SUSE CVE-2021-32606

In the Linux kernel 5.11 through 5.12.2, isotpsetsockopt in net/can/isotp.c allows privilege escalation to root by leveraging a use-after-free. This does not affect earlier versions that lack CAN ISOTP SFBROADCAST support...

SUSE CVE-2022-3566

A vulnerability was identified in Linux Kernel up to 4.19.316/5.4.278/5.10.220/5.15.161. This impacts the function tcpgetsockopt/tcpsetsockopt of the component TCP Handler. Such manipulation leads to race condition. A high complexity level is associated with this attack. The exploitability is sai...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2023-1262)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-6979 · Oracle · Unbreakable Enterprise Kernel

Name of the Vulnerable Software and Affected Versions: Unbreakable Enterprise Kernel UEK affected versions not specified Description: The issue is related to the RDS module in the Unbreakable Enterprise Kernel UEK, which has two setsockopt2 options, RDS CONN RESET and RDS6 CONN RESET, that are no...

CVE-2022-3524

A memory leak flaw was found in the Linux kernel’s IPv6 functionality in how a user triggers the setsockopt of the IPV6ADDRFORM and IPV6DSTOPTS type. This flaw allows a user to crash the system if the setsockopt function is being called simultaneously with the IPV6ADDRFORM type and other processe...

DEBIAN-CVE-2022-3566

A vulnerability was identified in Linux Kernel up to 4.19.316/5.4.278/5.10.220/5.15.161. This impacts the function tcpgetsockopt/tcpsetsockopt of the component TCP Handler. Such manipulation leads to race condition. A high complexity level is associated with this attack. The exploitability is sai...

PT-2025-41036

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An information leak was identified in the Linux kernel related to the tipc topsrv kern subscr function. Specifically, an 8-byte write was not used to initialize the sub.usr handle...

PT-2022-7127

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A vulnerability in the Linux Kernel is related to synchronization errors when using a shared resource in the tcp getsockopt and tcp setsockopt functions of the TCP Handler component. Thi...

PT-2022-28921

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.6 Description A data-race issue exists in the af packet module, specifically in the packet setsockopt function. The actual impact and attack plausibility of this issue have not yet been proven...

PT-2022-28365

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.300 Description A data-race issue exists in the af packet module, specifically in the packet setsockopt function. The actual impact and attack plausibility of this issue have not yet been proven...

PT-2022-28412

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.228 Description A data-race issue exists in the af packet module, specifically in the packet setsockopt function. The actual impact and attack plausibility of this issue have not yet been proven...

PT-2022-28444

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.177 Description A data-race issue exists in the af packet module, specifically in the packet setsockopt function. The actual impact and attack plausibility of this issue have not yet been proven...

PT-2022-28491

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.97 Description A data-race issue exists in the af packet module, specifically in the packet setsockopt function. The actual impact and attack plausibility of this issue have not yet been proven...

PT-2022-28386

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.265 Description A data-race issue exists in the af packet module, specifically in the packet setsockopt function. The actual impact and attack plausibility of this issue have not yet been proven...

PT-2022-28555

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.20 Description The issue is related to a data-race in packet setsockopt. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.3 and fixed in Linux Kernel versi...

PT-2022-7530

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.16.0-rc4+ Description The issue is related to a kernel NULL pointer dereference in the smc setsockopt function, caused by accessing smc-clcsock after it has been released. This can lead to a crash. The problem ...

LSN-0083-1: Kernel Live Patch Security Notice

The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence where inner instructions require substantial expansions into multiple BPF instructions, leading to an overflow. This affects kernel/bpf/core.c and net/core/filter.c.CVE-2018-25020...

PlayStation: Use-after-free in setsockopt IPV6_2292PKTOPTIONS (CVE-2020-7457)

The PS5 is vulnerable to https://hackerone.com/reports/826026 which easily grants kernel access to an attacker. This vulnerability had been reported by me for the PS4 2 years ago when the PS5 did not yet exist, thus this should be considered as a new report and not a duplicate. I was able to use...

PT-2021-27216

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.11 Description The issue concerns the removal of TCP ULP setsockopt support in mptcp. It was introduced in version v5.13 and fixed in Linux Kernel version v5.15.11. The actual impact and attack plausibility...

CentOS 8 : kernel (CESA-2021:4356)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4356 advisory. - kernel: Intel graphics card information leak. CVE-2019-14615 - kernel: out-of-bounds reads in pinctrl subsystem. CVE-2020-0427 - kernel: Improper inp...