Lucene search
+L

19 matches found

Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•15 views

PT-2026-106680

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the virt wifi module where the virt wifi start xmit function returns NET XMIT DROP without freeing the socket buffer skb when the simulated link is disconnected. Because...

8.8CVSS5.7AI score0.0053EPSS
SaveExploits1References233
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•12 views

PT-2026-106640

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the virt wifi component. The virt wifi newlink function calls netif stacked transfer operstate before register netdevice. If the lower device is dormant,...

8.8CVSS6.1AI score0.0053EPSS
SaveExploits1References234
AstraLinux
AstraLinux
•added 2026/10/05 11:39 a.m.•33 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: virtwifi: The SETNETDEVDEV function should be removed to avoid use-after-free issues. Currently, we execute SETNETDEVDEVdev, &priv-lowerdev-dev for the virtwifi network devices. However, unregistering a virtwifi device in...

7.8CVSS7.5AI score0.00171EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/05/02 1:25 a.m.•18 views

SUSE CVE-2026-31695

In the Linux kernel, the following vulnerability has been resolved: wifi: virtwifi: remove SETNETDEVDEV to avoid use-after-free Currently we execute SETNETDEVDEVdev, &priv-lowerdev-dev for the virtwifi net devices. However, unregistering a virtwifi device in netdevruntodo can happen together with...

7.8CVSS7.5AI score0.00171EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/05/02 12:00 a.m.•21 views

Linux Distros Unpatched Vulnerability : CVE-2026-31695

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: virtwifi: remove SETNETDEVDEV to avoid use-after-free Currently we execute SETNETDEVDEVdev, &priv-lowerdev-dev for the virtwifi net devices. However,...

7.8CVSS7.7AI score0.00171EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/05/01 7:33 p.m.•16 views

CVE-2026-31695

A flaw was found in the Linux kernel's virtwifi component. A local user can exploit a race condition during the unregistration of a virtwifi network device, where its parent pointer might refer to freed memory during ethtool operations. This use-after-free vulnerability can lead to system...

7.8CVSS7.1AI score0.00171EPSS
SaveExploits0References4
NVD
NVD
•added 2026/05/01 2:16 p.m.•16 views

CVE-2026-31695

In the Linux kernel, the following vulnerability has been resolved: wifi: virtwifi: remove SETNETDEVDEV to avoid use-after-free Currently we execute SETNETDEVDEVdev, &priv-lowerdev-dev for the virtwifi net devices. However, unregistering a virtwifi device in netdevruntodo can happen together with...

7.8CVSS0.00171EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/05/01 1:53 p.m.•50 views

CVE-2026-31695 wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free

In the Linux kernel, the following vulnerability has been resolved: wifi: virtwifi: remove SETNETDEVDEV to avoid use-after-free Currently we execute SETNETDEVDEVdev, &priv-lowerdev-dev for the virtwifi net devices. However, unregistering a virtwifi device in netdevruntodo can happen together with...

7.8CVSS0.00171EPSS
SaveExploits0References7
osv_cve
osv_cve
•added 2026/05/01 1:53 p.m.•16 views

CVE-2026-31695 wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free

In the Linux kernel, the following vulnerability has been resolved: wifi: virtwifi: remove SETNETDEVDEV to avoid use-after-free Currently we execute SETNETDEVDEVdev, &priv-lowerdev-dev for the virtwifi net devices. However, unregistering a virtwifi device in netdevruntodo can happen together with...

7.8CVSS7.1AI score
SaveExploits0References10
attackerkb
attackerkb
•added 2026/05/01 1:53 p.m.•11 views

CVE-2026-31695

In the Linux kernel, the following vulnerability has been resolved: wifi: virtwifi: remove SETNETDEVDEV to avoid use-after-free Currently we execute SETNETDEVDEVdev, &priv-;lowerdev-dev for the virtwifi net devices. However, unregistering a virtwifi device in netdevruntodo can happen together wit...

7.7AI score0.00171EPSS
SaveExploits0References8Affected Software1
EUVD
EUVD
•added 2026/05/01 1:53 p.m.•18 views

EUVD-2026-26504

In the Linux kernel, the following vulnerability has been resolved: wifi: virtwifi: remove SETNETDEVDEV to avoid use-after-free Currently we execute SETNETDEVDEVdev, &priv-lowerdev-dev for the virtwifi net devices. However, unregistering a virtwifi device in netdevruntodo can happen together with...

7.5AI score0.00171EPSS
SaveExploits0References7
CVE
CVE
•added 2026/05/01 1:53 p.m.•65 views

CVE-2026-31695

CVE-2026-31695 is a Linux kernel issue affecting the virt_wifi driver. The root cause is a race during unregistration where a device’s parent pointer could reference freed memory, causing a use-after-free during ethtool operations. The vulnerability arises from using SET_NETDEV_DEV(dev, &priv-&gt...

7.8CVSS7.5AI score0.00171EPSS
SaveExploits0References7Affected Software1
Positive Technologies
Positive Technologies
•added 2026/03/25 12:00 a.m.•17 views

PT-2026-36325

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the virt wifi component of the Linux kernel. The problem occurs because SET NETDEV DEVdev, &priv-lowerdev-dev is executed for virt wifi net devices, but...

7.8CVSS7.2AI score0.00171EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2024/08/18 2:01 a.m.•20 views

SUSE CVE-2024-43841

In the Linux kernel, the following vulnerability has been resolved: wifi: virtwifi: avoid reporting connection success with wrong SSID When user issues a connection with a different SSID than the one virtwifi has advertised, the cfg80211connectresult will trigger the warning: WARNONbssnotfound. T...

5.5CVSS6.5AI score0.00211EPSS
SaveExploits0References13
osv_debian
osv_debian
•added 2024/08/17 10:15 a.m.•10 views

DEBIAN-CVE-2024-43841

In the Linux kernel, the following vulnerability has been resolved: wifi: virtwifi: avoid reporting connection success with wrong SSID When user issues a connection with a different SSID than the one virtwifi has advertised, the cfg80211connectresult will trigger the warning: WARNONbssnotfound. T...

3.3CVSS5.7AI score0.00211EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/08/17 10:15 a.m.•31 views

AZL-51847 CVE-2024-43841 affecting package kernel for versions less than 5.15.176.3-1

In the Linux kernel, the following vulnerability has been resolved: wifi: virtwifi: avoid reporting connection success with wrong SSID When user issues a connection with a different SSID than the one virtwifi has advertised, the cfg80211connectresult will trigger the warning: WARNONbssnotfound. T...

3.3CVSS6.3AI score0.00211EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2024/08/17 10:15 a.m.•29 views

UBUNTU-CVE-2024-43841

In the Linux kernel, the following vulnerability has been resolved: wifi: virtwifi: avoid reporting connection success with wrong SSID When user issues a connection with a different SSID than the one virtwifi has advertised, the cfg80211connectresult will trigger the warning: WARNONbssnotfound. T...

3.3CVSS6.1AI score0.00211EPSS
SaveExploits0References26
CNNVD
CNNVD
•added 2024/08/17 12:00 a.m.•18 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the wifi:virtwifi component not properly checking the SSID when a connection request is made from user space...

3.3CVSS6.5AI score0.00211EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/07/08 12:00 a.m.•5 views

PT-2024-30703

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises when a user attempts to connect with a different SSID than the one virt wifi has advertised. The connection code in virt wifi does not check the SSID from user space, on...

9.1CVSS0.00211EPSS
SaveExploits0
Rows per page
Query Builder