731 matches found
UBUNTU-CVE-2022-48807
In the Linux kernel, the following vulnerability has been resolved: ice: Fix KASAN error in LAG NETDEVUNREGISTER handler Currently, the same handler is called for both a NETDEVBONDINGINFO LAG unlink notification as for a NETDEVUNREGISTER call. This is causing a problem though, since the...
CVE-2022-48810 ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path
In the Linux kernel, the following vulnerability has been resolved: ipmr,ip6mr: acquire RTNL before calling ip6mrfreetable on failure path ip6mrfreetable can only be called under RTNL lock. RTNL: assertion failed at net/core/dev.c 10367 WARNING: CPU: 1 PID: 5890 at net/core/dev.c:10367...
kernel: net: ti: fix UAF in tlan_remove_one
A vulnerability was found in the Linux kernel's TI TLAN driver, where the tlanremoveone function can lead to a use-after-free issue when the driver attempts to access private data after the network device has already been freed, potentially causing system instability or crash...
SUSE CVE-2022-48720
In the Linux kernel, the following vulnerability has been resolved: net: macsec: Fix offload support for NETDEVUNREGISTER event Current macsec netdev notify handler handles NETDEVUNREGISTER event by releasing relevant SW resources only, this causes resources leak in case of macsec HW offload, as...
CVE-2022-32149 affecting package sriov-network-device-plugin for versions less than 3.7.0-1
CVE-2022-32149 affecting package sriov-network-device-plugin for versions less than 3.7.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-41717 affecting package sriov-network-device-plugin for versions less than 3.7.0-1
CVE-2022-41717 affecting package sriov-network-device-plugin for versions less than 3.7.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-29526 affecting package sriov-network-device-plugin for versions less than 3.7.0-1
CVE-2022-29526 affecting package sriov-network-device-plugin for versions less than 3.7.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-1996 affecting package sriov-network-device-plugin for versions less than 3.7.0-1
CVE-2022-1996 affecting package sriov-network-device-plugin for versions less than 3.7.0-1. An upgraded version of the package is available that resolves this issue...
DEBIAN-CVE-2022-48720
In the Linux kernel, the following vulnerability has been resolved: net: macsec: Fix offload support for NETDEVUNREGISTER event Current macsec netdev notify handler handles NETDEVUNREGISTER event by releasing relevant SW resources only, this causes resources leak in case of macsec HW offload, as...
CVE-2021-47589
In the Linux kernel, the following vulnerability has been resolved: igbvf: fix double free in igbvfprobe In igbvfprobe, if registernetdev fails, the program will go to label errhwinit, and then to label errioremap. In freenetdev which is just below label errioremap, there is listforeachentrysafe...
UBUNTU-CVE-2021-47589
In the Linux kernel, the following vulnerability has been resolved: igbvf: fix double free in igbvfprobe In igbvfprobe, if registernetdev fails, the program will go to label errhwinit, and then to label errioremap. In freenetdev which is just below label errioremap, there is listforeachentrysafe...
CVE-2024-38593
In the Linux kernel, the following vulnerability has been resolved: net: micrel: Fix receiving the timestamp in the frame for lan8841 The blamed commit started to use the ptp workqueue to get the second part of the timestamp. And when the port was set down, then this workqueue is stopped. But if...
Linux kernel security vulnerabilities
Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel due to a null pointer error and memory leak in a function that mishandles the state of a network device...
The vulnerability of Netgear ProSafe NMS300 network devices’ microprogramming software, related to the use of default credentials, allows attackers to escalate their privileges.
The vulnerability of Netgear ProSafe NMS300 network device software relates to the use of default login credentials. Exploiting this vulnerability can allow attackers to enhance their privileges...
SSH communication between Netscaler Console nodes and/or Netscaler/Netscaler-SDX instance(s) fails
After upgrading Netscaler Console aka. ADM from earlier versions to either13.1-53.17 or 53.22 refresh build or 14.1-25.53, certain tasks like re-creating HA deployment, Netscaler backup , or other tasks involving SSH connection may fail and manifest in error popup or log entries in...
CVE-2023-45288 affecting package sriov-network-device-plugin for versions less than 3.6.2-3
CVE-2023-45288 affecting package sriov-network-device-plugin for versions less than 3.6.2-3. A patched version of the package is available...
kernel: Slab-out-of-bound read in compare_netdev_and_ip
A vulnerability was found in comparenetdevandip in drivers/infiniband/core/cma.c in RDMA in the Linux kernel. An improper cleanup results in an out-of-boundary read. This flaw allows a local user to crash or escalate privileges on the system...
D-Link D-View Code Execution Vulnerability
D-Link D-View is a Web-based design network device management software from China AUO D-Link. A code execution vulnerability exists in D-Link D-View that stems from the application failing to properly filter special elements that construct code segments. An attacker could exploit the vulnerabilit...
D-Link D-View Trust Management Issue Vulnerability
D-Link D-View is a Web-based design network device management software from China AUO D-Link. A trust management issue vulnerability exists in D-Link D-View8, which stems from the use of hard-coded encryption keys, and can be exploited by an attacker to bypass authentication on the system...
