68 matches found
Linux Distros Unpatched Vulnerability : CVE-2022-50031
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: iscsi: Fix HW conn removal use after free If qla4xxx doesn't remove the connection before the session, the iSCSI class tries to remove the connection for...
net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled
...
CBL Mariner 2.0 Security Update: net-tools (CVE-2025-46836)
The version of net-tools installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-46836 advisory. - net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the...
net/mlx5 DoS
The vulnerability of the net/mlx5 component in the Linux operating system is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2025-46836
net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities like ifconfig from the net-tools package do not properly validate the structure of /proc files when...
CVE-2025-46836 net-tools Stack-based Buffer Overflow vulnerability
net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities like ifconfig from the net-tools package do not properly validate the structure of /proc files when...
CVE-2025-46836
CVE-2025-46836 affects the net-tools package (e.g., ifconfig) up to version 2.10. The root cause is a bounds-check failure in get_name() in interface.c, which copies interface labels from /proc/net/dev into a fixed 16-byte stack buffer without validation. This can lead to a local arbitrary-code e...
CVE-2025-46836 net-tools Stack-based Buffer Overflow vulnerability
net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities like ifconfig from the net-tools package do not properly validate the structure of /proc files when...
PT-2025-21250
Name of the Vulnerable Software and Affected Versions: net-tools versions up to and including 2.10 Description: The issue is related to the Linux network utilities in the net-tools package, which do not properly validate the structure of /proc files when showing interfaces. This can lead to...
i40e Component DoS
The vulnerability of the i40e component in the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
Intel E800 network card driver Heap Buffer Overflow DoS
The vulnerability of the devmkasprintf function in the iceptp.c file of the Intel E800 network card driver for the Linux operating system is related to a pointer dereferencing error. Exploiting this vulnerability could allow an attacker to cause a service failure...
iNet wireless daemon security vulnerability
iNet wireless daemon iwd is a network management tool used to manage wireless network interfaces in the Linux operating system. A security vulnerability exists in iNet wireless daemon IWD version 2.15 and earlier, which stems from a denial of service DOS vulnerability in p2putil.c. The...
Moderate: containernetworking-plugins security and bug fix update
The Container Network Interface CNI project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated...
Linux ATM driver Heap Buffer Overflow DoS
The vulnerability of the idt77252exit function in the drivers/atm/idt77252.c file of the ATM network driver for the Linux operating system is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to...
Linux UDPv6 DoS
The vulnerability of the UDPv6 network protocol implementation in Linux operating systems is related to concurrent access to the dstentry structure during a race condition, due to the lack of synchronization in the sksetupcaps function within the net/core/sock.c module. Exploiting this...
Qualcomm Chipsets Resource Management Vulnerability
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated. A security vulnerability exists in Qualcomm Chipsets that stems from a memory corruption in a Linux network due to a double release when handling hyp-assign...
[SECURITY] Fedora 37 Update: nispor-1.2.11-1.fc37
Unified interface for Linux network state querying...
K17121: Linux network subsystem vulnerabilities CVE-2014-8160, CVE-2014-8172, CVE-2014-8173, CVE-2014-9428, CVE-2014-9644, CVE-2015-0274, and CVE-2015-2041
Security Advisory Description CVE-2014-8160 net/netfilter/nfconntrackprotogeneric.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended...
SUSE CVE-2022-26365
Linux disk/nic frontends data leaks This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend CVE-2022-26365,...
CVE-2022-3643
Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface reset/abort/crash in a Linux based network backend by sending certain kinds of packets. It appears to be an unwritten? assumption in the rest of the Linux network stack that packet...