PT-2025-38030

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.30-syzkaller Description A flaw was discovered in the Linux kernel related to the interaction between the net dev start xmit trace event and the skb transport offset function. Specifically, the issue arises...

UBUNTU-CVE-2023-3090

A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation. The out-of-bounds write is caused by missing skb-cb initialization in the ipvlan network driver. The vulnerability is reachable if CONFIGIPVLAN is enabled. We...

CVE-2023-3090: Out-of-bounds Write

A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation. The out-of-bounds write is caused by missing skb-cb initialization in the ipvlan network driver. The vulnerability is reachable if CONFIGIPVLAN is enabled. We...

kernel: Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free caused by l2capreassemblesdu Fix the race condition between the following two flows that run in parallel: 1. l2capreassemblesdu - chan-ops-recv l2capsockrecvcb - sockqueuercvskb. 2...

PT-2023-36774

Уязвимость функции skb tstamp tx модуля net/core/skbuff.c поддержки сетевых функций ядра операционной системы Linux связана с неправильным освобождением памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2025-43117

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the skb tstamp tx function within the networking subsystem. A previous fix for zerocopy socket buffer skb leaks introduced a new leak when skb orphan frags rx...

PT-2025-41111

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.106-syzkaller-00249-g19c0ed55a470 Description The Linux kernel contains a flaw within the cdc ncm module related to handling excessively small values of dwNtbOutMaxSize. Specifically, the cdc ncm check tx ma...

kernel: Bluetooth: L2CAP: Fix memory leak in vhci_write

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix memory leak in vhciwrite Syzkaller reports a memory leak as follows: ==================================== BUG: memory leak unreferenced object 0xffff88810d81ac00 size 240: ... hex dump first 32 bytes: 00 00 ...

kernel: Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free caused by l2capreassemblesdu Fix the race condition between the following two flows that run in parallel: 1. l2capreassemblesdu - chan-ops-recv l2capsockrecvcb - sockqueuercvskb. 2...

kernel: net: gso: fix panic on frag_list with mixed head alloc types

In the Linux kernel, the following vulnerability has been resolved: net: gso: fix panic on fraglist with mixed head alloc types Since commit 3dcbdb134f32 "net: gso: Fix skbsegment splat when splitting gsosize mangled skb having linear-headed fraglist", it is allowed to change gsosize of a GRO...

PT-2025-13176

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version Description A use-after-free issue was identified in the Linux kernel, specifically in the eth skb pkt type function. This issue occurred when bpf prog test run xdp passed an invalid value as th...

PT-2025-26098

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A possible memory leak in the mt76x02u mcu send msg routine has been resolved. The issue occurred when mt76u bulk msg failed, and the skb was not freed. Recommendations At the moment,...

PT-2025-18804

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow access issue in the Linux kernel has been resolved. The patch fixes a negative array access of skb-data when ieee802154 hdr peek addrs fails. Recommendations At the...

PT-2025-41113

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the skb copy ubufs function related to TCP handling and large TCP segments BIG TCP. A crash can occur when using TCP zerocopy with hugepages and skb...

PT-2023-36799

Уязвимость функции skb copy ubufs модуля net/core/skbuff.c поддержки сетевых функций ядра операционной системы Linux связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность...

PT-2025-54146

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s ath9k module related to handling wireless communication. Specifically, the issue involves referencing uninitialized memory within the ath9k wmi ctrl r...

USN-6045-1 linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

It was discovered that the Traffic-Control Index TCINDEX implementation in the Linux kernel did not properly perform filter deactivation in some situations. A local attacker could possibly use this to gain elevated privileges. Please note that with the fix for this CVE, kernel support for the...

CVE-2023-28327

A NULL pointer dereference flaw was found in the UNIX protocol in net/unix/diag.c In unixdiaggetexact in the Linux Kernel. The newly allocated skb does not have sk, leading to a NULL pointer. This flaw allows a local user to crash or potentially cause a denial of service...

Linux kernel 代码问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux Kernel that stems from a denial of service DoS in the inskb of unixdiaggetexact...

PT-2023-36595

Уязвимость функции ip6 make skb модуля net/ipv6/ip6 output.c реализации протокола IPv6 ядра операционной системы Linux связана с использованием неинициализированных переменных. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...