CVE-2022-49198

CVE-2022-49198 targets the Linux kernel’s mptcp path. According to multiple sources, the vulnerability stems from a race in __mptcp_alloc_tx_skb where skb->tcp_tsorted_anchor is initialized before the skb release path under memory pressure, causing kfree_skb to release the destination twice an...

CVE-2022-49198 mptcp: Fix crash due to tcp_tsorted_anchor was initialized before release skb

In the Linux kernel, the following vulnerability has been resolved: mptcp: Fix crash due to tcptsortedanchor was initialized before release skb Got crash when doing pressure test of mptcp: =========================================================================== dstrelease: dst:ffffa06ce6e5c058...

CVE-2022-49198

In the Linux kernel, the following vulnerability has been resolved: mptcp: Fix crash due to tcptsortedanchor was initialized before release skb Got crash when doing pressure test of mptcp: =========================================================================== dstrelease: dst:ffffa06ce6e5c058...

CVE-2022-49198 mptcp: Fix crash due to tcp_tsorted_anchor was initialized before release skb

In the Linux kernel, the following vulnerability has been resolved: mptcp: Fix crash due to tcptsortedanchor was initialized before release skb Got crash when doing pressure test of mptcp: =========================================================================== dstrelease: dst:ffffa06ce6e5c058...

CVE-2022-49084 qede: confirm skb is allocated before using

In the Linux kernel, the following vulnerability has been resolved: qede: confirm skb is allocated before using qedebuildskb assumes buildskb always works and goes straight to skbreserve. However, buildskb can fail under memory pressure. This results in a kernel panic because the skb to reserve i...

CVE-2022-49084

Summary (CVE-2022-49084): The vulnerability in the Linux kernel affects the qede subsystem where qede_build_skb() assumes build_skb() always succeeds and proceeds to skb_reserve() even if it returns NULL under memory pressure. The fix adds a NULL check for build_skb() and returns NULL when alloca...

CVE-2022-49084

In the Linux kernel, the following vulnerability has been resolved: qede: confirm skb is allocated before using qedebuildskb assumes buildskb always works and goes straight to skbreserve. However, buildskb can fail under memory pressure. This results in a kernel panic because the skb to reserve i...

Azure Linux 3.0 Security Update: kernel (CVE-2024-50001)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50001 advisory. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix error path in multi- packe...

SUSE CVE-2025-21676

In the Linux kernel, the following vulnerability has been resolved: net: fec: handle pagepooldevallocpages error The fecenetupdatecbd function calls pagepooldevallocpages but did not handle the case when it returned NULL. There was a WARNON!newpage but it would still proceed to use the NULL point...

UBUNTU-CVE-2025-21676

In the Linux kernel, the following vulnerability has been resolved: net: fec: handle pagepooldevallocpages error The fecenetupdatecbd function calls pagepooldevallocpages but did not handle the case when it returned NULL. There was a WARNON!newpage but it would still proceed to use the NULL point...

CVE-2025-21676

CVE-2025-21676 : In the Linux kernel, the fec driver could crash when page_pool_dev_alloc_pages returned NULL under memory pressure because the error was not handled in fec_enet_update_cbd. The fix drops the current packet instead of dereferencing a NULL page, addressing a rare but possible crash...

PT-2025-4357 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.73/6.12.10 Description: The issue is related to a null pointer dereference in the page pool dev alloc pages function of the Linux kernel's drivers/net/ethernet/freescale/fec main.c module. This can occur whe...

CVE-2024-7095 On affected platforms running Arista EOS with SNMP configured, if “snmp-server transmit max-size” is configured, under some circumstances a specially crafted packet can cause the snmpd process to leak memory. This may result in the snmpd process being term

On affected platforms running Arista EOS with SNMP configured, if “snmp-server transmit max-size” is configured, under some circumstances a specially crafted packet can cause the snmpd process to leak memory. This may result in the snmpd process being terminated causing SNMP requests to time out...

CVE-2024-50219

In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: let GFPATOMIC order-0 allocs access highatomic reserves Under memory pressure it's possible for GFPATOMIC order-0 allocations to fail even though free pages are available in the highatomic reserves. GFPATOMIC...

Security Advisory 0107

Security Advisory 0107 . CSAF PDF Date: November 19, 2024 Revision | Date | Changes ---|---|--- 1.0 | November 19, 2024 | Initial release The CVE-ID tracking this issue: CVE-2024-7095 CVSSv3.1 Base Score: 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Common Weakness Enumeration: CWE-401: Missi...

kernel: mm/swapfile: add cond_resched() in get_swap_pages()

In the Linux kernel, the following vulnerability has been resolved: mm/swapfile: add condresched in getswappages The softlockup still occurs in getswappages under memory pressure. 64 CPU cores, 64GB memory, and 28 zram devices, the disksize of each zram device is 50MB with same priority as si. Us...

kernel: netfilter: nf_tables: set dormant flag on hook register failure

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: set dormant flag on hook register failure We need to set the dormant flag again if we fail to register the hooks. During memory pressure hook registration can fail and we end up with a table marked as active...

CVE-2024-50219

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-50219

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-50219

CVE-2024-50219: Linux kernel GFP_ATOMIC order-0 allocations can fail under memory pressure due to how highatomic reserves are used, enabling a potential page-alloc impairment. The issue is tied to the mm/page_alloc path and specifically the fall-back behavior when free pages exist but GFP_ATOMIC ...