18 matches found
PT-2026-98462
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Multipath TCP MPTCP implementation where incorrect accounting occurs within the mptcp subflow push pending function. If the subflow push pending function returns a...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: mptcp: Fixed a deadlock in mptcppushpending. mptcppushPending may call mptcpFlushJoinList with a subflow socket lock held. If such a call encounters mptcpSockOptSyncAll, then mptcpSockOptSync might attempt to lock the subflow...
SUSE CVE-2021-47590
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix deadlock in mptcppushpending mptcppushpending may call mptcpflushjoinlist with subflow socket lock held. If such call hits mptcpsockoptsyncall then subsequently mptcpsockoptsync could try to lock the subflow socket for...
DEBIAN-CVE-2021-47590
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix deadlock in mptcppushpending mptcppushpending may call mptcpflushjoinlist with subflow socket lock held. If such call hits mptcpsockoptsyncall then subsequently mptcpsockoptsync could try to lock the subflow socket for...
UBUNTU-CVE-2021-47590
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix deadlock in mptcppushpending mptcppushpending may call mptcpflushjoinlist with subflow socket lock held. If such call hits mptcpsockoptsyncall then subsequently mptcpsockoptsync could try to lock the subflow socket for...
kernel: NULL pointer dereference in rawv6_push_pending_frames
A NULL pointer dereference flaw was found in rawv6pushpendingframes in net/ipv6/raw.c in the network subcomponent in the Linux kernel. This flaw causes the system to crash...
SUSE CVE-2023-0394
A NULL pointer dereference flaw was found in rawv6pushpendingframes in net/ipv6/raw.c in the network subcomponent in the Linux kernel. This flaw causes the system to crash...
PT-2023-35203
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.89 Description The issue concerns the handling of extension header length in rawv6 push pending frames. It was introduced in version v2.6.12 and fixed in version v5.15.89. The actual impact and attack...
PT-2023-35318
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.229 Description The issue is related to the handling of extension header length in rawv6 push pending frames. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2023-35351
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.270 Description The issue is related to the handling of extension header length in rawv6 push pending frames. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2023-35267
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.164 Description The issue is related to the handling of extension header length in rawv6 push pending frames. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2023-35374
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.303 Description The issue is related to the handling of extension header length in rawv6 push pending frames. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2023-1167
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference flaw was found in the rawv6 push pending frames function in the network subcomponent of the Linux kernel. This flaw causes the system to crash, allowing a remo...
kernel: mptcp: fix deadlock in __mptcp_push_pending()
A vulnerability was found in the Linux kernel's mptcp component in the mptcppushpending function, where a deadlock can occur when calling mptcpflushjoinlist with the subflow socket lock held. This happens if the synchronization function mptcpsockoptsyncall is invoked, causing the system to hang d...
kernel: mptcp: fix deadlock in __mptcp_push_pending()
A vulnerability was found in the Linux kernel's mptcp component in the mptcppushpending function, where a deadlock can occur when calling mptcpflushjoinlist with the subflow socket lock held. This happens if the synchronization function mptcpsockoptsyncall is invoked, causing the system to hang d...
PT-2024-11497
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a deadlock in the mptcp push pending function, which may call mptcp flush join list with the subflow socket lock held. If this call hits mptcp sockopt sync all,...
The vulnerability of the Linux operating system, which allows a malicious individual to trigger a service failure
Improper processing of IPv6 sockets using the UDPCORK option in the udpv6pushpendingframes function can lead to service failures...
DEBIAN-CVE-2013-4162
The udpv6pushpendingframes function in net/ipv6/udp.c in the IPv6 implementation in the Linux kernel through 3.10.3 makes an incorrect function call for pending data, which allows local users to cause a denial of service BUG and system crash via a crafted application that uses the UDPCORK option ...