PocketMine-MP vulnerable to denial-of-service by sending large modal form responses

Impact Due to a workaround for an old client bug which has since been fixed, very large JSON payloads in ModalFormResponsePacket were able to cause the server to spend a significant amount of time processing the packet. Large numbers of these packets were able to hog CPU time so as to prevent the...

PT-2023-9436

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rt5-00350-gb2450b7e00be-dirty 26 Description The vulnerability is related to a slab-out-of-bounds issue in the handle rx uart function of the qcom-geni-serial driver. This occurs when the RX FIFO depth is...

PT-2025-38449

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was resolved in the mt76 dma tx cleanup routine within the Linux kernel’s Wi-Fi subsystem. The fix addresses a memory leak that occurred during device unregistration and...

PT-2022-36479 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.267 Description: The issue is related to a potential security problem in the net/x25 component, specifically in the x25 lapb receive frame function, where a skb leak may occur. The actual impact and attack...

PT-2022-36546 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.300 Description: The issue concerns close race conditions on sk receive queue. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-36481 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.267 Description: The issue is related to close race conditions on sk receive queue. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.6 and fixed in Linux...

PT-2022-36141

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.9 through 5.15.79 Description The issue is related to an infoleak in the vmci host do receive datagram function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-35964

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.10 Description The issue is related to an infoleak in the vmci host do receive datagram function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-36160

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.80 Description The issue is related to close race conditions on sk receive queue. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-35991

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.10 Description The issue is related to close race conditions on sk receive queue. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.6 and fixed in Linux Kern...

PT-2022-36544

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.300 Description The issue is related to a potential security problem in the net/x25 component, specifically in the x25 lapb receive frame function, where a skb leak is fixed. The actual impact and attack...

PT-2022-36399

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.225 Description The issue is related to a potential security problem in the net/x25 component, specifically in the x25 lapb receive frame function, where a skb leak is fixed. The actual impact and attack...

PT-2022-35986

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.10 Description The issue is related to a potential security problem in the net/x25 component, specifically in the x25 lapb receive frame function, where a skb leak may occur. The actual impact and attack...

PT-2022-36472

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.9 through 4.19.266 Description The issue is related to an infoleak in the vmci host do receive datagram function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-36295 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.156 Description: The issue is related to a potential security problem in the net/x25 component, specifically in the x25 lapb receive frame function, where a skb leak occurs. The actual impact and attack...

PT-2024-11842

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a NULL pointer dereference in the can rcv filter function. This occurs due to a missing initialization of ml priv in the receive path of CAN frames. The problem...

PT-2022-7679

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential use-after-free in the hisi femac rx function. This occurs because the skb is delivered to napi gro receive, which may free it. After this, dereferenci...

PT-2022-7680 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a potential use-after-free in the ravb rx gbeth function. This occurs because the skb is delivered to napi gro receive, which may free it. After this call,...

PT-2022-7678

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the function hix5hd2 rx in the Linux kernel, specifically in the module drivers/net/ethernet/hisilicon/hix5hd2 gmac.c. It involves the potential reuse of previous...

kernel: skbuff: fix coalescing for page_pool fragment recycling

In the Linux kernel, the following vulnerability has been resolved: skbuff: fix coalescing for pagepool fragment recycling Fix a use-after-free when using pagepool with page fragments. We encountered this problem during normal RX in the hns3 driver: 1 Initially we have three descriptors in the RX...