PT-2022-33074

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.251 Description The issue is related to the network component of the Linux Kernel, specifically with the net and tun modules. It involves avoiding disabling NAPI twice. The actual impact and attack...

PT-2022-32990

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.204 Description The issue is related to the network component of the Linux Kernel, specifically with the tun module and NAPI queue detachment. The actual impact and attack plausibility have not yet been...

PT-2022-32985

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.204 Description The issue is related to the network component of the Linux Kernel, specifically with the tun module, where NAPI is not properly handled, potentially leading to security issues. The actual...

PT-2022-32697

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.53 Description The issue is related to the network component of the Linux Kernel, specifically with the tun module, where NAPI is not properly handled, potentially leading to security issues. The actual...

PT-2022-32707

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.53 Description The issue is related to the network component of the Linux Kernel, specifically with the net and tun modules. It involves stopping NAPI when detaching queues. The actual impact and attack...

PT-2022-32497

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.10 Description The issue is related to the net tun device, where NAPI is not unlinked from the device on destruction. This could potentially lead to security vulnerabilities, although the actual impact and...

PT-2022-32989

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.204 Description The issue is related to the net tun, where NAPI is not unlinked from the device on destruction. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-33078

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.251 Description The issue is related to the net tun, where NAPI is not unlinked from the device on destruction. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-32483

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.10 Description The issue is related to the network component, specifically the tun module, where disabling NAPI twice could potentially lead to security vulnerabilities. The actual impact and attack...

PT-2022-32872

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.129 Description The issue is related to the net tun, where NAPI is not unlinked from the device on destruction. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-32863

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.129 Description The issue is related to the network tun module, where disabling NAPI twice could potentially lead to a security problem. The actual impact and attack plausibility have not yet been proven...

PT-2025-8605

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition was found between the tun file and device destruction in the Linux kernel. This issue arises because NAPIs, which are part of the struct tun file, can be destroyed befor...

PT-2022-38059

Уязвимость функции tun detach all модуля drivers/net/tun.c драйвера поддержки сетевых устройств ядра операционной системы Linux связана с утечкой памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2024-11806

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is a memory leak that occurs when uncloning an skb dst and its associated metadata in the Linux kernel. A new dst+metadata is allocated and later replaces the old one in the sk...

PT-2021-27315

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.12 Description: The issue concerns a potential double free in tun free netdev, which may have security implications. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2021-7725

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality. This issue occurs when a user registers the device and the register netdevice function fails,...

PT-2021-8138 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to a double-free issue in the tun free netdev function. This issue can be exploited to execute arbitrary code and elevate privileges. The problem arises fr...

Clash - A Rule-Based Tunnel In Go

Clash A rule-based tunnel in Go. Features Local HTTP/HTTPS/SOCKS server with authentication support VMess, Shadowsocks, Trojan, Snell protocol support for remote connections Built-in DNS server that aims to minimize DNS pollution attack impact, supports DoH/DoT upstream and fake IP. Rules based o...

Ligolo-Ng - An Advanced, Yet Simple, Tunneling/Pivoting Tool That Uses A TUN Interface

An advanced, yet simple, tunneling tool that uses a TUN interface. by TNP IT Security Introduction Ligolo-ng is a simple , lightweight and fast tool that allows pentesters to establish tunnels from a reverse TCP/TLS connection without the need of SOCKS. Features Tun interface No more SOCKS! Simpl...

kernel: use after free in tun_get_user of tun.c could lead to local escalation of privilege

A flaw use after free in the Linux kernel TUN/TAP device driver functionality was found in the way user create and use tun/tap device. A local user could use this flaw to crash the system or possibly escalate their privileges on the system...