11 matches found
CVE-2026-98619
In the Linux kernel, the following vulnerability has been resolved: net: ethtool: keep rtnllock for the ioctl self test An offline self test that brings the interface down and back up with netifclose / netifopen requires rtnllock for both. Since the ethtool IOCTL path became rtnl-optional for...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the ethnlactmodulefwflash function in the net/ethtool/module.c module, which implements networking functions in the Linux kernel, is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to cause a service...
CVE-2026-64228: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NULL deref when PHY driver is unbound phydev-drv can become NULL while the phydevice is still attached to its netdevice, namely after the PHY driver is unbound via sysfs: echo /sys/bus/mdiobus/drivers/...
Linux ethtool EEPROM Buffer Overflow
The vulnerability of the eeprompreparedata function in the net/ethtool/eeprom.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the ethtoolsetcoalesce function in the net/ethtool/ioctl.c module of the Linux kernel’s networking functions is related to the use of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2024-43836
In the Linux kernel, the following vulnerability has been resolved: net: ethtool: pse-pd: Fix possible null-deref Fix a possible null dereference when a PSE supports both c33 and PoDL, but only one of the netlink attributes is specified. The c33 or PoDL PSE capabilities are already validated in t...
CVE-2024-43836: NULL Pointer Dereference
In the Linux kernel, the following vulnerability has been resolved: net: ethtool: pse-pd: Fix possible null-deref Fix a possible null dereference when a PSE supports both c33 and PoDL, but only one of the netlink attributes is specified. The c33 or PoDL PSE capabilities are already validated in t...
Linux kernel security vulnerabilities
Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in Linux kernel, which stems from a null function pointer dereference in the ethtoolgetphystatsethtool function of the net:ethtool component...
CVE-2024-40928: NULL Pointer Dereference
In the Linux kernel, the following vulnerability has been resolved: net: ethtool: fix the error condition in ethtoolgetphystatsethtool Clang static checker scan-build warning: net/ethtool/ioctl.c:line 2233, column 2 Called function pointer is null null dereference. Return '-EOPNOTSUPP' when...
PT-2024-29143
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference issue has been identified in the Linux kernel, specifically in the ethtool get phy stats ethtool function. This issue arises when the 'ops-get ethtool phy stat...
