PT-2021-26639

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15 Description: The issue is related to a use-after-free UAF bug in the j1939 netdev start function, specifically affecting the rx kref of j1939 priv. This bug was introduced in version v5.4 and fixed in...

UVI-2021-1001892 netfilter: nf_tables: skip netdev events generated on netns removal

netfilter: nftables: skip netdev events generated on netns removal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

GSD-2021-1001892 netfilter: nf_tables: skip netdev events generated on netns removal

netfilter: nftables: skip netdev events generated on netns removal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

PT-2021-30286

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.156 Description A use-after-free UAF issue exists in the j1939 netdev start function, specifically affecting the rx kref of j1939 priv. This issue was introduced in version v5.4 and is fixed in version...

PT-2021-26291

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.156 Description: A use-after-free UAF issue exists in the j1939 netdev start function, specifically affecting the rx kref of j1939 priv. The actual impact and attack plausibility have not yet been proven...

PT-2021-26315

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.76 Description: A use-after-free UAF issue exists in the j1939 netdev start function, specifically affecting the rx kref of j1939 priv. The actual impact and attack plausibility have not yet been proven...

PT-2021-26354

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.15 Description: The issue is related to a use-after-free UAF bug in the j1939 netdev start function, specifically affecting the rx kref of j1939 priv. The actual impact and attack plausibility have not bee...

PT-2021-26362

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.15 Description: The issue concerns netfilter and nf tables, where netdev events generated on netns removal are not properly handled. The actual impact and attack plausibility have not yet been proven...

PT-2021-30310

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.76 Description The issue is related to a use-after-free UAF bug in the j1939 netdev start function, specifically affecting the rx kref of j1939 priv. This bug was introduced in version v5.4 and is fixed in...

PT-2021-30349

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue is related to a use-after-free UAF bug in the j1939 netdev start function, specifically affecting the rx kref of j1939 priv. The actual impact and attack plausibility have not yet...

PT-2024-11453

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free vulnerability has been resolved in the Linux kernel, specifically in the j1939 netdev start function. This issue can be triggered when the rx kref of j1939 priv is...

PT-2024-11368

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been resolved in the Linux kernel. The issue was discovered by syzkaller and can be triggered by specific commands, including ip nexthop add id 1 blackhole and...

hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking for the NETREG_REGISTERED state leading to a use-after-free and a double free.

...

AZL-6578 CVE-2021-37159 affecting package kernel for versions less than 5.15.2.1-1

hsofreenetdevice in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregisternetdev without checking for the NETREGREGISTERED state, leading to a use-after-free and a double free...

CVE-2021-37159

hsofreenetdevice in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregisternetdev without checking for the NETREGREGISTERED state, leading to a use-after-free and a double free...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in drivers/net/usb/hso.c in Linux kernel version 5.13.4 and earlier, which originates from a call to unregisternetdev without checking the statu...

PT-2024-11311 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free UAF bug has been resolved in the Linux kernel. The issue occurs because priv, which is netdev private data, cannot be used after the free netdev call. Using priv after...

PT-2024-11312 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a use-after-free UAF bug in the emac remove function. The adpt variable, which is netdev private data, cannot be used after the free netdev call. Using adpt aft...

PT-2024-11243 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential use-after-free vulnerability has been resolved in the Linux kernel. The issue occurs in the ec bhf remove function, where the priv pointer is used after free netdev has bee...

PT-2024-11245

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak vulnerability has been resolved in the Linux kernel. The issue was caused by a missing free netdev call in the mkiss close function, which led to a memory leak when the mki...