PT-2021-29043

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.42 Description The issue is related to the net hns3 component, where the register netdev function is called before the client initialization is complete. This problem was introduced in version v5.6 and is...

PT-2021-25003

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.9 Description: The issue is related to the net function in the Linux Kernel, specifically with the hns3 driver. It involves delaying the call to register netdev until the client initialization is complete...

PT-2021-28997

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.9 Description The issue is related to the net function in the Linux Kernel, specifically with the hns3 driver. It involves delaying the call to register netdev until the client initialization is complete. T...

PT-2021-25049

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.42 Description The issue is related to the net function in the Linux Kernel, specifically with the hns3 driver. It involves delaying the call to register netdev until the client initialization is complete...

PT-2021-27478

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to an unknown read issue. The crash state includes functions such as netdev get, config parse netdev, and next assignment...

kernel: net-sysfs: *_queue_add_kobject refcount issue

A flaw was found in the way the rxqueueaddkobject and netdevqueueaddkobject functions in the Linux kernel handled refcounting of certain objects. This flaw allows a local user who can trigger the error code path to use this vulnerability to disturb the integrity of the system...

kernel: net-sysfs: *_queue_add_kobject refcount issue

A flaw was found in the way the rxqueueaddkobject and netdevqueueaddkobject functions in the Linux kernel handled refcounting of certain objects. This flaw allows a local user who can trigger the error code path to use this vulnerability to disturb the integrity of the system...

SUSE SLES12 Security Update : libvirt (SUSE-SU-2020:2233-1)

This update for libvirt fixes the following issues : CVE-2020-14339: Don't leak /dev/mapper/control into QEMU. Use ioctl's to obtain the dependency tree of disks and drop use of libdevmapper. - bsc1161883, bsc1174458 qemu: Setup emulator thread and cpuset.mems before exec - bsc1171946 libxl:...

The vulnerabilities of the functions rx_queue_add_kobject() and netdev_queue_add_kobject() (net/core/net-sysfs.c) in the Linux kernel allow attackers to compromise data integrity.

The vulnerability of the functions rxqueueaddkobject and netdevqueueaddkobject net/core/net-sysfs.c in the Linux kernel is related to errors in pointer counting in the networking subsystem. Exploiting this vulnerability could allow an attacker to compromise data integrity...

CVE-2019-20811

CVE-2019-20811 affects the Linux kernel prior to 5.0.6, where a reference count is mishandled in rx_queue_add_kobject() and netdev_queue_add_kobject() within net/core/net-sysfs.c (CID-a3e23f719f5c). The issue was fixed in kernel 5.0.6 (ChangeLog-5.0.6). Exploitation would require local access and...

systemd:fuzz-netdev-parser: Heap-use-after-free in network_config_compare_func

Project: https://github.com/systemd/systemd.git Detailed Report: https://oss-fuzz.com/testcase?key=5133720507121664 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-netdev-parser Job Type: libfuzzerasansystemd Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

systemd:fuzz-netdev-parser: Use-of-uninitialized-value in l2tp_session_free

Project: https://github.com/systemd/systemd.git Detailed Report: https://oss-fuzz.com/testcase?key=5757581015646208 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-netdev-parser Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

systemd:fuzz-netdev-parser: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5142453635252224 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-netdev-parser Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: memory MSAN...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A memory leak in sitinitnet in net/ipv6/sit.c when registernetdev fails to register sitn-fbtunneldev allows an attacker to crash the system...

Privilege Escalation

The kernel contains privilege escalation. A flaw in devload could allow a local user who has the CAPNETADMIN capability to load arbitrary modules from "/lib/modules/", instead of only netdev modules...

systemd security, bug fix, and enhancement update

239-18.0.1 - fix netdev is missing for iscsi entry in /etc/fstab [email protected] Orabug: 25897792 - set 'RemoveIPC=no' in logind.conf as default for OL7.2 Orabug: 22224874 - allow dm remove ioctl to co-operate with UEK3 Vaughan Cao Orabug: 18467469 - add hv dynamic memory support Jerry...

kernel: net-sysfs: *_queue_add_kobject refcount issue

A flaw was found in the way the rxqueueaddkobject and netdevqueueaddkobject functions in the Linux kernel handled refcounting of certain objects. This flaw allows a local user who can trigger the error code path to use this vulnerability to disturb the integrity of the system...

CVE-2019-16994

In the Linux kernel before 5.0, a memory leak exists in sitinitnet in net/ipv6/sit.c when registernetdev fails to register sitn-fbtunneldev, which may cause denial of service, aka CID-07f12b26e21a...

DEBIAN-CVE-2019-16994

In the Linux kernel before 5.0, a memory leak exists in sitinitnet in net/ipv6/sit.c when registernetdev fails to register sitn-fbtunneldev, which may cause denial of service, aka CID-07f12b26e21a...

UBUNTU-CVE-2019-16994

In the Linux kernel before 5.0, a memory leak exists in sitinitnet in net/ipv6/sit.c when registernetdev fails to register sitn-fbtunneldev, which may cause denial of service, aka CID-07f12b26e21a...