41 matches found
Linux net/qrtr/af_qrtr.c Heap Buffer Overflow DoS
The vulnerability of the qrtrendpointpost function in the net/qrtr/afqrtr.c component of the Linux kernel is related to incorrect calculations. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46038)
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Free the node during ctrlcmdbye A node sends the BYE packet when it is about to go down. So the nameserver should advertise the removal of the node to all remote and local observers and free the node finally. But...
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Limit the maximum number of lookups Current code does not perform any bounds checking on the number of lookups a client can perform. Although the code restricts lookups to local clients, there remains a risk that a...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Limit the total number of nodes. Currently, the name server does not limit the number of nodes it handles. This can be a potential attack vector if a malicious client starts registering random nodes, leading to...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Socket creation is restricted to the initial network namespace. The QRTR protocol maintains its entire port and node state in global variables within the module, without being partitioned per network namespace...
ROS-20261013-73-0171
The vulnerability of the ctrlcmdbye function in the net/qrtr/ns.c module, which supports Qualcomm IPC cores in the Linux operating system, relates to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow a attacker to cause service...
ROS-20261009-73-0013
The vulnerability of the radixtreecreate function in the net/qrtr/afqrtr.c module of the Linux operating system is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability could allow an attacker to cause a service failure...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Fixed a use-after-free issue in the driverremove function. In the remove callback, if a packet arrives after destroyworkqueue is called but before sockrelease, the qrtrnsdataready callback will attempt to queue the...
Astra Linux – Vulnerability in Linux
A issue was discovered in the Linux kernel before version 5.11.11. The qrtrrecvmsg function in net/qrtr/qrtr.c allows attackers to obtain sensitive information from kernel memory due to a partially uninitialized data structure, identified as CID-50535249f624...
SUSE CVE-2026-97440
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix node refcount leak on ctrl packet alloc failure qrtrsendresumetx calls qrtrnodelookup which takes a reference on the returned node. If the subsequent call to qrtrallocctrlpacket fails due to memory allocation...
CVE-2026-97440
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix node refcount leak on ctrl packet alloc failure qrtrsendresumetx calls qrtrnodelookup which takes a reference on the returned node. If the subsequent call to qrtrallocctrlpacket fails due to memory allocation...
UBUNTU-CVE-2026-97440
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix node refcount leak on ctrl packet alloc failure qrtrsendresumetx calls qrtrnodelookup which takes a reference on the returned node. If the subsequent call to qrtrallocctrlpacket fails due to memory allocation...
Linux Distros Unpatched Vulnerability : CVE-2026-97440
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: qrtr: fix node refcount leak on ctrl packet alloc failure qrtrsendresumetx calls qrtrnodelookup which takes a reference on the returned node. If the...
PT-2026-104909
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix node refcount leak on ctrl packet alloc failure qrtr send resume tx calls qrtr node lookup which takes a reference on the returned node. If the subsequent call to qrtr alloc ctrl packet fails due to memory allocati...
PT-2026-98074
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A node reference count leak occurs in the net: qrtr component. The function qrtr send resume tx invokes qrtr node lookup, which increments the reference count of the returned node. If a...
Qualcomm IPC Router DoS
The vulnerability in the ctrlcmdbye function within the net/qrtr/ns.c module of Qualcomm IPC routers on Linux operating systems is related to a resource leak that occurs after the expiration of its valid usage period. Exploitation of this vulnerability may allow an attacker to cause a denial of...
Linux Heap Buffer Overflow DoS
The vulnerability in the radixtreecreate function within net/qrtr/afqrtr.c on the Linux kernel is related to a resource leak that occurs after the proper expiration of its usage period. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
AZL-90486 CVE-2026-52947 affecting package kernel for versions less than 6.6.143.1-1
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix refcount saturation and potential UAF in qrtrportremove In qrtrportremove, the socket reference count is decremented via sockput before the port is removed from the qrtrports XArray and before the RCU grace period...
PT-2026-122488
Уязвимость функции qrtr endpoint post компонента net/qrtr/af qrtr.c ядра операционной системы Linux связана с некорректным вычислением. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации...
PT-2026-51841
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the qrtr port remove function where the socket reference count is decremented using sock put before the port is removed from the qrtr ports XArray and before the RCU...