16 matches found
AZL-89678 CVE-2026-46322 affecting package kernel for versions less than 6.6.143.1-1
In the Linux kernel, the following vulnerability has been resolved: tun: free page on buildskb failure in tunxdpone When buildskb fails in tunxdpone, the function sets ret to -ENOMEM and jumps to the out label, which returns without freeing the page that vhostnetbuildxdp allocated for the frame. ...
CVE-2022-49871
CVE-2022-49871 concerns the Linux kernel net: tun subsystem memory leaks arising from napi_get_frags when GRO processing is not completed. The provided data shows that in certain paths (tun_get_user -> napi_gro_frags -> napi_frags_finish -> GRO_NORMAL) the napi->rx_list may remain pop...
PT-2025-18573 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0-rc3-syzkaller-00175-g1118b2049d77 Description: A vulnerability has been resolved in the Linux kernel. The issue is related to the napi schedule prep function, which must be called to ensure ownership of a...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the tunnapiallocfrags function of the net: tun module that could cause the kernel to crash...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a possible post-release reuse issue in the net/tun module in the tundetach function...
CVE-2024-41091
In the Linux kernel, the following vulnerability has been resolved: tun: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tunxdpone path, which could cause a corrupted skb to be sent downstack. Even before the skb is...
CVE-2024-41091
In the Linux kernel, the following vulnerability has been resolved: tun: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tunxdpone path, which could cause a corrupted skb to be sent downstack. Even before the skb is...
CVE-2021-47082 tun: avoid double free in tun_free_netdev
In the Linux kernel, the following vulnerability has been resolved: tun: avoid double free in tunfreenetdev Avoid double free in tunfreenetdev by moving the dev-tstats and tun-security allocs to a new ndoinit routine tunnetinit that will be called by registernetdevice. ndoinit is paired with the...
Important: Red Hat Security Advisory: kernel-rt security and bug fix update
An update for kernel-rt is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
PT-2022-32990
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.204 Description The issue is related to the network component of the Linux Kernel, specifically with the tun module and NAPI queue detachment. The actual impact and attack plausibility have not yet been...
PT-2022-32863
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.129 Description The issue is related to the network tun module, where disabling NAPI twice could potentially lead to a security problem. The actual impact and attack plausibility have not yet been proven...
PT-2022-32871
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.129 Description The issue is related to the network component of the Linux Kernel, specifically with the tun module and NAPI queue detachment. The actual impact and attack plausibility have not yet been...
PT-2022-32985
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.204 Description The issue is related to the network component of the Linux Kernel, specifically with the tun module, where NAPI is not properly handled, potentially leading to security issues. The actual...
PT-2022-32697
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.53 Description The issue is related to the network component of the Linux Kernel, specifically with the tun module, where NAPI is not properly handled, potentially leading to security issues. The actual...
PT-2022-32483
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.10 Description The issue is related to the network component, specifically the tun module, where disabling NAPI twice could potentially lead to security vulnerabilities. The actual impact and attack...