Lucene search
K

28 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.1 views

Astra Linux – Vulnerability in Linux, Linux 5.10

The pepsockaccept function in the net/phonet/pep.c file in the Linux kernel, as of version 5.15.8, has a reference count leak...

5.5CVSS6.4AI score0.00338EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.2 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: phonet/pep: fixed the use of racyskbqueueempty The receive queues are protected by their respective spin-locks, not the socket lock. This could lead to skbpeek returning NULL or a pointer to a socket buffer that has already been...

5.8CVSS6AI score0.00223EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/27 12:0 a.m.2 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005067)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005067 advisory. In the Linux kernel, the following vulnerability has been resolved: phonet/pep: fix racy skbqueueempty use The receive queues are protected by their respective...

5.8CVSS6.8AI score0.00223EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/08/10 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2021-47086

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phonet/pep: refuse to enable an unbound pipe This ioctl implicitly assumed that the socket was already bound to a valid local socket name, i.e. Phonet object. I...

5.5CVSS6.1AI score0.00226EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/10/23 12:0 a.m.1 views

The vulnerability of the phonet/pep component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the phonet/pep component in the Linux operating system’s kernel is related to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.00226EPSS
Exploits0References24Affected Software3
SUSE CVE
SUSE CVE
added 2024/05/18 2:46 a.m.1 views

SUSE CVE-2024-27402

In the Linux kernel, the following vulnerability has been resolved: phonet/pep: fix racy skbqueueempty use The receive queues are protected by their respective spin-lock, not the socket lock. This could lead to skbpeek unexpectedly returning NULL or a pointer to an already dequeued socket buffer...

5.8CVSS6.4AI score0.00223EPSS
Exploits0References13
NVD
NVD
added 2024/05/17 12:15 p.m.13 views

CVE-2024-27402

In the Linux kernel, the following vulnerability has been resolved: phonet/pep: fix racy skbqueueempty use The receive queues are protected by their respective spin-lock, not the socket lock. This could lead to skbpeek unexpectedly returning NULL or a pointer to an already dequeued socket buffer...

5.8CVSS6.4AI score0.00223EPSS
Exploits0References5
OSV
OSV
added 2024/05/17 12:15 p.m.1 views

DEBIAN-CVE-2024-27402

In the Linux kernel, the following vulnerability has been resolved: phonet/pep: fix racy skbqueueempty use The receive queues are protected by their respective spin-lock, not the socket lock. This could lead to skbpeek unexpectedly returning NULL or a pointer to an already dequeued socket buffer...

5.8CVSS5.7AI score0.00223EPSS
Exploits0References1
OSV
OSV
added 2024/05/17 12:15 p.m.4 views

UBUNTU-CVE-2024-27402

In the Linux kernel, the following vulnerability has been resolved: phonet/pep: fix racy skbqueueempty use The receive queues are protected by their respective spin-lock, not the socket lock. This could lead to skbpeek unexpectedly returning NULL or a pointer to an already dequeued socket buffer...

5.8CVSS6.2AI score0.00223EPSS
Exploits0References17
Cvelist
Cvelist
added 2024/05/17 11:40 a.m.17 views

CVE-2024-27402 phonet/pep: fix racy skb_queue_empty() use

In the Linux kernel, the following vulnerability has been resolved: phonet/pep: fix racy skbqueueempty use The receive queues are protected by their respective spin-lock, not the socket lock. This could lead to skbpeek unexpectedly returning NULL or a pointer to an already dequeued socket buffer...

6.4AI score0.00223EPSS
Exploits0References5
CVE
CVE
added 2024/05/17 11:40 a.m.120 views

CVE-2024-27402

CVE-2024-27402 affects the Linux kernel’s phonet/pep path. The description states a race in skb_queue_empty() is mishandled: receive queues are protected by their spin-locks, not the socket lock, which can cause skb_peek() to return NULL or a pointer to a socket buffer that has already been deque...

5.8CVSS6.7AI score0.00223EPSS
Exploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2024/05/17 11:40 a.m.23 views

CVE-2024-27402 phonet/pep: fix racy skb_queue_empty() use

In the Linux kernel, the following vulnerability has been resolved: phonet/pep: fix racy skbqueueempty use The receive queues are protected by their respective spin-lock, not the socket lock. This could lead to skbpeek unexpectedly returning NULL or a pointer to an already dequeued socket buffer...

6.8AI score0.00223EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2024/05/17 11:40 a.m.19 views

CVE-2024-27402

In the Linux kernel, the following vulnerability has been resolved: phonet/pep: fix racy skbqueueempty use The receive queues are protected by their respective spin-lock, not the socket lock. This could lead to skbpeek unexpectedly returning NULL or a pointer to an already dequeued socket buffer...

5.8CVSS7.5AI score0.00223EPSS
Exploits0
OSV
OSV
added 2024/05/17 11:40 a.m.9 views

CVE-2024-27402 phonet/pep: fix racy skb_queue_empty() use

In the Linux kernel, the following vulnerability has been resolved: phonet/pep: fix racy skbqueueempty use The receive queues are protected by their respective spin-lock, not the socket lock. This could lead to skbpeek unexpectedly returning NULL or a pointer to an already dequeued socket buffer...

5.8CVSS5.9AI score0.00223EPSS
Exploits0References8
CNNVD
CNNVD
added 2024/05/17 12:0 a.m.3 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from the fact that phonet/pep may return a null pointer under certain circumstances...

5.8CVSS6.2AI score0.00223EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2024/03/06 4:52 a.m.1 views

SUSE CVE-2021-47086

In the Linux kernel, the following vulnerability has been resolved: phonet/pep: refuse to enable an unbound pipe This ioctl implicitly assumed that the socket was already bound to a valid local socket name, i.e. Phonet object. If the socket was not bound, two separate problems would occur: 1 We'd...

5.5CVSS5.9AI score0.00226EPSS
Exploits0References6
Prion
Prion
added 2024/03/04 6:15 p.m.17 views

Spoofing

In the Linux kernel, the following vulnerability has been resolved: phonet/pep: refuse to enable an unbound pipe This ioctl implicitly assumed that the socket was already bound to a valid local socket name, i.e. Phonet object. If the socket was not bound, two separate problems would occur: 1 We'd...

7.2AI score0.00226EPSS
Exploits0References8
Vulnrichment
Vulnrichment
added 2024/03/04 6:6 p.m.18 views

CVE-2021-47086 phonet/pep: refuse to enable an unbound pipe

In the Linux kernel, the following vulnerability has been resolved: phonet/pep: refuse to enable an unbound pipe This ioctl implicitly assumed that the socket was already bound to a valid local socket name, i.e. Phonet object. If the socket was not bound, two separate problems would occur: 1 We'd...

6.7AI score0.00226EPSS
Exploits0References8
Cvelist
Cvelist
added 2024/03/04 6:6 p.m.15 views

CVE-2021-47086 phonet/pep: refuse to enable an unbound pipe

In the Linux kernel, the following vulnerability has been resolved: phonet/pep: refuse to enable an unbound pipe This ioctl implicitly assumed that the socket was already bound to a valid local socket name, i.e. Phonet object. If the socket was not bound, two separate problems would occur: 1 We'd...

6.5AI score0.00226EPSS
Exploits0References8
Debian CVE
Debian CVE
added 2024/03/04 6:6 p.m.13 views

CVE-2021-47086

In the Linux kernel, the following vulnerability has been resolved: phonet/pep: refuse to enable an unbound pipe This ioctl implicitly assumed that the socket was already bound to a valid local socket name, i.e. Phonet object. If the socket was not bound, two separate problems would occur: 1 We'd...

5.5CVSS6.7AI score0.00226EPSS
Exploits0
Rows per page
Query Builder