12434 matches found
CVE-2025-38718 sctp: linearize cloned gso packets in sctp_rcv
In the Linux kernel, the following vulnerability has been resolved: sctp: linearize cloned gso packets in sctprcv A cloned head skb still shares these frag skbs in fraglist with the original head skb. It's not safe to access these frag skbs. syzbot reported two use-of-uninitialized-memory bugs...
CVE-2025-38717 net: kcm: Fix race condition in kcm_unattach()
In the Linux kernel, the following vulnerability has been resolved: net: kcm: Fix race condition in kcmunattach syzbot found a race condition when kcmunattachpsock and kcmreleasekcm are executed at the same time. kcmunattach is missing a check of the flag kcm-txstopped before calling queuework. I...
Qemu: denial of service via improper synchronization in qemu nbd server during socket closure
...
pptp: ensure minimal skb length in pptp_xmit()
...
tls: always refresh the queue when reading sock
...
tcp: Correct signedness in skb remaining space calculation
...
vsock/vmci: Clear the vmci transport packet properly when initializing it
...
netlink: Fix wraparounds of sk->sk_rmem_alloc.
...
vsock: Fix transport_{g2h,h2g} TOCTOU
...
vsock: Do not allow binding to VMADDR_PORT_ANY
...
net: better track kernel sockets lifetime
...
virtio_net: Fix napi_skb_cache_put warning
...
net: fix data-races around sk->sk_forward_alloc
...
net/sched: act_mirred: don't override retval if we already lost the skb
...
espintcp: fix skb leaks
...
ipvlan: ensure network headers are in skb linear part
...
net: allow small head cache usage with large MAX_SKB_FRAGS values
...
ibmvnic: Add tx check to prevent skb leak
...
udp: Deal with race between UDP socket address change and rehash
...
PT-2025-40071
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's networking subsystem, specifically within the Xilinx Axienet driver. Insufficient error handling during retrieval of RX metadata pointers can lead to...