723 matches found
GSD-2022-1008166 net: tun: call napi_schedule_prep() to ensure we own a napi
net: tun: call napischeduleprep to ensure we own a napi This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.225 by commit...
GSD-2022-1008113 net: tun: fix bugs for oversize packet when napi frags enabled
net: tun: fix bugs for oversize packet when napi frags enabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.154 by commit...
GSD-2022-1007941 net: tun: call napi_schedule_prep() to ensure we own a napi
net: tun: call napischeduleprep to ensure we own a napi This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.79 by commit...
GSD-2022-1007854 net: tun: fix bugs for oversize packet when napi frags enabled
net: tun: fix bugs for oversize packet when napi frags enabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.8 by commit...
PT-2022-36038 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.9 Description: The issue is related to a potential security vulnerability in the Linux Kernel. It involves the napi schedule prep function, which is used to ensure ownership of a napi. The actual impact and...
PT-2022-36327 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.155 Description: The issue is related to a potential security vulnerability in the Linux Kernel. It involves the napi schedule prep function to ensure ownership of a napi. The actual impact and attack...
PT-2022-36055 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.9 Description: The issue is related to memory leaks in the napi get frags function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...
PT-2022-36256 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.78 Description: The issue is related to bugs in the handling of oversize packets when napi frags are enabled. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...
PT-2022-7679
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential use-after-free in the hisi femac rx function. This occurs because the skb is delivered to napi gro receive, which may free it. After this, dereferenci...
PT-2022-7678
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the function hix5hd2 rx in the Linux kernel, specifically in the module drivers/net/ethernet/hisilicon/hix5hd2 gmac.c. It involves the potential reuse of previous...
PT-2024-11850 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a race condition on the per-CQ variable napi work done in the Linux kernel's net component. After calling napi complete done, another CPU can start the napi...
kernel: veth: ensure skb entering GRO are not cloned.
In the Linux kernel, the following vulnerability has been resolved: veth: ensure skb entering GRO are not cloned. After commit d3256efd8e8b "veth: allow enabling NAPI even without XDP", if GRO is enabled on a veth device and TSO is disabled on the peer device, TCP skbs will go through the NAPI...
kernel: iavf: Fix reset error handling
A deadlock condition exists in the linux kernel such that when calling iavfclose in iavfresettask error handling,doing so can lead to double call of napidisable thereby leading to a denial of service due to the deadlock...
PT-2025-18588
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to memory leaks in the Linux kernel, specifically in the napi get frags function. The problem occurs when tun get user is called, leading to memory leaks in tun napi...
PT-2022-6768 · Linux +8 · Linux Kernel +8
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an out-of-bounds memory access flaw in the Linux kernel's TUN/TAP device driver functionality. This occurs when a user generates a malicious, overly large...
PT-2025-25979
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18.0 Description The issue is related to the iavf driver in the Linux kernel. It involves a problem with reset error handling, where calling iavf close in iavf reset task error handling can lead to a deadlock d...
GSD-2022-1004816 net: tun: unlink NAPI from device on destruction
net: tun: unlink NAPI from device on destruction This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.251 by commit...
GSD-2022-1004728 net: tun: stop NAPI when detaching queues
net: tun: stop NAPI when detaching queues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.204 by commit...
GSD-2022-1004445 net: tun: stop NAPI when detaching queues
net: tun: stop NAPI when detaching queues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.53 by commit...
