952 matches found
net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
...
SUSE CVE-2024-50168
In the Linux kernel, the following vulnerability has been resolved: net/sun382586: fix potential memory leak in sun382586sendpacket The sun382586sendpacket returns NETDEVTXOK without freeing skb in case of skb-len being too long, add devkfreeskb to fix it...
The vulnerability of the hv_netvsc component in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the hvnetvsc component in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
USN-7095-1: Linux kernel vulnerabilities
Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. CVE-2024-25741 Several security issues were discovered in the Linux kernel. An...
CVE-2024-50167 be2net: fix potential memory leak in be_xmit()
In the Linux kernel, the following vulnerability has been resolved: be2net: fix potential memory leak in bexmit The bexmit returns NETDEVTXOK without freeing skb in case of bexmitenqueue fails, add devkfreeskbany to fix it...
The vulnerability of the hclge_query_reg_info_of_ssu() function in the networking adapter driver of the Hisilicon HNS3 kernel for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the hclgequeryreginfoofssu function in the drivers/net/ethernet/hisilicon/hns3/hns3pf/hclgeerr.c file of the Linux operating system’s network adapter driver for Hisilicon HNS3 is related to incorrect index calculations. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the vcap_api_encode_rule_test() function in the network adapter driver from Microchip’s Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the vcapapiencoderuletest function in the drivers/net/ethernet/microchip/vcap/vcapapikunit.c file of the network adapter driver software for Microchip’s Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an...
DEBIAN-CVE-2022-48985
In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix race on per-CQ variable napi workdone After calling napicompletedone, the NAPIFSTATESCHED bit may be cleared, and another CPU can start napi thread and access per-CQ variable, cq-workdone. If the other thread for...
UBUNTU-CVE-2022-48962
In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: Fix potential use-after-free in hisifemacrx The skb is delivered to napigroreceive which may free it, after calling this, dereferencing skb may trigger use-after-free...
net: microchip: vcap: Fix use-after-free error in kunit test
...
net: mana: Fix RX buf alloc_size alignment and atomic op panic
...
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency"
CVE-2023-52658 is a vulnerability in the Linux kernel's Mellanox MLX5 driver, specifically related to the switchdev mode. A previous commit intended to block entering switchdev mode due to namespace inconsistencies inadvertently caused system crashes. To address this, the problematic commit was...
igb: cope with large MAX_SKB_FRAGS
...
net/mlx5e: Take state lock during tx timeout reporter
...
net: dsa: mv88e6xxx: Fix out-of-bound access
...
net: usb: qmi_wwan: fix memory leak for not ip packets
...
kernel: hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
A vulnerability was found in the hvnetvsc driver in the Linux kernel, where a race condition is present between the netvscprobe and netvscremove functions. This race condition could lead to system hangs during network device removal...
USN-7028-1: Linux kernel vulnerabilities
It was discovered that the JFS file system contained an out-of-bounds read vulnerability when printing xattr debug information. A local attacker could use this to cause a denial of service system crash. Several security issues were discovered in the Linux kernel. An attacker could possibly use...
DEBIAN-CVE-2024-45019
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Take state lock during tx timeout reporter mlx5esafereopenchannels requires the state lock taken. The referenced changed in the Fixes tag removed the lock to fix another issue. This patch adds it back but at a later...