PT-2020-20378

Name of the Vulnerable Software and Affected Versions Asylo versions up to 0.6.0 Description An arbitrary memory read issue allows an untrusted attacker to make a call to enc untrusted recvmsg using an attacker-controlled result parameter. The size parameter is unchecked, allowing the attacker to...

CVE-2019-3837

It was found that the netdma code in tcprecvmsg in the RHEL6 kernel is thread-unsafe. So an unprivileged multi-threaded userspace application calling recvmsg for the same network socket in parallel executed on ioatdma-enabled hardware with netdma enabled can leak the memory, crash the host leadin...

Memory corruption

It was found that the netdma code in tcprecvmsg in the 2.6.32 kernel as shipped in RHEL6 is thread-unsafe. So an unprivileged multi-threaded userspace application calling recvmsg for the same network socket in parallel executed on ioatdma-enabled hardware with netdma enabled can leak the memory,...

DEBIAN-CVE-2019-3837

It was found that the netdma code in tcprecvmsg in the 2.6.32 kernel as shipped in RHEL6 is thread-unsafe. So an unprivileged multi-threaded userspace application calling recvmsg for the same network socket in parallel executed on ioatdma-enabled hardware with netdma enabled can leak the memory,...

UBUNTU-CVE-2019-3837

It was found that the netdma code in tcprecvmsg in the 2.6.32 kernel as shipped in RHEL6 is thread-unsafe. So an unprivileged multi-threaded userspace application calling recvmsg for the same network socket in parallel executed on ioatdma-enabled hardware with netdma enabled can leak the memory,...

PT-2019-5303 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel version 2.6.32 Description: The issue is related to the net dma code in the tcp recvmsg function, which is thread-unsafe. This can be exploited by an unprivileged multi-threaded userspace application calling recvmsg for the same...

DEBIAN-CVE-2017-14106

The tcpdisconnect function in net/ipv4/tcp.c in the Linux kernel before 4.12 allows local users to cause a denial of service tcpselectwindow divide-by-zero error and system crash by triggering a disconnect within a certain tcprecvmsg code path...

PT-2017-13254

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.12 Description The issue allows local users to cause a denial of service, resulting in a system crash due to a divide-by-zero error in the tcp select window function. This occurs when a disconnect is triggered...

The vulnerability of the Linux operating system allows a malicious individual to gain access to confidential information from the kernel’s memory.

A local user can access the kernel memory due to information leakage during the execution of system calls recvmmsg and recvmsg...

Memory corruption

The skbcopyandcsumdatagramiovec function in net/core/datagram.c in the Linux kernel 3.14.54 and 3.18.22 does not accept a length argument, which allows local users to cause a denial of service memory corruption or possibly have unspecified other impact via a write system call followed by a recvms...

CVE-2015-8019

The skbcopyandcsumdatagramiovec function in net/core/datagram.c in the Linux kernel 3.14.54 and 3.18.22 does not accept a length argument, which allows local users to cause a denial of service memory corruption or possibly have unspecified other impact via a write system call followed by a recvms...

CVE-2015-8019

The skbcopyandcsumdatagramiovec function in net/core/datagram.c in the Linux kernel 3.14.54 and 3.18.22 does not accept a length argument, which allows local users to cause a denial of service memory corruption or possibly have unspecified other impact via a write system call followed by a recvms...

CVE-2015-8019

The skbcopyandcsumdatagramiovec function in net/core/datagram.c in the Linux kernel 3.14.54 and 3.18.22 does not accept a length argument, which allows local users to cause a denial of service memory corruption or possibly have unspecified other impact via a write system call followed by a recvms...

CVE-2015-8019

The skbcopyandcsumdatagramiovec function in net/core/datagram.c in the Linux kernel 3.14.54 and 3.18.22 does not accept a length argument, which allows local users to cause a denial of service memory corruption or possibly have unspecified other impact via a write system call followed by a recvms...

PT-2016-3340 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw was found in the way memory resources were freed in the unix stream recvmsg function in the Linux kernel when a signal was pending. This flaw allows an unprivileged local user t...

PT-2015-6872

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.0.6 Description The issue allows remote attackers to cause a denial of service, specifically an EPOLLET epoll application read outage, via an incorrect checksum in a UDP packet. This is achieved through the udp...

PT-2015-3447 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw was found in the subsequent get user pages fast in the Linux kernel’s interface for symmetric key cipher algorithms in the skcipher recvmsg of crypto/algif skcipher.c function...

kernel security and bug fix update

2.6.32-431.29.2 - kernel futex: Fix errors in nested key ref-counting Denys Vlasenko 1094457 1094458 CVE-2014-0205 - net vxlan: fix NULL pointer dereference Jiri Benc 1114549 1096351 CVE-2014-3535 2.6.32-431.29.1 - mm hugetlb: ensure hugepage access is denied if hugepages are not supported Gustav...

Kernel: net: information leak in recvmsg handler msg_name & msg_namelen logic

The mISDNsockrecvmsg function in drivers/isdn/mISDN/socket.c in the Linux kernel before 3.12.4 does not ensure that a certain length value is consistent with the size of an associated data structure, which allows local users to obtain sensitive information from kernel memory via a 1 recvfrom, 2...

Kernel: net: leakage of uninitialized memory to user-space via recv syscalls

The Linux kernel before 3.12.4 updates certain length values before ensuring that associated data structures have been initialized, which allows local users to obtain sensitive information from kernel stack memory via a 1 recvfrom, 2 recvmmsg, or 3 recvmsg system call, related to net/ipv4/ping.c,...