Lucene search
+L

648 matches found

OSV
OSV
added 2025/08/22 4:0 p.m.5 views

CVE-2025-38622 net: drop UFO packets in udp_rcv_segment()

In the Linux kernel, the following vulnerability has been resolved: net: drop UFO packets in udprcvsegment When sending a packet with virtionethdr to tun device, if the gsotype in virtionethdr is SKBGSOUDP and the gsosize is less than udphdr size, below crash may happen. ------------ cut here...

5.5CVSS5.8AI score0.00159EPSS
Exploits0References14
BDU FSTEC
BDU FSTEC
added 2025/08/13 12:0 a.m.17 views

The vulnerability in the Linux operating system’s TUN network interface kernel allows a hacker to trigger a service failure.

The vulnerability of the TUN network interface in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

7CVSS6.5AI score0.00161EPSS
Exploits0References17Affected Software8
Tenable Nessus
Tenable Nessus
added 2025/08/10 12:0 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2022-4744

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A double-free flaw was found in the Linux kernel's TUN/TAP device driver functionality in how a user registers the device when the registernetdevice function...

7.8CVSS6.2AI score0.00456EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/10 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2023-52843

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llc: verify mac len before reading mac header LLC reads the mac header with ethhdr without verifying that the skb has an Ethernet header. Syzbot was able to ent...

5.5CVSS5.8AI score0.00245EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/09 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2019-19079

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory leak in the qrtrtunwriteiter function in net/qrtr/tun.c in the Linux kernel before 5.3 allows attackers to cause a denial of service memory consumption...

7.8CVSS6.6AI score0.02948EPSS
Exploits0References2
OSV
OSV
added 2025/07/11 12:24 p.m.7 views

OESA-2025-1820 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: tipc: fix the msg-req tlv len check in tipcnlcompatnametabledumpheader This is a follow-up for commit 974cb0e3e7c9 "tipc: fix uninit-value in...

7.8CVSS7AI score0.00491EPSS
Exploits1References43
SUSE CVE
SUSE CVE
added 2025/07/04 11:22 p.m.5 views

SUSE CVE-2025-38184

In the Linux kernel, the following vulnerability has been resolved: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer The reproduction steps: 1. create a tun interface 2. enable l2 bearer 3. TIPCNLUDPGETREMOTEIP with media name set to tun tipc: Started in network mode tipc: Nod...

5.5CVSS6.5AI score0.00161EPSS
Exploits0References29
OSV
OSV
added 2025/07/04 2:15 p.m.13 views

AZL-64785 CVE-2025-38184 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer The reproduction steps: 1. create a tun interface 2. enable l2 bearer 3. TIPCNLUDPGETREMOTEIP with media name set to tun tipc: Started in network mode tipc: Nod...

5.5CVSS6.5AI score0.00161EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2025/07/02 12:0 a.m.8 views

The vulnerability of the drivers/net/tun.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the drivers/net/tun.c component in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS6.7AI score0.0024EPSS
Exploits0References10Affected Software4
RedHat Linux
RedHat Linux
added 2025/05/28 3:30 a.m.5 views

kernel: tun: limit printing rate when illegal packet received by tun dev

In the Linux kernel, the following vulnerability has been resolved: tun: limit printing rate when illegal packet received by tun dev The Linux kernel CVE team has assigned CVE-2024-27013 to this issue. Upstream advisory:...

5.5CVSS6.4AI score0.00271EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/05/13 8:28 a.m.6 views

kernel: net: tun: Fix use-after-free in tun_detach()

In the Linux kernel, the following vulnerability has been resolved: net: tun: Fix use-after-free in tundetach syzbot reported use-after-free in tundetach 1. This causes call trace like below: ================================================================== BUG: KASAN: use-after-free in...

7.8CVSS6.8AI score0.00263EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2025/05/07 2:19 a.m.4 views

SUSE CVE-2022-49871

In the Linux kernel, the following vulnerability has been resolved: net: tun: Fix memory leaks of napigetfrags kmemleak reports after running testprogs: unreferenced object 0xffff8881b1672dc0 size 232: comm "testprogs", pid 394388, jiffies 4354712116 age 841.975s hex dump first 32 bytes: e0 84 d7...

5.5CVSS6.4AI score0.00184EPSS
Exploits0References10
NVD
NVD
added 2025/05/01 3:16 p.m.7 views

CVE-2022-49871

In the Linux kernel, the following vulnerability has been resolved: net: tun: Fix memory leaks of napigetfrags kmemleak reports after running testprogs: unreferenced object 0xffff8881b1672dc0 size 232: comm "testprogs", pid 394388, jiffies 4354712116 age 841.975s hex dump first 32 bytes: e0 84 d7...

5.5CVSS0.00184EPSS
Exploits0References6
OSV
OSV
added 2025/05/01 3:16 p.m.2 views

DEBIAN-CVE-2022-49871

In the Linux kernel, the following vulnerability has been resolved: net: tun: Fix memory leaks of napigetfrags kmemleak reports after running testprogs: unreferenced object 0xffff8881b1672dc0 size 232: comm "testprogs", pid 394388, jiffies 4354712116 age 841.975s hex dump first 32 bytes: e0 84 d7...

5.5CVSS5.5AI score0.00184EPSS
Exploits0References1
OSV
OSV
added 2025/05/01 3:16 p.m.9 views

UBUNTU-CVE-2022-49871

In the Linux kernel, the following vulnerability has been resolved: net: tun: Fix memory leaks of napigetfrags kmemleak reports after running testprogs: unreferenced object 0xffff8881b1672dc0 size 232: comm "testprogs", pid 394388, jiffies 4354712116 age 841.975s hex dump first 32 bytes: e0 84 d7...

5.5CVSS6.1AI score0.00184EPSS
Exploits0References9
Cvelist
Cvelist
added 2025/05/01 2:10 p.m.13 views

CVE-2022-49871 net: tun: Fix memory leaks of napi_get_frags

In the Linux kernel, the following vulnerability has been resolved: net: tun: Fix memory leaks of napigetfrags kmemleak reports after running testprogs: unreferenced object 0xffff8881b1672dc0 size 232: comm "testprogs", pid 394388, jiffies 4354712116 age 841.975s hex dump first 32 bytes: e0 84 d7...

0.00184EPSS
Exploits0References6
CVE
CVE
added 2025/05/01 2:10 p.m.102 views

CVE-2022-49871

CVE-2022-49871 concerns the Linux kernel net: tun subsystem memory leaks arising from napi_get_frags when GRO processing is not completed. The provided data shows that in certain paths (tun_get_user -> napi_gro_frags -> napi_frags_finish -> GRO_NORMAL) the napi->rx_list may remain pop...

5.5CVSS6.4AI score0.00184EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2025/05/01 2:10 p.m.8 views

CVE-2022-49871 net: tun: Fix memory leaks of napi_get_frags

In the Linux kernel, the following vulnerability has been resolved: net: tun: Fix memory leaks of napigetfrags kmemleak reports after running testprogs: unreferenced object 0xffff8881b1672dc0 size 232: comm "testprogs", pid 394388, jiffies 4354712116 age 841.975s hex dump first 32 bytes: e0 84 d7...

5.5CVSS5.9AI score0.00184EPSS
Exploits0References9
Cvelist
Cvelist
added 2025/05/01 2:10 p.m.10 views

CVE-2022-49856

...

Exploits0
Debian CVE
Debian CVE
added 2025/05/01 2:10 p.m.8 views

CVE-2022-49856

Removed by vendor...

5.6AI score
Exploits0
Rows per page
Query Builder