12 matches found
ROS-20260923-73-0058
The vulnerability of the xskbind function in the net/xdp/xsk.c module, which implements networking functions for the Linux operating system’s kernel, is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...
SUSE CVE-2026-90115
In the Linux kernel, the following vulnerability has been resolved: xsk: fix NULL pointer dereference in xskrcv In the xskrcv multi-buffer path, xskbuffalloc is called in a loop without checking its return value. xskbuffcanalloc only counts fill queue entries without validating their addresses, s...
ROS-20260805-73-0016
The vulnerability of the xskdiagfill function in the net/xdp/xskdiag.c module, which implements networking functions for the Linux operating system’s kernel, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...
Linux xdp xsk_buff_pool Buffer Overflow DoS
The vulnerabilities of the functions xpinitdmainfo and xpdmamap in the net/xdp/xskbuffpool.c module of the Linux kernel are related to improper initialization. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected...
Linux net/xdp/xsk Heap Buffer Overflow DoS
The vulnerability of the xskbuildskb function in the net/xdp/xsk.c module of the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux kernel xskbind Heap Buffer Overflow DoS
The vulnerability of the xskbind function in the net/xdp/xsk.c module, which implements networking functions for the Linux operating system’s kernel, is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...
Linux kernel xsk_diag_fill Heap Buffer Overflow DoS
The vulnerability of the xskdiagfill function in the net/xdp/xskdiag.c module, which implements networking functions for the Linux operating system’s kernel, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...
CVE-2025-21808: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net: xdp: Disallow attaching device-bound programs in generic mode Device-bound programs are used to support RX metadata kfuncs. These kfuncs are driver-specific and rely on the driver context to read the metadata. This means the...
PT-2023-36673
Уязвимость функции xsk bind модуля net/xdp/xsk.c реализации сетевых функций ядра операционной системы Linux связана с ошибками при обновлении счетчика ссылок. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информа...
kernel: xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write which could result in crash and data coruption
An out-of-bounds OOB memory access flaw was found in the Network XDP the eXpress Data Path module in the Linux kernel's xdpumemreg function in net/xdp/xdpumem.c. When a user with special user privilege of CAPNETADMIN or root calls setsockopt to register umem ring on XDP socket, passing the headro...
CVE-2020-12659
Concrete details found: CVE-2020-12659 affects the Linux kernel before 5.6.7. The vulnerability is an out-of-bounds write in xdp_umem_reg() of net/xdp/xdp_umem.c, exploitable by a user with CAP_NET_ADMIN due to missing headroom validation. Impact described across connected docs includes potential...
CVE-2020-12659: Out-of-bounds Write
An issue was discovered in the Linux kernel before 5.6.7. xdpumemreg in net/xdp/xdpumem.c has an out-of-bounds write by a user with the CAPNETADMIN capability because of a lack of headroom validation...