PT-2026-98820

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ppp async component where the process input packet function incorrectly resets a reused socket buffer skb headroom to zero during a frame-error path. This violates...

SUSE CVE-2024-50035

In the Linux kernel, the following vulnerability has been resolved: ppp: fix pppasyncencode illegal access syzbot reported an issue in pppasyncencode 1 In this case, pppoesendmsg is called with a zero size. Then pppasyncencode is called with an empty skb. BUG: KMSAN: uninit-value in pppasyncencod...

PT-2024-33875

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: A vulnerability has been resolved in the Linux kernel related to the ppp async encode function. The issue occurs when pppoe sendmsg is called with a zero size, leading to ppp async encode bei...

DEBIAN-CVE-2024-26675

In the Linux kernel, the following vulnerability has been resolved: pppasync: limit MRU to 64K syzbot triggered a warning 1 in allocpages: WARNONONCEGFPorder MAXPAGEORDER, gfp Willem fixed a similar issue in commit c0a2a1b0d631 "ppp: limit MRU to 64K" Adopt the same sanity check for...

PT-2024-21452

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.8.0-rc2-syzkaller-g41bccc98fb79 Description A vulnerability has been resolved in the Linux kernel. The issue is related to the ppp async module, where a warning was triggered by syzbot in alloc pages. The warni...

PT-2008-4251 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.25.10 Description: The issue allows local users to cause a denial of service, potentially leading to a system crash, or possibly gain privileges. This is achieved through vectors involving NULL pointer...