FreeBSD-SA-23:10.pf

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-23:10.pf Security Advisory The FreeBSD Project Topic: pf incorrectly handles multiple IPv6 fragment headers Category: core Module: pf Announced: 2023-09-06...

kernel: octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix the use of GFPKERNEL in atomic context on rt The commit 4af1b64f80fb "octeontx2-pf: Fix lmtst ID used in aura free" uses the get/putcpu to protect the usage of percpu pointer in -aurafreeptr callback, but it als...

kernel: octeontx2-pf: Avoid use of GFP_KERNEL in atomic context

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Avoid use of GFPKERNEL in atomic context Using GFPKERNEL in preemption disable context, causing below warning when CONFIGDEBUGATOMICSLEEP is enabled. 32.542271 BUG: sleeping function called from invalid context at...

CVE-2023-27567

In OpenBSD 7.2, a TCP packet with destination port 0 that matches a pf divert-to rule can crash the kernel...

Code injection

In OpenBSD 7.2, a TCP packet with destination port 0 that matches a pf divert-to rule can crash the kernel...

PT-2023-21210 · Openbsd · Openbsd

Name of the Vulnerable Software and Affected Versions: OpenBSD version 7.2 Description: A TCP packet with destination port 0 that matches a pf divert-to rule can crash the kernel. Recommendations: For OpenBSD version 7.2, as a temporary workaround, consider disabling the pf divert-to rule until a...

CVE-2023-27567

In OpenBSD 7.2, a TCP packet with destination port 0 that matches a pf divert-to rule can crash the kernel...

CVE-2023-27567

OpenBSD 7.2 is affected. A TCP packet with destination port 0 that matches a pf divert-to rule can crash the kernel, per CVE-2023-27567. The vulnerability stems from how pf divis divert-to matches such packets, leading to a kernel crash (denial of service-like impact). The NVD metrics indicate hi...

SUSE CVE-2019-15923

An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a cd data structure if allocdisk fails in drivers/block/paride/pf.c...

GSD-2023-1001990 octeontx2-pf: Fix resource leakage in VF driver unbind

octeontx2-pf: Fix resource leakage in VF driver unbind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit...

GSD-2023-1001953 octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt

octeontx2-pf: Fix the use of GFPKERNEL in atomic context on rt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...

GSD-2023-1001696 octeontx2-pf: Fix resource leakage in VF driver unbind

octeontx2-pf: Fix resource leakage in VF driver unbind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit...

GSD-2023-1001659 octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt

octeontx2-pf: Fix the use of GFPKERNEL in atomic context on rt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...

GSD-2023-1001256 PCI: Fix pci_device_is_present() for VFs by checking PF

PCI: Fix pcideviceispresent for VFs by checking PF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1000132 octeontx2-pf: Fix potential memory leak in otx2_init_tc()

octeontx2-pf: Fix potential memory leak in otx2inittc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.83 by commit...

GSD-2023-1000028 octeontx2-pf: Fix potential memory leak in otx2_init_tc()

octeontx2-pf: Fix potential memory leak in otx2inittc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.13 by commit...

PT-2024-14776

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leakage issue has been resolved in the Linux kernel, specifically in the octeontx2-pf driver. The issue occurred when resources allocated for the Ntuple feature, such as mcam...

grub2: Buffer overflow in grub_font_construct_glyph() can lead to out-of-bound write and possible secure boot bypass

A flaw was found where a maliciously crafted pf2 font could lead to an out-of-bounds write in grub2. A successful attack can lead to memory corruption and secure boot circumvention...

grub2: Buffer overflow in grub_font_construct_glyph() can lead to out-of-bound write and possible secure boot bypass

A flaw was found where a maliciously crafted pf2 font could lead to an out-of-bounds write in grub2. A successful attack can lead to memory corruption and secure boot circumvention...

Cross site scripting

Cross Site Scripting XSS vulnerability in Netgate pf Sense 2.4.4-Release-p3 and Netgate ACME package 0.6.3 allows remote attackers to to run arbitrary code via the RootFolder field to acmecertificateedit.php page of the ACME package...