SUSE CVE-2023-54218

In the Linux kernel, the following vulnerability has been resolved: net: Fix load-tearing on sk-skstamp in sockrecvcmsgs. KCSAN found a data race in sockrecvcmsgs where the read access to sk-skstamp needs READONCE. BUG: KCSAN: data-race in packetrecvmsg / packetrecvmsg write marked to...

CVE-2023-54218

In the Linux kernel, the following vulnerability has been resolved: net: Fix load-tearing on sk-skstamp in sockrecvcmsgs. KCSAN found a data race in sockrecvcmsgs where the read access to sk-skstamp needs READONCE. BUG: KCSAN: data-race in packetrecvmsg / packetrecvmsg write marked to...

The vulnerability of the net/packet component in the Linux operating system’s kernel allows a hacker to disclose sensitive information or cause service failures.

The vulnerability of the net/packet component in the Linux operating system’s kernel is related to the presence of access beyond the boundaries of the slab memory area in packetrecvmsg. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...

UBUNTU-CVE-2022-48839

In the Linux kernel, the following vulnerability has been resolved: net/packet: fix slab-out-of-bounds access in packetrecvmsg syzbot found that when an AFPACKET socket is using PACKETCOPYTHRESH and mmap operations, tpacketrcv is queueing skbs with garbage in skb-cb, triggering a too big copy 1...

PT-2022-4146

Name of the Vulnerable Software and Affected Versions Android kernel versions affected versions not specified Description The issue is related to a buffer overflow in the packet recvmsg function of the Android operating system kernel. This could allow a remote attacker to execute arbitrary code...

PT-2022-7512

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.0-rc7-syzkaller-02396-g0b3660695e80 Description The vulnerability is related to a slab-out-of-bounds access in the packet recvmsg function when an AF PACKET socket is using PACKET COPY THRESH and mmap...

PT-2014-3320

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.12.4 Description The issue allows local users to obtain sensitive information from kernel memory. This is achieved through the packet recvmsg function, which updates a certain length value before ensuring that ...