauthorized callers of the verification function. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the pvr_vm_gpuva_unmap() function in the DRI driver of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the pvrvmgpuvaunmap function in the DRI support driver for the Linux kernel relates to improper memory release before deleting the last pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2025-37991
In the Linux kernel, the following vulnerability has been resolved: parisc: Fix double SIGFPE crash Camm noticed that on parisc a SIGFPE exception will crash an application with a second SIGFPE in the signal handler. Dave analyzed it, and it happens because glibc uses a double-word floating-point...