GSD-2023-1001990 octeontx2-pf: Fix resource leakage in VF driver unbind

octeontx2-pf: Fix resource leakage in VF driver unbind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit...

GSD-2023-1001696 octeontx2-pf: Fix resource leakage in VF driver unbind

octeontx2-pf: Fix resource leakage in VF driver unbind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit...

PT-2023-34772 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15 through v6.1.6 Description: The issue concerns a resource leakage in the VF driver unbind. It was introduced in version v5.15 and fixed in version v6.1.7. The actual impact and attack plausibility have not yet been...

GSD-2023-1001521 igb: Initialize mailbox message for VF reset

igb: Initialize mailbox message for VF reset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.161 by commit...

GSD-2023-1001227 igb: Initialize mailbox message for VF reset

igb: Initialize mailbox message for VF reset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.85 by commit...

GSD-2023-1000889 net: hns3: fix VF promisc mode not update when mac table full

net: hns3: fix VF promisc mode not update when mac table full This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000198 igb: Initialize mailbox message for VF reset

igb: Initialize mailbox message for VF reset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.161 by commit...

GSD-2023-1000110 igb: Initialize mailbox message for VF reset

igb: Initialize mailbox message for VF reset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.85 by commit...

GSD-2023-1000005 igb: Initialize mailbox message for VF reset

igb: Initialize mailbox message for VF reset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.15 by commit...

PT-2023-33187 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.85 Description: The issue concerns the initialization of mailbox messages for VF reset. It was introduced in version v4.0 and fixed in version v5.15.85. The actual impact and attack plausibility have not y...

PT-2023-33501 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: The issue is related to the VF promisc mode not being updated when the mac table is full. This problem was introduced in version v5.14 and is fixed in Linux Kernel version v6.0.19. The actua...

kernel: sfc: fix use after free when disabling sriov

In the Linux kernel, the following vulnerability has been resolved: sfc: fix use after free when disabling sriov Use after free is detected by kfence when disabling sriov. What was read after being freed was vf-pcidev: it was freed from pcidisablesriov and later read in efxef10sriovfreevfvports,...

GSD-2022-1006560 net: enetc: deny offload of tc-based TSN features on VF interfaces

net: enetc: deny offload of tc-based TSN features on VF interfaces This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.71 by commit...

GSD-2022-1006476 net: enetc: deny offload of tc-based TSN features on VF interfaces

net: enetc: deny offload of tc-based TSN features on VF interfaces This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...

PT-2022-34776 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.12 Description: The issue concerns the denial of offload of tc-based TSN features on VF interfaces. It was introduced in version v5.5 and fixed in version v5.19.12. The actual impact and attack plausibilit...

GSD-2022-1005117 ice: Fix call trace with null VSI during VF reset

ice: Fix call trace with null VSI during VF reset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

CVE-2022-38600

Mplayer SVN-r38374-13.0.1 is vulnerable to Memory Leak via vf.c and vfvo.c...

MPlayer 数字错误漏洞

MPlayer is an open source multimedia player from the MPlayer team. A security vulnerability exists in the MPlayer Project mencoder SVN-r38374-13.0.1 version, which stems from an easy-to-zero-divide function config via llibmpcodecs/vfscale.c. The vulnerability is caused by the use of the function...

PT-2022-7418 · Mplayer +3 · Mplayer +3

Name of the Vulnerable Software and Affected Versions: MPlayer versions prior to SVN-r38374-13.0.1 Description: The issue is related to a Divide By Zero vulnerability via the config function of llibmpcodecs/vf scale.c and the demux open avi function. This vulnerability may allow an attacker to...

GSD-2022-1004916 sfc: fix kernel panic when creating VF

sfc: fix kernel panic when creating VF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.324 by commit...