991 matches found
CVE-2025-40003 net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work
In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work The origin code calls canceldelayedwork in ocelotstatsdeinit to cancel the cyclic delayed work item ocelot-statswork. However, canceldelayedwork may fail to canc...
i40e: fix idx validation in i40e_validate_queue_map
...
i40e: fix idx validation in config queues msg
...
i40e: fix input validation logic for action_meta
...
can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow
...
CVE-2025-55339
Out-of-bounds read in Windows NDIS allows an authorized attacker to elevate privileges locally...
CVE-2025-20712
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00422323; Issue ID:...
EUVD-2025-34587
In the Linux kernel, the following vulnerability has been resolved: can: mcbausb: populate ndochangemtu to prevent buffer overflow Sending an PFPACKET allows to bypass the CAN framework logic and to directly reach the xmit function of a CAN driver. The only check which is performed by the PFPACKE...
EUVD-2025-34588
In the Linux kernel, the following vulnerability has been resolved: net: tun: Update napi-skb after XDP process The syzbot report a UAF issue: BUG: KASAN: slab-use-after-free in skbresetmacheader include/linux/skbuff.h:3150 inline BUG: KASAN: slab-use-after-free in napifragsskb net/core/gro.c:723...
CVE-2025-39968
In the Linux kernel, the following vulnerability has been resolved: i40e: add max boundary check for VF filters There is no check for max filters that VF can request. Add it...
CVE-2025-39973
The CVE-2025-39973 issue affects the Linux kernel i40e driver. The ring_len parameter provided by the virtual function (VF) could be assigned to hardware memory context (HMC) without validation. A patch was introduced to add an upper-bound check for both Tx and Rx queue lengths, with hardware sup...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from uninitialized HWS action reference counting and mutual exclusion locks in the net/mlx5 component, which could le...
EUVD-2025-34418
Out-of-bounds read in Windows NDIS allows an authorized attacker to elevate privileges locally...
CVE-2025-55339
Out-of-bounds read in Windows NDIS allows an authorized attacker to elevate privileges locally...
CVE-2025-55339 Windows Network Driver Interface Specification (NDIS) Driver Elevation of Privilege Vulnerability
...
CVE-2025-55339
CVE-2025-55339 : Windows Network Driver Interface Specification (NDIS) driver contains an out-of-bounds read that enables an authorized, local attacker to achieve elevated privileges. The Initial and Connected documents confirm the vulnerability description but do not provide concrete remediation...
CVE-2025-55339 Windows Network Driver Interface Specification (NDIS) Driver Elevation of Privilege Vulnerability
...
Windows Network Driver Interface Specification (NDIS) Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows NDIS allows an authorized attacker to elevate privileges locally...
CVE-2025-20716
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00421149; Issue ID: MSV-372...
CVE-2025-20717
The vulnerability CVE-2025-20717 affects the wlan AP driver (MediaTek) and stems from an incorrect bounds check that enables an out-of-bounds write. This can lead to local escalation of privilege for an attacker who already has System privileges, with no user interaction required. A patch is avai...