kernel: net: bridge: data races indata-races in br_handle_frame_finish()

In the Linux kernel, the following vulnerability has been resolved: net: bridge: use DEVSTATSINC syzbot/KCSAN reported data-races in brhandleframefinish 1 This function can run from multiple cpus without mutual exclusion. Adopt SMP safe DEVSTATSINC to update dev-stats fields. Handles updates to...

CVE-2022-42329

Guests can trigger deadlock in Linux netback driver This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packe...

CVE-2022-42329

CVE-2022-42329 concerns the Linux xen-netback driver. The description shows a potential deadlock when freeing the SKB of a dropped packet under the XSA-392 handling (also tied to CVE-2022-42328) and also when dropping packets if netpoll is active on the connected interface, risking a deadlock in ...

PT-2020-22541

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, which occurs in the sctp handle packet dropped function, and is also associated with sctp process...