PT-2022-33303

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.19.6 Description A data-race issue exists around netdev budget. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v2.6.13 and is fixed in Linux Kernel...

PT-2022-33300

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.19.6 Description A data-race issue exists around netdev budget usecs. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.12. Recommendations For Linux...

PT-2022-33297

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.19.5 Description A data-race issue exists around netdev unregister timeout secs. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.13 through...

PT-2022-32525

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.8 Description The issue is related to the netfilter nf dup netdev, where the mac header is pushed a second time. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-31634

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to the usbnet module in the Linux Kernel. It involves the incorrect order of operations during device unregistration, specifically running unregister netdev before unbind...

PT-2022-31052

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to the usbnet module in the Linux Kernel. It involves the order of operations during the unbinding process, specifically the need to run unregister netdev before unbind. T...

PT-2022-31334

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to the usbnet driver in the Linux Kernel. It involves the order of operations during device unregistration, specifically running unregister netdev before unbind. The actu...

kernel: heap out of bounds write in nf_dup_netdev.c

An out-of-bounds OOB memory access flaw was found in nftfwddupnetdevoffload in net/netfilter/nfdupnetdev.c in the netfilter subcomponent in the Linux kernel due to a heap out-of-bounds write problem. This flaw allows a local attacker with a user account on the system to gain access to out-of-boun...

kernel: heap out of bounds write in nf_dup_netdev.c

An out-of-bounds OOB memory access flaw was found in nftfwddupnetdevoffload in net/netfilter/nfdupnetdev.c in the netfilter subcomponent in the Linux kernel due to a heap out-of-bounds write problem. This flaw allows a local attacker with a user account on the system to gain access to out-of-boun...

kernel: heap out of bounds write in nf_dup_netdev.c

An out-of-bounds OOB memory access flaw was found in nftfwddupnetdevoffload in net/netfilter/nfdupnetdev.c in the netfilter subcomponent in the Linux kernel due to a heap out-of-bounds write problem. This flaw allows a local attacker with a user account on the system to gain access to out-of-boun...

kernel: heap out of bounds write in nf_dup_netdev.c

An out-of-bounds OOB memory access flaw was found in nftfwddupnetdevoffload in net/netfilter/nfdupnetdev.c in the netfilter subcomponent in the Linux kernel due to a heap out-of-bounds write problem. This flaw allows a local attacker with a user account on the system to gain access to out-of-boun...

kernel: heap out of bounds write in nf_dup_netdev.c

An out-of-bounds OOB memory access flaw was found in nftfwddupnetdevoffload in net/netfilter/nfdupnetdev.c in the netfilter subcomponent in the Linux kernel due to a heap out-of-bounds write problem. This flaw allows a local attacker with a user account on the system to gain access to out-of-boun...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: mm/damon/dbgfs: fix 'struct pid' leaks in 'dbgfstargetidswrite' CVE-2021-46937 In the Linux kernel, the following vulnerability has been resolved: mm/damon/dbgfs: protect targets destructions with kdamondlock...

PT-2022-7623 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to the ipv6 component of the Linux kernel and is caused by a memory leak. When the network device is going down or IPv6 is disabled on the interface, the...

GSD-2022-1000400 net_sched: add __rcu annotation to netdev->qdisc

netsched: add rcu annotation to netdev-qdisc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.102 by commit...

PT-2022-28862

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.22 Description The issue concerns offload support for the NETDEV UNREGISTER event in the net: macsec module. It was introduced in version v5.6 and fixed in version v5.15.22. The actual impact and attack...

PT-2022-28947

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.8 Description The issue concerns offload support for the NETDEV UNREGISTER event in the net: macsec module. It was introduced in version v5.6 and fixed in version v5.16.8. The actual impact and attack...

PT-2022-28710

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.24 Description A potential security issue has been identified in the Linux Kernel, related to a KASAN error in the LAG NETDEV UNREGISTER handler. The actual impact and attack plausibility have not yet been...

PT-2022-28827

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.11 Description The issue is related to the net sched component in the Linux Kernel. It involves adding an rcu annotation to netdev-qdisc. The actual impact and attack plausibility have not yet been proven...

PT-2022-7625 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.16.10-1.32.fc32.qubes.x86 64+ 226 Description: The vulnerability is related to the xen/netfront component of the Linux kernel. It occurs because xennet destroy queues relies on info-netdev-real num tx queues t...