GSD-2022-1000301 ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path

ipmr,ip6mr: acquire RTNL before calling ip6mrfreetable on failure path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.267 by commit...

GSD-2022-1000288 ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path

ipmr,ip6mr: acquire RTNL before calling ip6mrfreetable on failure path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.302 by commit...

PT-2022-28647

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.101 Description The issue is related to the ipmr and ip6mr modules in the Linux Kernel, where the RTNL lock is not acquired before calling the ip6mr free table function on the failure path. This is an...

PT-2022-28575

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.267 Description The issue is related to the ipmr and ip6mr modules in the Linux Kernel, where the RTNL lock is not acquired before calling the ip6mr free table function on the failure path. This is an...

PT-2022-28612

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.180 Description The issue is related to the acquisition of RTNL before calling ip6mr free table on the failure path in the ipmr and ip6mr modules. The actual impact and attack plausibility have not yet been...

PT-2022-28920

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.6 Description The issue is related to the rtnetlink component, specifically in the rtnl newlink function, where it fails to refresh master dev/m ops. The actual impact and attack plausibility have not yet...

PT-2022-28789

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.10 Description The issue is related to the acquisition of RTNL before calling ip6mr free table on the failure path in the ipmr and ip6mr modules. The actual impact and attack plausibility have not yet been...

PT-2022-28590

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.230 Description The issue is related to the ipmr and ip6mr modules in the Linux Kernel, where the RTNL lock is not acquired before calling the ip6mr free table function on the failure path. This is an...

PT-2022-28563

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.302 Description The issue is related to the ipmr and ip6mr modules in the Linux Kernel, where the RTNL lock is not acquired before calling the ip6mr free table function on the failure path. This is an...

PT-2022-28706

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.24 Description The issue is related to the ipmr and ip6mr modules in the Linux Kernel, where the RTNL lock is not acquired before calling the ip6mr free table function on the failure path. This is an...

PT-2022-28411

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.228 Description The issue is related to the rtnetlink component in the Linux Kernel, specifically with the rtnl newlink function. It involves a potential problem with refreshing master dev/m ops. The actual...

PT-2022-28554

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.20 Description The issue is related to the rtnetlink component in the Linux Kernel, specifically with the rtnl newlink function. It involves a potential problem with refreshing master dev/m ops. The actual...

PT-2022-28443

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.14 through 5.4.176 Description The issue is related to the rtnetlink component, specifically in the rtnl newlink function, where it fails to refresh master dev/m ops. The actual impact and attack plausibility have not y...

PT-2022-28385

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.265 Description The issue is related to the rtnetlink component, specifically in the rtnl newlink function, where it fails to refresh master dev/m ops. The actual impact and attack plausibility have not yet...

PT-2022-28364

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.300 Description The issue is related to the rtnetlink component in the Linux Kernel, specifically with the rtnl newlink function. It involves a potential security vulnerability where the master dev/m ops are...

PT-2022-28490

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.97 Description The issue is related to the rtnetlink component, specifically in the rtnl newlink function, where it fails to refresh master dev/m ops. The actual impact and attack plausibility have not yet...

PT-2024-10522

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.16.0 Description The vulnerability is related to the ipmr and ip6mr components of the Linux kernel, which are responsible for multicast routing. The issue arises from the failure to acquire the RTNL lock before...

PT-2022-7661

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the rtnl newlink function in the Linux kernel, which can potentially trigger use-after-free due to the replay logic. This could allow an attacker to elevate their...

kernel: ipv4: denial of service when destroying a network interface

A security flaw was found in the Linux kernel's networking subsystem that destroying the network interface with huge number of ipv4 addresses assigned keeps "rtnllock" spinlock for a very long time up to hour. This blocks many network-related operations, including creation of new incoming ssh...

kernel: ipv4: denial of service when destroying a network interface

A security flaw was found in the Linux kernel's networking subsystem that destroying the network interface with huge number of ipv4 addresses assigned keeps "rtnllock" spinlock for a very long time up to hour. This blocks many network-related operations, including creation of new incoming ssh...