Lucene search
K

24 matches found

Positive Technologies
Positive Technologies
added 2025/08/19 12:0 a.m.6 views

PT-2025-33769

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a use-after-free UaF issue in the fbnic module within the AF XDP portion of the queues. The vulnerability occurs when a Network Address Port Identifier NAPI h...

8.5CVSS6.3AI score0.07142EPSS
Exploits3References531
OSV
OSV
added 2025/07/03 9:15 a.m.5 views

AZL-64628 CVE-2025-38127 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: ice: fix Tx scheduler error handling in XDP callback When the XDP program is loaded, the XDP callback adds new Tx queues. This means that the callback must update the Tx scheduler with the new queue number. In the event of a Tx...

5.5CVSS6.2AI score0.00157EPSS
Exploits0References1
OSV
OSV
added 2025/03/14 3:45 p.m.4 views

OESA-2025-1284 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: net: sfc: add missing xdp queue reinitialization After rx/tx ring buffer size is changed, kernel panic occurs when it acts XDPTX or XDPREDIRECT. When tx/rx ring...

7.8CVSS6.4AI score0.00824EPSS
Exploits3References14
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2022-49096

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: sfc: add missing xdp queue reinitialization After rx/tx ring buffer size is changed, kernel panic occurs when it acts XDPTX or XDPREDIRECT. When tx/rx ring...

5.5CVSS6.5AI score0.00226EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/02/27 3:12 a.m.1 views

SUSE CVE-2022-49096

In the Linux kernel, the following vulnerability has been resolved: net: sfc: add missing xdp queue reinitialization After rx/tx ring buffer size is changed, kernel panic occurs when it acts XDPTX or XDPREDIRECT. When tx/rx ring buffer size is changedethtool -G, sfc driver reallocates and...

5.1CVSS6.7AI score0.00226EPSS
Exploits0References7
OSV
OSV
added 2025/02/26 7:0 a.m.2 views

DEBIAN-CVE-2022-49096

In the Linux kernel, the following vulnerability has been resolved: net: sfc: add missing xdp queue reinitialization After rx/tx ring buffer size is changed, kernel panic occurs when it acts XDPTX or XDPREDIRECT. When tx/rx ring buffer size is changedethtool -G, sfc driver reallocates and...

5.5CVSS5.8AI score0.00226EPSS
Exploits0References1
CVE
CVE
added 2025/02/26 1:54 a.m.96 views

CVE-2022-49096

Summary (CVE-2022-49096): In the Linux kernel net/sfc driver, changing rx/tx ring buffer size with ethtool -G led to a kernel panic when handling XDP_TX or XDP_REDIRECT because xdp queues (efx->xdp_tx_queues) were not reinitialized. The root cause was missing reinitialization of the XDP queues...

5.5CVSS5.5AI score0.00226EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/02/26 1:54 a.m.0 views

CVE-2022-49096 net: sfc: add missing xdp queue reinitialization

In the Linux kernel, the following vulnerability has been resolved: net: sfc: add missing xdp queue reinitialization After rx/tx ring buffer size is changed, kernel panic occurs when it acts XDPTX or XDPREDIRECT. When tx/rx ring buffer size is changedethtool -G, sfc driver reallocates and...

6.7AI score0.00226EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2025/02/26 1:54 a.m.8 views

CVE-2022-49096

In the Linux kernel, the following vulnerability has been resolved: net: sfc: add missing xdp queue reinitialization After rx/tx ring buffer size is changed, kernel panic occurs when it acts XDPTX or XDPREDIRECT. When tx/rx ring buffer size is changedethtool -G, sfc driver reallocates and...

5.5CVSS5.8AI score0.00226EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/01/21 2:21 p.m.8 views

CVE-2024-57932

A flaw was found in the Google Virtual Ethernet gve module in the Linux kernel. The eXpress Data Path XDP xmit Network Device Operation NDO callback does not properly check for an empty XDP queue, causing a divide-by-zero error or a NULL pointer dereference, resulting in a denial of service...

5.5CVSS6.2AI score0.00192EPSS
Exploits0References4
CVE
CVE
added 2025/01/21 12:1 p.m.134 views

CVE-2024-57932

CVE-2024-57932: In the Linux kernel exFAT filesystem, there is a fixed bug that could cause an infinite loop in exfat_readdir() when a cluster chain is corrupted. The related advisory describes the root cause as a loop condition in directory reading and notes that a patch was applied to prevent t...

5.5CVSS6.8AI score0.00192EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2025/01/21 12:1 p.m.13 views

CVE-2024-57932 gve: guard XDP xmit NDO on existence of xdp queues

In the Linux kernel, the following vulnerability has been resolved: gve: guard XDP xmit NDO on existence of xdp queues In GVE, dedicated XDP queues only exist when an XDP program is installed and the interface is up. As such, the NDO XDP XMIT callback should return early if either of these...

5.5CVSS6.1AI score0.00192EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2025/01/21 12:1 p.m.7 views

CVE-2024-57932

In the Linux kernel, the following vulnerability has been resolved: gve: guard XDP xmit NDO on existence of xdp queues In GVE, dedicated XDP queues only exist when an XDP program is installed and the interface is up. As such, the NDO XDP XMIT callback should return early if either of these...

5.5CVSS5.8AI score0.00192EPSS
Exploits0
OSV
OSV
added 2024/09/18 8:15 a.m.1 views

DEBIAN-CVE-2024-46766

In the Linux kernel, the following vulnerability has been resolved: ice: move netifqueuesetnapi to rtnl-protected sections Currently, netifqueuesetnapi is called from icevsirebuild that is not rtnl-locked when called from the reset. This creates the need to take the rtnllock just for a single...

7.8CVSS5.9AI score0.0023EPSS
Exploits0References1
OSV
OSV
added 2024/09/18 8:15 a.m.0 views

UBUNTU-CVE-2024-46766

In the Linux kernel, the following vulnerability has been resolved: ice: move netifqueuesetnapi to rtnl-protected sections Currently, netifqueuesetnapi is called from icevsirebuild that is not rtnl-locked when called from the reset. This creates the need to take the rtnllock just for a single...

7.8CVSS6.5AI score0.0023EPSS
Exploits0References10
Cvelist
Cvelist
added 2024/09/18 7:12 a.m.20 views

CVE-2024-46766 ice: move netif_queue_set_napi to rtnl-protected sections

In the Linux kernel, the following vulnerability has been resolved: ice: move netifqueuesetnapi to rtnl-protected sections Currently, netifqueuesetnapi is called from icevsirebuild that is not rtnl-locked when called from the reset. This creates the need to take the rtnllock just for a single...

0.0023EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/09/18 7:12 a.m.16 views

CVE-2024-46766 ice: move netif_queue_set_napi to rtnl-protected sections

In the Linux kernel, the following vulnerability has been resolved: ice: move netifqueuesetnapi to rtnl-protected sections Currently, netifqueuesetnapi is called from icevsirebuild that is not rtnl-locked when called from the reset. This creates the need to take the rtnllock just for a single...

6.5AI score0.0023EPSS
Exploits0References2
CVE
CVE
added 2024/09/18 7:12 a.m.99 views

CVE-2024-46766

CVE-2024-46766 affects the Linux kernel, specifically the ice driver’s VSI handling. The issue comes from moving netif_queue_set_napi to rtnl-protected sections, since netif_queue_set_napi() could be invoked from ice_vsi_rebuild() without rtnl locking during reset. The recommended fix fills napi-...

7.8CVSS7.8AI score0.0023EPSS
Exploits0References2Affected Software1
RedHat Linux
RedHat Linux
added 2024/07/08 2:5 a.m.3 views

kernel: net: ena: Fix incorrect descriptor free behavior

This is a vulnerability in the Linux kernel's Elastic Network Adapter ENA driver, which manages network interfaces on certain platforms. The driver utilizes two types of transmit TX queues: one for packets from the network stack and another for packets directed by XDP eXpress Data Path operations...

5.5CVSS6.8AI score0.00248EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2024/05/28 3:34 a.m.2 views

SUSE CVE-2021-47399

In the Linux kernel, the following vulnerability has been resolved: ixgbe: Fix NULL pointer dereference in ixgbexdpsetup The ixgbe driver currently generates a NULL pointer dereference with some machine online cpus ringfeatureRINGFFDIR.limit = count; It becomes 63. When user use xdp,...

5.5CVSS7.5AI score0.00239EPSS
Exploits0References14
Rows per page
Query Builder