Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability

...

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

...

Microsoft Windows Network Driver Interface Specification Security Vulnerability

The Microsoft Windows Network Driver Interface Specification is one of the core components of a Windows network architecture from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Network Driver Interface Specification. An attacker could exploit this vulnerability to...

PT-2024-4756 · Microsoft · Windows Layer-2 Bridge Network Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Layer-2 Bridge Network Driver affected versions not specified Description: The issue is related to insufficient input validation in the Windows Layer-2 Bridge Network Driver, which can be exploited by a remote attacker to cause a deni...

kernel: net: ti: fix UAF in tlan_remove_one

A vulnerability was found in the Linux kernel's TI TLAN driver, where the tlanremoveone function can lead to a use-after-free issue when the driver attempts to access private data after the network device has already been freed, potentially causing system instability or crash...

kernel: net/mlx5e: fix a double-free in arfs_create_groups

A double-free vulnerability was found in the arfscreategroups function in the Linux kernel's net/mlx5e driver. This issue could lead to memory corruption or a system crash if exploited, as freeing the same memory twice may cause undefined behavior...

kernel: net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context

An operation precedence flaw was found in the Linux kernel’s Mellanox Technologies networking driver. This flaw allows a local user to crash the system or potentially gain access to data that should not be accessible...

kernel: net/mlx5e: Fix mlx5e_priv_init() cleanup flow

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix mlx5eprivinit cleanup flow The Linux kernel CVE team has assigned CVE-2024-35959 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024052019-CVE-2024-35959-6e06@gregkh/T...

kernel: net: hns3: do not allow call hns3_nic_net_open repeatedly

A vulnerability was discovered in the Linux kernel's hns3 network driver. The hns3nicnetopen function is designed to be called only once per device instance. However, due to insufficient checks, multiple calls to this function are possible. This can lead to scenarios where hns3nicnetopen is invok...

MAL-2024-5401 Malicious code in networkdriver (PyPI)

--- -= Per source details. Do not edit below this line.=-...

CLSA-2024-1718973794 Fix of 21 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-26777 - fbdev: sis: Error out if pixclock equals zero CVE-url: https://ubuntu.com/security/CVE-2021-47542 - net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic83xxaddrings CVE-url: https://ubuntu.com/security/CVE-2021-47518 - nfc: fix...

UBUNTU-CVE-2022-48745

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Use deltimersync in fw reset flow of halting poll Substitute deltimer with deltimersync in fw reset polling deactivation flow, in order to prevent a race condition which occurs when deltimer is called and timer is...

DEBIAN-CVE-2021-47596

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix use-after-free bug in hclgevfsendmbxmsg Currently, the hns3remove function firstly uninstall client instance, and then uninstall acceletion engine device. The netdevice is freed in client instance uninstall process...

CVE-2024-38594

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: move the EST lock to struct stmmacpriv Reinitialize the whole EST structure would also reset the mutex lock which is embedded in the EST structure, and then trigger the following warning. To address this, move the lo...

CVE-2024-38553

In the Linux kernel, the following vulnerability has been resolved: net: fec: remove .ndopollcontroller to avoid deadlocks There is a deadlock issue found in sungem driver, please refer to the commit ac0a230f719b "eth: sungem: remove .ndopollcontroller to avoid deadlocks". The root cause of the...

CVE-2023-52742

In the Linux kernel, the following vulnerability has been resolved: net: USB: Fix wrong-direction WARNING in plusb.c The syzbot fuzzer detected a bug in the plusb network driver: A zero-length control-OUT transfer was treated as a read instead of a write. In modern kernels this error provokes a...

DEBIAN-CVE-2024-36900

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when devlink reload during initialization The devlink reload process will access the hardware resources, but the register operation is done before the hardware is initialized. So, processing the devlin...

UBUNTU-CVE-2024-36900

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when devlink reload during initialization The devlink reload process will access the hardware resources, but the register operation is done before the hardware is initialized. So, processing the devlin...

SUSE CVE-2021-47400

In the Linux kernel, the following vulnerability has been resolved: net: hns3: do not allow call hns3nicnetopen repeatedly hns3nicnetopen is not allowed to called repeatly, but there is no checking for this. When doing device reset and setup tc concurrently, there is a small oppotunity to call...

The vulnerability of the rndis_set_response() function in the USB driver in the rndis.c module of the Linux kernel allows a hacker to gain increased privileges within the system.

The vulnerability of the rndissetresponse function in the USB driver in the rndis.c module of the Linux kernel is related to integer overflow errors. Exploiting this vulnerability can allow an attacker to gain increased privileges...