Lucene search
+L

238 matches found

RedHat Linux
RedHat Linux
•added 2025/08/25 2:07 p.m.•15 views

kernel: ice: fix eswitch code memory leak in reset scenario

A flaw was found in the Linux kernel's Intel Ethernet ice driver. During a network device reset involving Virtual Functions VFs, the driver allocates memory structures without freeing them when operating in legacy mode. A local user with administrative privileges could trigger this condition by...

5.5CVSS5.9AI score0.00176EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/08/25 3:44 a.m.•16 views

kernel: ice: fix eswitch code memory leak in reset scenario

A flaw was found in the Linux kernel's Intel Ethernet ice driver. During a network device reset involving Virtual Functions VFs, the driver allocates memory structures without freeing them when operating in legacy mode. A local user with administrative privileges could trigger this condition by...

5.5CVSS5.9AI score0.00176EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2025/08/19 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2025-38417

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ice: fix eswitch code memory leak in reset scenario Add simple eswitch mode checker in...

5.5CVSS6AI score0.00176EPSS
SaveExploits0References3
osv_azl
osv_azl
•added 2025/08/16 12:15 p.m.•27 views

AZL-66347 CVE-2025-38526 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: ice: add NULL check in eswitch lag check The function icelagisswitchdevrunning is being called from outside of the LAG event handler code. This results in the lag-uppernetdev being NULL sometimes. To avoid a NULL-pointer...

7.5CVSS6AI score0.00382EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/08/12 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2025-38020

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Disable MACsec offload for uplink representor profile MACsec offload is not...

5.5CVSS6AI score0.00197EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/08/10 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2022-49812

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bridge: switchdev: Fix memory leaks when changing VLAN protocol The bridge driver can offload VLANs to the underlying hardware either via switchdev or the 8021q...

5.5CVSS5.8AI score0.00215EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/08/07 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2025-21986

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: switchdev: Convert blocking notification chain to a raw one A blocking notification...

5.5CVSS6.3AI score0.00149EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/07/30 11:22 p.m.•8 views

SUSE CVE-2025-38417

In the Linux kernel, the following vulnerability has been resolved: ice: fix eswitch code memory leak in reset scenario Add simple eswitch mode checker in attaching VF procedure and allocate required port representor memory structures only in switchdev mode. The reset flows triggers VF if present...

3.3CVSS5.7AI score0.00176EPSS
SaveExploits0References13
osv_debian
osv_debian
•added 2025/07/25 2:15 p.m.•7 views

DEBIAN-CVE-2025-38417

In the Linux kernel, the following vulnerability has been resolved: ice: fix eswitch code memory leak in reset scenario Add simple eswitch mode checker in attaching VF procedure and allocate required port representor memory structures only in switchdev mode. The reset flows triggers VF if present...

5.5CVSS5.8AI score0.00176EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/07/25 2:15 p.m.•13 views

UBUNTU-CVE-2025-38417

In the Linux kernel, the following vulnerability has been resolved: ice: fix eswitch code memory leak in reset scenario Add simple eswitch mode checker in attaching VF procedure and allocate required port representor memory structures only in switchdev mode. The reset flows triggers VF if present...

5.5CVSS5.8AI score0.00176EPSS
SaveExploits0References12
attackerkb
attackerkb
•added 2025/07/25 2:05 p.m.•18 views

CVE-2025-38417

In the Linux kernel, the following vulnerability has been resolved: ice: fix eswitch code memory leak in reset scenario Add simple eswitch mode checker in attaching VF procedure and allocate required port representor memory structures only in switchdev mode. The reset flows triggers VF if present...

5.5CVSS5.9AI score0.00176EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2025/07/25 2:05 p.m.•115 views

CVE-2025-38417

The CVE-2025-38417 issue affects the Linux kernel ice/eswitch path where memory for VF port representors could be allocated during reset and not freed in legacy (non-switchdev) mode. The fix adds a mode check to allocate required port memory only in switchdev mode and prevents blindly allocating ...

5.5CVSS5.7AI score0.00176EPSS
SaveExploits0References3Affected Software1
SUSE CVE
SUSE CVE
•added 2025/06/19 3:16 a.m.•17 views

SUSE CVE-2025-38020

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Disable MACsec offload for uplink representor profile MACsec offload is not supported in switchdev mode for uplink representors. When switching to the uplink representor profile, the MACsec offload feature must be...

5.5CVSS5.8AI score0.00197EPSS
SaveExploits0References16
osv_debian
osv_debian
•added 2025/06/18 10:15 a.m.•20 views

DEBIAN-CVE-2025-38020

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Disable MACsec offload for uplink representor profile MACsec offload is not supported in switchdev mode for uplink representors. When switching to the uplink representor profile, the MACsec offload feature must be...

5.5CVSS6AI score0.00197EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/06/18 10:15 a.m.•25 views

UBUNTU-CVE-2025-38020

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Disable MACsec offload for uplink representor profile MACsec offload is not supported in switchdev mode for uplink representors. When switching to the uplink representor profile, the MACsec offload feature must be...

5.5CVSS6AI score0.00197EPSS
SaveExploits0References27
Cvelist
Cvelist
•added 2025/06/18 9:28 a.m.•28 views

CVE-2025-38020 net/mlx5e: Disable MACsec offload for uplink representor profile

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Disable MACsec offload for uplink representor profile MACsec offload is not supported in switchdev mode for uplink representors. When switching to the uplink representor profile, the MACsec offload feature must be...

0.00197EPSS
SaveExploits0References5
AstraLinux
AstraLinux
•added 2025/06/16 11:28 a.m.•9 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: net/mlx5e: Disabled MACsec offload for uplink representative profiles MACsec offload is not supported in the switchdev mode for uplink representatives. When switching to the uplink representative profile, the MACsec offload...

5.5CVSS6AI score0.00197EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/05/16 12:00 a.m.•23 views

PT-2025-30822

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was identified in the ice module within the Linux kernel, specifically in the reset scenario involving eswitch code. The issue occurs during Virtual Function VF detach/atta...

7.5CVSS6AI score0.00176EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2025/05/03 2:53 a.m.•11 views

SUSE CVE-2022-49812

In the Linux kernel, the following vulnerability has been resolved: bridge: switchdev: Fix memory leaks when changing VLAN protocol The bridge driver can offload VLANs to the underlying hardware either via switchdev or the 8021q driver. When the former is used, the VLAN is marked in the bridge...

3.3CVSS5.8AI score0.00215EPSS
SaveExploits0References9
NVD
NVD
•added 2025/05/01 3:16 p.m.•18 views

CVE-2022-49812

In the Linux kernel, the following vulnerability has been resolved: bridge: switchdev: Fix memory leaks when changing VLAN protocol The bridge driver can offload VLANs to the underlying hardware either via switchdev or the 8021q driver. When the former is used, the VLAN is marked in the bridge...

5.5CVSS0.00215EPSS
SaveExploits0References4
Rows per page
Query Builder