5 matches found
PT-2026-98649
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the af unix module where blocking recvMSG PEEK calls can lead to high CPU usage. This occurs because the manage oob function may skip Out-of-Band OOB socket buffers sk...
DEBIAN-CVE-2024-47711
In the Linux kernel, the following vulnerability has been resolved: afunix: Don't return OOB skb in manageoob. syzbot reported use-after-free in unixstreamrecvurg. 0 The scenario is 1. sendMSGOOB 2. recvMSGOOB - The consumed OOB remains in recv queue 3. sendMSGOOB 4. recv - manageoob returns the...
UBUNTU-CVE-2024-47711
In the Linux kernel, the following vulnerability has been resolved: afunix: Don't return OOB skb in manageoob. syzbot reported use-after-free in unixstreamrecvurg. 0 The scenario is 1. sendMSGOOB 2. recvMSGOOB - The consumed OOB remains in recv queue 3. sendMSGOOB 4. recv - manageoob returns the...
PT-2024-32758
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue has been identified in the Linux kernel, specifically in the af unix module. The problem arises when the manage oob function returns an out-of-band OOB socket buff...
PT-2024-8857
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the wrong handling of OOB skb in the manage oob function. When recvmsg is called without MSG OOB, manage oob is called to check if the peeked skb is OOB skb. In...