Lucene search
+L

421 matches found

OSV
OSV
added 2025/05/02 3:56 p.m.10 views

CVE-2023-53133 bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix an infinite loop error when len is 0 in tcpbpfrecvmsgparser When the buffer length of the recvmsg system call is 0, we got the flollowing soft lockup problem: watchdog: BUG: soft lockup - CPU3 stuck for 27s!...

6.1AI score
SaveExploits0References8
CVE
CVE
added 2025/05/02 3:56 p.m.86 views

CVE-2023-53133

CVE-2023-53133 affects the Linux kernel’s BPF sockmap path (tcp_bpf_recvmsg_parser) where a 0-length recvmsg can loop indefinitely. The description and connected advisories confirm the root cause is an infinite loop when len is 0 and that the fix is to return 0 for length 0 in tcp_bpf_recvmsg_par...

5.5CVSS6.5AI score0.00177EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/05/02 12:0 a.m.7 views

PT-2025-18897 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: The issue is related to an infinite loop error in the tcp bpf recvmsg parser function when the buffer length of the recvmsg system call is 0. This can cause a soft lockup problem...

5.1AI score0.00177EPSS
SaveExploits0References19
SUSE Linux
SUSE Linux
added 2025/03/27 2:32 p.m.12 views

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfcworkerwakeup bsc1225820. CVE-2024-27397: netfilter: nftables: use timestamp to check for set...

8.8CVSS8.1AI score0.03558EPSS
SaveExploits4References1694
OSV
OSV
added 2025/01/31 12:15 p.m.2 views

DEBIAN-CVE-2025-21670

In the Linux kernel, the following vulnerability has been resolved: vsock/bpf: return early if transport is not assigned Some of the core functions can only be called if the transport has been assigned. As Michal reported, a socket might have the transport at NULL, for example after a failed...

5.5CVSS5.7AI score0.00199EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/31 12:15 p.m.8 views

UBUNTU-CVE-2025-21670

In the Linux kernel, the following vulnerability has been resolved: vsock/bpf: return early if transport is not assigned Some of the core functions can only be called if the transport has been assigned. As Michal reported, a socket might have the transport at NULL, for example after a failed...

5.5CVSS6.2AI score0.00199EPSS
SaveExploits0References16
Cvelist
Cvelist
added 2025/01/11 12:35 p.m.29 views

CVE-2024-57791 net/smc: check return value of sock_recvmsg when draining clc data

In the Linux kernel, the following vulnerability has been resolved: net/smc: check return value of sockrecvmsg when draining clc data When receiving clc msg, the field length in smcclcmsghdr indicates the length of msg should be received from network and the value should not be fully trusted as i...

7.5CVSS0.0075EPSS
SaveExploits0References6
OSV
OSV
added 2024/12/02 2:15 p.m.5 views

UBUNTU-CVE-2024-53122

In the Linux kernel, the following vulnerability has been resolved: mptcp: cope racing subflow creation in mptcprcvspaceadjust Additional active subflows - i.e. created by the in kernel path manager - are included into the subflow list before starting the 3whs. A racing recvmsg spooling data...

5.5CVSS6.2AI score0.00199EPSS
SaveExploits0References30
CVE
CVE
added 2024/12/02 1:44 p.m.218 views

CVE-2024-53122

CVE-2024-53122 affects the Linux kernel mptcp subsystem. A race during subflow creation in mptcp_rcv_space_adjust could cause a racing recvmsg() to trigger tcp_cleanup_rbuf() on all current subflows, potentially leading to a divide-by-zero in newly created subflows. The fix explicitly checks subf...

7.5CVSS6.4AI score0.00199EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/21 12:0 a.m.7 views

The vulnerability of the tls component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the tls component in the Linux operating system’s kernel is related to improper blocking of resources in the tlsswrecvmsg function. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.2AI score0.0021EPSS
SaveExploits0References20Affected Software5
Microsoft CVE
Microsoft CVE
added 2024/10/15 7:0 a.m.5 views

vsock: fix recursive ->recvmsg calls

...

5.5CVSS6.8AI score0.00211EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2024/09/05 2:46 a.m.4 views

SUSE CVE-2024-44996

In the Linux kernel, the following vulnerability has been resolved: vsock: fix recursive -recvmsg calls After a vsock socket has been added to a BPF sockmap, its prot-recvmsg has been replaced with vsockbpfrecvmsg. Thus the following recursiion could happen: vsockbpfrecvmsg - vsockrecvmsg -...

5.5CVSS7.2AI score0.00211EPSS
SaveExploits0References13
RedhatCVE
RedhatCVE
added 2024/09/04 10:16 p.m.18 views

CVE-2024-44996

A vulnerability was found in the Linux kernel related to vsock, involving recursive calls due to BPF sockmap integration. When a vsock socket was added to a BPF sockmap, the prot-recvmsg function was replaced with vsockbpfrecvmsg. This could lead to recursion as vsockbpfrecvmsg called vsockrecvms...

5.5CVSS5.1AI score0.00211EPSS
SaveExploits0References4
OSV
OSV
added 2024/09/04 8:15 p.m.9 views

AZL-49300 CVE-2024-44996 affecting package kernel for versions less than 6.6.51.1-1

In the Linux kernel, the following vulnerability has been resolved: vsock: fix recursive -recvmsg calls After a vsock socket has been added to a BPF sockmap, its prot-recvmsg has been replaced with vsockbpfrecvmsg. Thus the following recursiion could happen: vsockbpfrecvmsg - vsockrecvmsg -...

5.5CVSS6.3AI score0.00211EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/04 8:15 p.m.1 views

DEBIAN-CVE-2024-44996

In the Linux kernel, the following vulnerability has been resolved: vsock: fix recursive -recvmsg calls After a vsock socket has been added to a BPF sockmap, its prot-recvmsg has been replaced with vsockbpfrecvmsg. Thus the following recursiion could happen: vsockbpfrecvmsg - vsockrecvmsg -...

5.5CVSS5.6AI score0.00211EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/04 8:15 p.m.12 views

CVE-2024-44996

In the Linux kernel, the following vulnerability has been resolved: vsock: fix recursive -recvmsg calls After a vsock socket has been added to a BPF sockmap, its prot-recvmsg has been replaced with vsockbpfrecvmsg. Thus the following recursiion could happen: vsockbpfrecvmsg - vsockrecvmsg -...

5.5CVSS0.00211EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2024/09/04 8:15 p.m.24 views

CVE-2024-44996

In the Linux kernel, the following vulnerability has been resolved: vsock: fix recursive -recvmsg calls After a vsock socket has been added to a BPF sockmap, its prot-recvmsg has been replaced with vsockbpfrecvmsg. Thus the following recursiion could happen: vsockbpfrecvmsg - vsockrecvmsg -...

5.5CVSS6.4AI score0.00211EPSS
SaveExploits0References10
OSV
OSV
added 2024/09/04 8:15 p.m.3 views

UBUNTU-CVE-2024-44996

In the Linux kernel, the following vulnerability has been resolved: vsock: fix recursive -recvmsg calls After a vsock socket has been added to a BPF sockmap, its prot-recvmsg has been replaced with vsockbpfrecvmsg. Thus the following recursiion could happen: vsockbpfrecvmsg - vsockrecvmsg -...

5.5CVSS6.5AI score0.00211EPSS
SaveExploits0References11
Debian CVE
Debian CVE
added 2024/09/04 7:54 p.m.15 views

CVE-2024-44996

In the Linux kernel, the following vulnerability has been resolved: vsock: fix recursive -recvmsg calls After a vsock socket has been added to a BPF sockmap, its prot-recvmsg has been replaced with vsockbpfrecvmsg. Thus the following recursiion could happen: vsockbpfrecvmsg - vsockrecvmsg -...

5.5CVSS5.6AI score0.00211EPSS
SaveExploits0
Cvelist
Cvelist
added 2024/09/04 7:54 p.m.28 views

CVE-2024-44996 vsock: fix recursive ->recvmsg calls

In the Linux kernel, the following vulnerability has been resolved: vsock: fix recursive -recvmsg calls After a vsock socket has been added to a BPF sockmap, its prot-recvmsg has been replaced with vsockbpfrecvmsg. Thus the following recursiion could happen: vsockbpfrecvmsg - vsockrecvmsg -...

0.00211EPSS
SaveExploits0References3
Rows per page
Query Builder