179 matches found
kernel: tcp: fix a signed-integer-overflow bug in tcp_add_backlog()
A flaw was found in the Linux kernel’s TCP implementation in the function tcpaddbacklog. When calculating the maximum acceptable backlog for TCP sockets, the sum of the receive buffer skrcvbuf, the send buffer sksndbuf, and a fixed constant may exceed the maximum value of a signed integer due to...
kernel: Linux kernel: Denial of Service in mlx5 driver due to memory leaks
A flaw was found in the Linux kernel's mlx5 driver. During a Precision Time Protocol PTP resynchronization operation, socket buffers SKBs were not properly freed, leading to a memory leak. Additionally, an error in the mlx5eskbfifohasroom function's counter check could cause further resource leak...
PT-2025-40763
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.0-rc3+ 309 Description A flaw exists in the Linux kernel related to handling IPv4 Path MTU Discovery PMTUD errors within tunnels. Specifically, the ip compute csum function is unable to process nonlinear skb...
kernel: network backend may cause Linux netfront to use freed SKBs (XSA-405)
An incomplete cleanup flaw was found in the Linux kernel’s Xen networking XDP eXpress Data Path subsystem. This flaw allows a local user to crash the system...
kernel: Kernel: Denial of Service via memory leak in wifi power saving mode
A flaw was found in the Linux kernel's wifi driver. Under power saving mode, the driver fails to properly free unused socket buffers skb, leading to a memory leak. A local attacker could exploit this vulnerability to cause a Denial of Service DoS by exhausting system memory...
kernel: network backend may cause Linux netfront to use freed SKBs (XSA-405)
An incomplete cleanup flaw was found in the Linux kernel’s Xen networking XDP eXpress Data Path subsystem. This flaw allows a local user to crash the system...
SUSE CVE-2006-4997
The clipmkip function in net/atm/clip.c of the ATM subsystem in Linux kernel allows remote attackers to cause a denial of service panic via unknown vectors that cause the ATM subsystem to access the memory of socket buffers after they are freed freed pointer dereference...
SUSE CVE-2013-2017
The veth aka virtual Ethernet driver in the Linux kernel before 2.6.34 does not properly manage skbs during congestion, which allows remote attackers to cause a denial of service system crash by leveraging lack of skb consumption in conjunction with a double-free error...
SUSE CVE-2022-26878
drivers/bluetooth/virtiobt.c in the Linux kernel before 5.16.3 has a memory leak socket buffers have memory allocated but not freed...
PT-2025-40173
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was identified in the mt7915 mcu exit routine within the mt76 and mt7915 drivers. The issue occurs when the mt7915 firmware state fails, and the memory queues are not...
Ubuntu: Security Advisory (USN-5773-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
kernel: veth: ensure skb entering GRO are not cloned.
In the Linux kernel, the following vulnerability has been resolved: veth: ensure skb entering GRO are not cloned. After commit d3256efd8e8b "veth: allow enabling NAPI even without XDP", if GRO is enabled on a veth device and TSO is disabled on the peer device, TCP skbs will go through the NAPI...
kernel: bpf, cpumap: Handle skb as well when clean up ptr_ring
An incorrect object type handling flaw was found in the Linux kernel's BPF cpumap implementation in the cleanup path. A local user can trigger this issue by running XDP redirect operations in SKB mode with the cpumap, causing the cleanup code to incorrectly treat socket buffers as XDP frames when...
kernel: igb: fix a use-after-free issue in igb_clean_tx_ring
A vulnerability was found in the Linux kernel in the Intel igb driver function igbcleantxring when running in XDP mode. A use-after-free issue can arise from attempting to free skb memory using devkfreeskbany. This issue potentially leads to system instability and memory corruption...
network backend may cause Linux netfront to use freed SKBs While adding logic to support XDP (eXpress Data Path) a code label was moved in a way allowing for SKBs having references (pointers) retained for further processing to nevertheless be freed.
...
DEBIAN-CVE-2022-33743
network backend may cause Linux netfront to use freed SKBs While adding logic to support XDP eXpress Data Path, a code label was moved in a way allowing for SKBs having references pointers retained for further processing to nevertheless be freed...
ALPINE-CVE-2022-33743
network backend may cause Linux netfront to use freed SKBs While adding logic to support XDP eXpress Data Path, a code label was moved in a way allowing for SKBs having references pointers retained for further processing to nevertheless be freed...
AZL-10107 CVE-2022-33743 affecting package kernel for versions less than 5.15.67.1-4
network backend may cause Linux netfront to use freed SKBs While adding logic to support XDP eXpress Data Path, a code label was moved in a way allowing for SKBs having references pointers retained for further processing to nevertheless be freed...
