CVE-2024-38608 net/mlx5e: Fix netif state handling

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix netif state handling mlx5esuspend cleans resources only if netifdevicepresent returns true. However, mlx5eresume changes the state of netif, via mlx5enicenable, only if regstate == NETREGREGISTERED. In the below...

CVE-2024-38608

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix netif state handling mlx5esuspend cleans resources only if netifdevicepresent returns true. However, mlx5eresume changes the state of netif, via mlx5enicenable, only if regstate == NETREGREGISTERED. In the below...

CVE-2024-38608 net/mlx5e: Fix netif state handling

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix netif state handling mlx5esuspend cleans resources only if netifdevicepresent returns true. However, mlx5eresume changes the state of netif, via mlx5enicenable, only if regstate == NETREGREGISTERED. In the below...

PT-2024-9291

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.10.0-rc2+ Description: The vulnerability is related to the ionic component of the Linux kernel. It occurs when the netif napi del function is called, but the .poll pointer is not reset to NULL. As a result, th...

PT-2024-7731

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vulnerability is related to the Linux kernel's virtual Ethernet veth component. When XDP eXpress Data Path is enabled, veth sets the NETIF F GRO flag automatically because both...

PT-2022-7686

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential use-after-free in the Linux kernel's hsr module. This occurs when the skb is delivered to netif rx, which may free it, and subsequent dereferencing of...

PT-2020-22269

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash occurred due to an unknown read issue. The crash state involves several functions, including Ip6::NetifUnicastAddress::GetNext,...

PT-2020-22430

Name of the Vulnerable Software and Affected Versions OpenThread versions affected versions not specified Description A crash occurs due to an unknown read issue. The crash involves the Ip6::Netif::UnsubscribeAllRoutersMulticast, Mle::MleRouter::HandleDetachStart, and Mle::Mle::SetStateDetached...

CVE-2017-7477

Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows attackers to cause a denial of service or possibly have unspecified other impact by leveraging the use of a MAXSKBFRAGS+1 size in conjunction with the NETIFFFRAGLIST feature, leading...

atl2 driver memory leak vulnerability

The atl2 driver is a set of Linux kernel drivers for Ethernet adapters. scatter/gather IO is a standard technique used for high-performance IO. netiffsg is an identifier used to determine whether scatter/gather I/O is enabled. A security vulnerability exists in the atl2 driver versions 3.8 throug...

Linux Kernel 2.6.37 (RedHat Ubuntu 10.04) - Full-Nelson.c Local Privilege Escalation

Linux Kernel 2.6.37 RedHat Ubuntu 10.04 - Full-Nelson.c Local Privilege Escalation / Linux Kernel = 2.6.37 local privilege escalation by Dan Rosenberg @djrbliss on twitter Usage: gcc full-nelson.c -o full-nelson ./full-nelson This exploit leverages three vulnerabilities to get root, all of which...