Design/Logic Flaw

In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix incorrect structure access In line: upper = info-upperdev; We access upperdev field, which is related only for particular events e.g. event == NETDEVCHANGEUPPER. So, this line cause invalid memory acce...

CVE-2023-52522

In the Linux kernel, the following vulnerability has been resolved: net: fix possible store tearing in neighperiodicwork While looking at a related syzbot report involving neighperiodicwork, I found that I forgot to add an annotation when deleting an RCU protected item from a list. Readers use...

Null pointer dereference

In the Linux kernel, the following vulnerability has been resolved: net: hso: fix NULL-deref on disconnect regression Commit 8a12f8836145 "net: hso: fix null-ptr-deref during tty device unregistration" fixed the racy minor allocation reported by syzbot, but introduced an unconditional NULL-pointe...

CVE-2024-26582

In the Linux kernel, the following vulnerability has been resolved: net: tls: fix use-after-free with partial reads and async decrypt tlsdecryptsg doesn't take a reference on the pages from clearskb, so the putpage in tlsdecryptdone releases them, and we trigger a use-after-free in processrxlist...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel due to a post-release reuse vulnerability in the net module...

PT-2023-35379

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.1.13 Description The issue is related to the use of a bounce buffer for copying skb-mark in the net module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2023-33165 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.33 through 6.0.11 Description: A potential socket leak was identified in the p9 socket open function of the net/9p module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

PT-2022-34890

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.7 Description The issue is related to CMDQ memory leaks in the hinic net module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v6.0.7,...

PT-2022-35206 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.8 through v5.15.76 Description: The issue is related to CMDQ memory leaks in the hinic net module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v5.8...

PT-2022-34346

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.257 Description The issue concerns data-races around weight p and dev weight rtx bias in the net module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30947

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to races around sk-sk bound dev if in the net module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

PT-2021-27082

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.296 Description The issue concerns the addition of global locking for descriptor lifecycle in the systemport of the net module. It was introduced in version v3.16 and fixed in version v4.4.296. The actual...

PT-2021-27222

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.16 through 5.15.10 Description The issue concerns the addition of global locking for descriptor lifecycle in the systemport of the net module. The actual impact and attack plausibility have not yet been proven...

PT-2021-27091

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.294 Description The issue concerns the addition of global locking for descriptor lifecycle in the systemport of the net module. The actual impact and attack plausibility have not yet been proven...

PT-2021-27174

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.16 through 5.10.87 Description The issue concerns the addition of global locking for descriptor lifecycle in the systemport of the net module. It was introduced in version v3.16 and fixed in version v5.10.88. The actual...

PT-2021-27125

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.16 through 4.19.221 Description The issue concerns the addition of global locking for descriptor lifecycle in the systemport of the net module. It was introduced in version v3.16 and fixed in version v4.19.222. The actu...

PT-2021-27143

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.16 through 5.4.167 Description The issue concerns the addition of global locking for descriptor lifecycle in the systemport of the net module. It was introduced in version v3.16 and fixed in version v5.4.168. The actual...

PT-2021-27105

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.16 through 4.14.258 Description The issue concerns the addition of global locking for descriptor lifecycle in the systemport of the net module. It was introduced in version v3.16 and fixed in version v4.14.259. The actu...

Multiple Siemens products incorrectly zero-terminated vulnerabilities

The Nucleus NET module integrates a range of standards-compliant networking and communications protocols, drivers and utilities to provide full-featured networking support in any embedded device. A security vulnerability exists in several Siemens products, which stems from the DHCP client...

Multiple Siemens products have buffer error vulnerabilities

The Nucleus NET module contains a range of standards-compliant networking and communications protocols, drivers and utilities to provide full-featured networking support in any embedded device. An out-of-bounds write vulnerability exists in Siemens Nucleus products. The vulnerability is due to th...