GSD-2022-1001168 net: hns3: add vlan list lock to protect vlan list

net: hns3: add vlan list lock to protect vlan list This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

PT-2022-29514

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue concerns the net: dsa, which is related to VLAN filtering. It has been noted that cross-chip syncing of VLAN filtering should be avoided. The actual impact and attack plausibility ha...

PT-2022-29441

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to the lack of protection for the VLAN list in the hns3 network driver. This could potentially lead to security vulnerabilities, although the actual impact and attack...

GSD-2022-1000634 net: bridge: vlan: fix memory leak in __allowed_ingress

net: bridge: vlan: fix memory leak in allowedingress This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.5 by commit...

PT-2022-28831

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.16 through v5.16.10 Description A use-after-free issue was discovered in the ocelot vlan del function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.16...

GSD-2022-1000267 net: bridge: vlan: fix memory leak in __allowed_ingress

net: bridge: vlan: fix memory leak in allowedingress This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.19 by commit...

GSD-2022-1000203 net: bridge: vlan: fix memory leak in __allowed_ingress

net: bridge: vlan: fix memory leak in allowedingress This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.96 by commit...

PT-2022-28481

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.96 Description A memory leak issue exists in the allowed ingress function related to VLAN handling in the network bridge component. The actual impact and potential for attack have not been fully determined...

PT-2022-28545

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.15.18 Description A memory leak issue exists in the allowed ingress function related to VLAN handling in the network bridge component. The actual impact and potential for attack have not been fully...

PT-2022-7430 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the ocelot vlan del function in the Linux kernel's Microsemi network adapter driver, which is vulnerable to a use-after-free condition. This occurs because ocel...

CVE-2022-24165

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetQvlanList. This vulnerability allows attackers to execute arbitrary commands via the qvlanIP parameter...

CVE-2021-36177

An improper access control vulnerability CWE-284 in FortiAuthenticator HA service 6.3.2 and below, 6.2.x, 6.1.x, 6.0.x may allow an attacker on the same vlan as the HA management interface to make an unauthenticated direct connection to the FAC's database...

CVE-2021-36177: Undefined Security Weakness

An improper access control vulnerability CWE-284 in FortiAuthenticator HA service 6.3.2 and below, 6.2.x, 6.1.x, 6.0.x may allow an attacker on the same vlan as the HA management interface to make an unauthenticated direct connection to the FAC's database...

ALBA-2022:0362 nispor bug fix and enhancement update

The nispor packages provide an API for network status querying. Bug Fixes and Enhancements: VLAN filtering cannot be configured with Intel X710 BZ2040317...

nispor bug fix and enhancement update

The nispor packages provide an API for network status querying. Bug Fixes and Enhancements: VLAN filtering cannot be configured with Intel X710 BZ2040317...

nispor bug fix and enhancement update

An update is available for nispor. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The nispor packages provide an API for network status querying. Bug Fixes and...

PT-2022-1010

Name of the Vulnerable Software and Affected Versions nispor affected versions not specified Description The issue concerns the nispor packages, which provide an API for network status querying. It involves a problem where VLAN filtering cannot be configured with Intel X710. Recommendations At th...

PT-2024-11792

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a field-overflowing memcpy in the net/mlx5e module of the Linux kernel. In preparation for FORTIFY SOURCE performing compile-time and run-time field bounds checki...

PT-2025-8162

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to VLAN filtering in the network subsystem. The issue occurs when changes to VLAN filtering are not properly handled for...

PT-2025-8110

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been resolved. The problem occurs when adding port base VLAN, where vf VLAN needs to be removed from HW and the vlan state in vf VLAN list is modified as...