53 matches found
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the tcprtxsynack function that may be called in a process environment, resulting in a statistic function err...
kernel: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
CVE-2024-35840 is a vulnerability in the Linux kernel’s Multipath TCP MPTCP implementation. It occurs because the subflowfinishconnect function may handle uninitialized data in certain fields if a specific MPTCP option OPTIONMPTCPMPJSYNACK is not correctly set during option parsing. This could le...
DEBIAN-CVE-2024-50154
In the Linux kernel, the following vulnerability has been resolved: tcp/dccp: Don't use timerpending in reqskqueueunlink. Martin KaFai Lau reported use-after-free 0 in reqsktimerhandler. """ We are seeing a use-after-free from a bpf prog attached to tracetcpretransmitsynack. The program passes th...
Important: kernel
Issue Overview: An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. nVMX on x8664 lacks consistency checks for CR0 and CR4. CVE-2023-30456 In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix invalid address access in lookuprec when...
SUSE CVE-2024-35840
In the Linux kernel, the following vulnerability has been resolved: mptcp: use OPTIONMPTCPMPJSYNACK in subflowfinishconnect subflowfinishconnect uses four fields backup, joinid, thmac, none that may contain garbage unless OPTIONMPTCPMPJSYNACK has been set in mptcpparseoption...
kernel: tcp: tcp_make_synack() can be called from process context
In the Linux kernel, the following vulnerability has been resolved: tcp: tcpmakesynack can be called from process context tcprtxsynack now could be called in process context as explained in 0a375c822497 "tcp: tcprtxsynack can be called from process context". tcprtxsynack might call tcpmakesynack,...
PT-2025-18885
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue arises when tcp make synack is called from process context, potentially leading to the use of this cpu add in preemptible...
Multiple Flaws Found in ScrutisWeb Software Exposes ATMs to Remote Hacking
Four security vulnerabilities in the ScrutisWeb ATM fleet monitoring software made by Iagona could be exploited to remotely break into ATMs, upload arbitrary files, and even reboot the terminals. The shortcomings were discovered by the Synack Red Team SRT following a client engagement. The issues...
AD Manager Plus 7122 Remote Code Execution
Exploit Title: AD Manager Plus 7122 - Remote Code Execution RCE Exploit Author: Chan Nyein Wai & Thura Moe Myint Vendor Homepage: https://www.manageengine.com/products/ad-manager/ Software Link: https://www.manageengine.com/products/ad-manager/download.html Version: Ad Manager Plus Before 7122...
PT-2022-32312
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.318 Description The issue is related to the tcp rtx synack function, which can be called from process context. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2022-31791
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.122 Description The issue is related to the tcp rtx synack function, which can be called from process context. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2022-31988
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue is related to the tcp rtx synack function, which can be called from process context. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2022-31535
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description The issue is related to the tcp rtx synack function, which can be called from process context. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2022-32228
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue is related to the tcp rtx synack function, which can be called from process context. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2022-32124
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to the tcp rtx synack function, which can be called from process context. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2022-31234
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.15 Description The issue is related to the tcp rtx synack function, which can be called from process context. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2022-30888
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.4 Description The issue is related to the tcp rtx synack function, which can be called from process context. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2022-37953
Уязвимость функции tcp rtx synack модуля net/ipv4/tcp output.c ядра операционной системы Linux связана с ошибками управления состоянием. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
PT-2025-8306
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.16.12-1bpo11+1 Description A vulnerability in the Linux kernel has been resolved. The issue occurs when a new passive FastOpen TCP socket is created and a socket operation goes through a specific sequence of...
A week in security (August 16 – August 22)
Last week on Malwarebytes Labs: Podcast: Katie Moussouris hacked Clubhouse. Her emails went unanswered for weeks. How to troubleshoot hardware problems that look like malware problems. Analysts “strongly believe” the Russian state colludes with ransomware gangs. macOS 11’s hidden security...