CVE-2025-20146

The CVE-2025-20146 entry describes a vulnerability in Cisco IOS XR Software for the ASR 9000 Series, including ASR 9902/9903 routers. The issue stems from incorrect handling of malformed IPv4 multicast packets on line cards where the interface has an IPv4 ACL or QoS policy. An unauthenticated, re...

The vulnerability of the microprogrammed software of Schneider Electric PowerLogic PM5320, PM5340, and PM5341 lies in their uncontrollable resource consumption, which allows a intruder to trigger a service failure.

The vulnerability of the microprogramming software for Schneider Electric’s PowerLogic PM5320, PM5340, and PM5341 lies in the uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending specially crafted IGMP packets...

The vulnerability of the Demon Routing Protocol Daemon (RPD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause a service failure.

The vulnerability of the Demon Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to improper checking of the return value of methods or functions. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by...

kernel: netfilter: bridge: confirm multicast packets before passing them up the stack

A security vulnerability was identified in the Linux kernel's netfilter subsystem, specifically affecting the handling of multicast and broadcast packets on network bridges. The issue arises from a race condition in the connection tracking conntrack module when processing cloned socket buffers sk...

Moderate: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

kernel: netfilter: bridge: confirm multicast packets before passing them up the stack

A security vulnerability was identified in the Linux kernel's netfilter subsystem, specifically affecting the handling of multicast and broadcast packets on network bridges. The issue arises from a race condition in the connection tracking conntrack module when processing cloned socket buffers sk...

CVE-2024-39519

CVE-2024-39519 describes an improper check in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on the ACX7000 Series. An unauthenticated, adjacent attacker can cause a DoS by triggering a multicast traffic loop when a CE is dual-homed to two PEs in an EVPN MPLS setup, via I...

CVE-2024-27415

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: confirm multicast packets before passing them up the stack conntrack nfconfirm logic cannot handle cloned skbs referencing the same nfconn entry, which will happen for multicast broadcast frames on bridges...

CVE-2024-27415

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: confirm multicast packets before passing them up the stack conntrack nfconfirm logic cannot handle cloned skbs referencing the same nfconn entry, which will happen for multicast broadcast frames on bridges...

CVE-2024-27415

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: confirm multicast packets before passing them up the stack conntrack nfconfirm logic cannot handle cloned skbs referencing the same nfconn entry, which will happen for multicast broadcast frames on bridges...

CVE-2024-27415 netfilter: bridge: confirm multicast packets before passing them up the stack

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: confirm multicast packets before passing them up the stack conntrack nfconfirm logic cannot handle cloned skbs referencing the same nfconn entry, which will happen for multicast broadcast frames on bridges...

CVE-2024-27415

CVE-2024-27415 affects Linux kernel netfilter/bridge. Root cause: nf_confirm and conntrack race when multicast/broadcast frames clone, causing a shared nf_conn entry to be referenced twice before confirmation. Result: a multicast flow can lead to a clone skb’s nfct being unconfirmed and race agai...

CVE-2024-27415

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: confirm multicast packets before passing them up the stack conntrack nfconfirm logic cannot handle cloned skbs referencing the same nfconn entry, which will happen for multicast broadcast frames on bridges...

CVE-2024-27415 netfilter: bridge: confirm multicast packets before passing them up the stack

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: confirm multicast packets before passing them up the stack conntrack nfconfirm logic cannot handle cloned skbs referencing the same nfconn entry, which will happen for multicast broadcast frames on bridges...

CVE-2024-26626

In the Linux kernel, the following vulnerability has been resolved: ipmr: fix kernel panic when forwarding mcast packets The stacktrace was: 86.305548 BUG: kernel NULL pointer dereference, address: 0000000000000092 86.306815 PF: supervisor read access in kernel mode 86.307717 PF: errorcode0x0000 ...

CVE-2024-26626

In the Linux kernel, the following vulnerability has been resolved: ipmr: fix kernel panic when forwarding mcast packets The stacktrace was: 86.305548 BUG: kernel NULL pointer dereference, address: 0000000000000092 86.306815 PF: supervisor read access in kernel mode 86.307717 PF: errorcode0x0000 ...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a kernel crash problem when forwarding mcast packets...

[NetScaler] Multicast packets may cross members within LA channel on SDX with i40e NICs

On a Fortville NIC SDX platform with i40e driver. When LA channel is configured with 10G or 25G NICs and is assigned to a NetScaler VPX. The VPX may receive unexpected multicast packets that was sent by itself through another member of the LA channel. Such as VRRP control plane messages. The...

CVE-2023-22414 Junos OS: PTX Series and QFX10000 Series: An FPC memory leak is observed when specific EVPN VXLAN Multicast packets are processed

A Missing Release of Memory after Effective Lifetime vulnerability in Flexible PIC Concentrator FPC of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker from the same shared physical or logical network, to cause a heap memory leak and leading to FPC crash. On all Junos PTX...

MirageOS qubes-mirage-firewall 资源管理错误漏洞

qubes-mirage-firewall is a MirageOS open source single kernel that can run as a QubesOS ProxyVM. A security vulnerability exists in MirageOS qubes-mirage-firewall versions 0.8.x through 0.8.3, which originates from a denial of service that allows a client to operate the system's users via special...