CVE-2024-38146

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability...

CVE-2024-38145

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability...

CVE-2024-38146 Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

...

CVE-2024-38146

CVE-2024-38146 affects the Windows Layer-2 Bridge Network Driver. The CVSS 3.1 base score is 7.5 (HIGH) with Network attack, low complexity, no privileges, no user interaction, and high availability impact. Descriptions in connected OpenVAS items corroborate a DoS impact on Windows Layer-2 Bridge...

CVE-2024-38146 Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

...

CVE-2024-38145 Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

...

CVE-2024-38145 Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

...

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

...

PT-2024-5646 · Microsoft · Windows Layer-2 Bridge Network Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Layer-2 Bridge Network Driver affected versions not specified Description: The issue is related to errors in pointer dereferencing, which can be exploited by a remote attacker to cause a denial of service. This can affect the system,...

kernel: net/mlx5: Discard command completions in internal error

A use-after-free vulnerability has been discovered in the Linux kernel within the drivers/net/ethernet/mellanox/mlx5/core/cmd.c component, specifically related to the Mellanox network driver. This flaw can lead to compromised system availability. Successful exploitation could result in...

kernel: isdn: mISDN: Fix sleeping function called from invalid context

In the Linux kernel, the following vulnerability has been resolved: isdn: mISDN: Fix sleeping function called from invalid context The driver can call card-isac.release function from an atomic context. Fix this by calling this function after releasing the lock. The following log reveals it:...

kernel: net/mlx5: Discard command completions in internal error

A use-after-free vulnerability has been discovered in the Linux kernel within the drivers/net/ethernet/mellanox/mlx5/core/cmd.c component, specifically related to the Mellanox network driver. This flaw can lead to compromised system availability. Successful exploitation could result in...

SUSE CVE-2024-42112

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: free isb resources at the right time When using MSI/INTx interrupt, the shared interrupts are still being handled in the device remove routine, before free IRQs. So isb memory is still read after it is freed. Thus mov...

CVE-2024-42113

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: initialize numqvectors for MSI/INTx interrupts When using MSI/INTx interrupts, wx-numqvectors is uninitialized. Thus there will be kernel panic in wxallocqvectors to allocate queue vectors...

kernel: net: amd-xgbe: Fix skb data length underflow

In the Linux kernel, the following vulnerability has been resolved: net: amd-xgbe: Fix skb data length underflow There will be BUGON triggered in include/linux/skbuff.h leading to intermittent kernel panic, when the skb length underflow is detected. Fix this by dropping the packet if such length...

kernel: net: ti: fix UAF in tlan_remove_one

A vulnerability was found in the Linux kernel's TI TLAN driver, where the tlanremoveone function can lead to a use-after-free issue when the driver attempts to access private data after the network device has already been freed, potentially causing system instability or crash...

The vulnerability of the Network Driver Interface Standard (NDIS) interface in Windows operating systems, which allows a hacker to cause a service failure

The vulnerability of the Network Driver Interface Standard NDIS in Windows operating systems is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

kernel: net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg

A vulnerability was found in the Linux kernel's HNS3 network driver related to a use-after-free condition in the hclgevfsendmbxmsg function. The issue occurs when the hns3remove function uninstalls a client instance before uninstalling the acceleration engine device, leading to access of freed...

DEBIAN-CVE-2022-48837

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: rndis: prevent integer overflow in rndissetresponse If "BufOffset" is very large the "BufOffset + 8" operation can have an integer overflow...

UBUNTU-CVE-2022-48864

In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: add validation for VIRTIONETCTRLMQVQPAIRSSET command When control vq receives a VIRTIONETCTRLMQVQPAIRSSET command request from the driver, presently there is no validation against the number of queue pairs to configure...