1061 matches found
EUVD-2025-34588
In the Linux kernel, the following vulnerability has been resolved: net: tun: Update napi-skb after XDP process The syzbot report a UAF issue: BUG: KASAN: slab-use-after-free in skbresetmacheader include/linux/skbuff.h:3150 inline BUG: KASAN: slab-use-after-free in napifragsskb net/core/gro.c:723...
CVE-2025-39968
In the Linux kernel, the following vulnerability has been resolved: i40e: add max boundary check for VF filters There is no check for max filters that VF can request. Add it...
CVE-2025-39973
The CVE-2025-39973 issue affects the Linux kernel i40e driver. The ring_len parameter provided by the virtual function (VF) could be assigned to hardware memory context (HMC) without validation. A patch was introduced to add an upper-bound check for both Tx and Rx queue lengths, with hardware sup...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from uninitialized HWS action reference counting and mutual exclusion locks in the net/mlx5 component, which could le...
EUVD-2025-34418
Out-of-bounds read in Windows NDIS allows an authorized attacker to elevate privileges locally...
CVE-2025-55339
Out-of-bounds read in Windows NDIS allows an authorized attacker to elevate privileges locally...
CVE-2025-55339 Windows Network Driver Interface Specification (NDIS) Driver Elevation of Privilege Vulnerability
...
CVE-2025-55339
CVE-2025-55339 : Windows Network Driver Interface Specification (NDIS) driver contains an out-of-bounds read that enables an authorized, local attacker to achieve elevated privileges. The Initial and Connected documents confirm the vulnerability description but do not provide concrete remediation...
CVE-2025-55339 Windows Network Driver Interface Specification (NDIS) Driver Elevation of Privilege Vulnerability
...
Windows Network Driver Interface Specification (NDIS) Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows NDIS allows an authorized attacker to elevate privileges locally...
CVE-2025-20716
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00421149; Issue ID: MSV-372...
CVE-2025-20717
A security vulnerability exists in the wlan AP driver of MediaTek Chipsets due to an incorrect bounds check , which can result in an out-of-bounds write . This flaw could allow a malicious actor who has already obtained System privileges to achieve local escalation of privilege . No user interact...
CVE-2025-20719
A security vulnerability exists in the wlan AP driver of MediaTek Chipsets due to an incorrect bounds check that can lead to an out-of-bounds write . This flaw could allow for remote (proximal/adjacent) escalation of privilege without requiring additional execution privileges or user interaction....
PT-2025-42024
Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description An out-of-bounds read issue exists in Windows NDIS. A local attacker with authorization can exploit this to elevate privileges. Recommendations At the moment, there is no information...
Microsoft Windows Network Driver Interface Specification 缓冲区错误漏洞
The Microsoft Windows Network Driver Interface Specification is one of the core components of a Windows network architecture from Microsoft Corporation USA. A buffer error vulnerability exists in the Microsoft Windows Network Driver Interface Specification, which can be exploited by an attacker t...
net/mlx5e: SHAMPO, Fix incorrect page release
...
Linux Distros Unpatched Vulnerability : CVE-2023-53556
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iavf: Fix use-after-free in freenetdev We do netifnapiadd for all allocated qvectors, but potentially do netifnapidel for part of them, then kfree qvectors and...
SUSE CVE-2023-53556
In the Linux kernel, the following vulnerability has been resolved: iavf: Fix use-after-free in freenetdev We do netifnapiadd for all allocated qvectors, but potentially do netifnapidel for part of them, then kfree qvectors and leave invalid pointers at dev-napilist. Reproducer: root@host cat...