421 matches found
CVE-2023-53824
In the Linux kernel, the following vulnerability has been resolved: netlink: annotate lockless accesses to nlk-maxrecvmsglen syzbot reported a data-race in data-race in netlinkrecvmsg 1 Indeed, netlinkrecvmsg can be run concurrently, and netlinkdump also needs protection. 1 BUG: KCSAN: data-race ...
PT-2025-49715
In the Linux kernel, the following vulnerability has been resolved: netlink: annotate lockless accesses to nlk-max recvmsg len syzbot reported a data-race in data-race in netlink recvmsg 1 Indeed, netlink recvmsg can be run concurrently, and netlink dump also needs protection. 1 BUG: KCSAN:...
ROS-20251202-02
Vulnerability of recvmsg function of Linux kernel is related to buffer copying without input data verification. input data. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of denial of service Vulnerability of tlsrxmsgsize function of tls component of...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989133)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989133 advisory. In the Linux kernel, the following vulnerability has been resolved: net: rds: fix memory leak in rdsrecvmsg Syzbot reported memory leak in rds. The problem was in...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fixed the race condition related to completed calls. When a call receives an event such as incoming data, the call is placed on the socket’s queue. A thread that is processing recvmsg can be awakened to process this event...
kernel: tls: fix handling of zero-length records on the rx_list
In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rxlist Each recvmsg call must process either - only contiguous DATA records any number of them - one non-DATA record If the next record has different type than what has already been...
kernel: sunrpc: fix client side handling of tls alerts
In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix client side handling of tls alerts A security exploit was discovered in NFS over TLS in tlsalertrecv due to its assumption that there is valid data in the msghdr's iterator's kvec. Instead, this patch proposes the...
EUVD-2013-3171
Malware in sbrugna...
EUVD-2012-3397
Malware in sbrugna...
EUVD-2013-3170
Malware in sbrugna...
EUVD-2013-3165
Malware in sbrugna...
EUVD-2015-7914
Malware in sbrugna...
EUVD-2013-3164
Malware in sbrugna...
EUVD-2013-3172
Malware in sbrugna...
EUVD-2013-3169
Malware in sbrugna...
EUVD-2024-51794
Malicious code in bioql PyPI...
kernel: tls: fix handling of zero-length records on the rx_list
In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rxlist Each recvmsg call must process either - only contiguous DATA records any number of them - one non-DATA record If the next record has different type than what has already been...
DEBIAN-CVE-2023-53445
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Fix a refcount bug in qrtrrecvmsg Syzbot reported a bug as following: refcountt: addition on 0; use-after-free. ... RIP: 0010:refcountwarnsaturate+0x17c/0x1f0 lib/refcount.c:25 ... Call Trace: refcountadd...
CVE-2023-53445 net: qrtr: Fix a refcount bug in qrtr_recvmsg()
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Fix a refcount bug in qrtrrecvmsg Syzbot reported a bug as following: refcountt: addition on 0; use-after-free. ... RIP: 0010:refcountwarnsaturate+0x17c/0x1f0 lib/refcount.c:25 ... Call Trace: refcountadd...
CVE-2023-53445
CVE-2023-53445 concerns a refcount bug in the Linux kernel’s net/qrtr subsystem, specifically in qrtr_recvmsg(). The Syzbot report describes a-use-after-free scenario caused by a refcount increment on 0, leading to a potential crash. The issue is observed in a concurrent race between qrtr_recvmsg...