7 matches found
EUVD-2025-124919
In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix using smpprocessorid in preemptible code warnings Syzbot reported the following warning: BUG: using smpprocessorid in preemptible 00000000 code: dhcpcd/2879 caller is usbnetskbreturn+0x74/0x490...
CVE-2022-48974 netfilter: conntrack: fix using __this_cpu_add in preemptible
In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: fix using thiscpuadd in preemptible Currently in nfconntrackhashcheckinsert, when it fails in nfctextvalidpre/post, NFCTSTATINC will be called in the preemptible context, a call trace can be triggered: BUG:...
CVE-2024-41081 ila: block BH in ila_output()
In the Linux kernel, the following vulnerability has been resolved: ila: block BH in ilaoutput As explained in commit 1378817486d6 "tipc: block BH before using dstcache", net/core/dstcache.c helpers need to be called with BH disabled. ilaoutput is called from lwtunneloutput possibly from process...
CVE-2024-41081
CVE-2024-41081: Linux kernel vulnerability in ila_output() where race against softirq/RCU could corrupt net/dst_cache data if ila_output() is interrupted and re-entered under rcu_read_lock(). The root cause is attempting to block BH in ila_output() without disabling local BH, leading to potential...
CVE-2024-35971
In the Linux kernel, the following vulnerability has been resolved: net: ks8851: Handle softirqs at the end of IRQ thread to fix hang The ks8851irq thread may call ks8851rxpkts in case there are any packets in the MAC FIFO, which calls netifrx. This netifrx implementation is guarded by...
CVE-2024-35971
The CVE-2024-35971 entry concerns the Linux kernel ks8851 driver hang due to incorrect softirq handling. In ks8851_irq(), a spinlock is acquired before calling netif_rx(), which can trigger net_rx_action and reach the driver’s .start_xmit callback. If ks8851_start_xmit_par subsequently re-enters ...
security flaw
The devqueuexmit function in Linux kernel 2.6 can fail before calling the localbhdisable function, which could lead to data corruption and "node lockups." NOTE: it is not clear whether this issue is exploitable...