CVE-2022-25636

net/netfilter/nfdupnetdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a heap out-of-bounds write. This is related to nftablesoffload...

systemd:fuzz-netdev-parser: Use-of-uninitialized-value in in_addr_is_null

Project: https://github.com/systemd/systemd.git Detailed Report: https://oss-fuzz.com/testcase?key=4697395387039744 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-netdev-parser Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

CVE-2022-0646

A flaw use after free in the Linux kernel Management Component Transport Protocol MCTP subsystem was found in the way user triggers cancelworksync after the unregisternetdev during removing device. A local user could use this flaw to crash the system or escalate their privileges on the system. It...

PT-2022-28507

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.99 Description The issue concerns offload support for the NETDEV UNREGISTER event in the net: macsec module. It was introduced in version v5.6 and fixed in version v5.10.99. The actual impact and attack...

PT-2024-10521

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to errors in reading beyond the allocated buffer memory in the ice component of the Linux kernel. This can cause a denial of service. The problem occurs because the...

PT-2024-11805

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.16.5-00042-g8f5585009b24 Description The issue arises when a system with LX2160A and Marvell DSA switches undergoes a reboot while the DSA master dpaa2-eth is active. This leads to a panic due to the...

PT-2025-8434

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, related to the handling of USB Ethernet adapters. The issue arises from a use-after-free error on disconnect, which was attempted...

PT-2021-27315

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.12 Description: The issue concerns a potential double free in tun free netdev, which may have security implications. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2021-27245

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.295 Description The issue is related to the hamradio component, specifically the ax25 protocol, where a potential security vulnerability may exist due to a kfree operation being deferred after unregister...

PT-2021-27250

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.260 Description The issue is related to the hamradio component, specifically the ax25 protocol, where a potential security vulnerability may exist due to a kfree operation being deferred after unregister...

PT-2021-27313

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.12 Description: A potential security issue exists in the hamradio component of the Linux Kernel, related to the defer ax25 kfree after unregister netdev. The actual impact and attack plausibility have not...

PT-2021-8138 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to a double-free issue in the tun free netdev function. This issue can be exploited to execute arbitrary code and elevate privileges. The problem arises fr...

PT-2021-8142 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an incorrect structure access in the Linux kernel's net component, specifically in the prestera module. This can cause invalid memory access for certain events,...

PT-2024-11490

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereferencing issue has been identified in the Linux kernel, specifically in the smc vlan by tcpsk function. This issue arises when netdev lower get next returns NULL, whi...

PT-2021-30469

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.156 Description A use-after-free UAF issue exists in the j1939 netdev start function, specifically affecting the rx kref of j1939 priv. The actual impact and attack plausibility have not yet been proven...

PT-2021-30506

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.76 Description The issue is related to a use-after-free UAF bug in the j1939 netdev start function, specifically affecting the rx kref of j1939 priv. This bug was introduced in version v5.4 and fixed in...

PT-2021-26570

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue is related to a use-after-free UAF bug in the j1939 netdev start function, specifically affecting the rx kref of j1939 priv. The actual impact and attack plausibility have not yet...

PT-2021-30565

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue is related to a use-after-free UAF bug in the j1939 netdev start function, specifically affecting the rx kref of j1939 priv. The actual impact and attack plausibility have not been...

PT-2021-26639

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15 Description: The issue is related to a use-after-free UAF bug in the j1939 netdev start function, specifically affecting the rx kref of j1939 priv. This bug was introduced in version v5.4 and fixed in...

PT-2021-26511

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.76 Description The issue is related to a use-after-free UAF bug in the j1939 netdev start function, specifically affecting the rx kref of j1939 priv. This bug was introduced in version v5.4 and is fixed in...