Lucene search
+L

344 matches found

Positive Technologies
Positive Technologies
added 2025/04/17 12:0 a.m.14 views

PT-2025-17218 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use after free bug has been identified in the Linux kernel, specifically in the vxcan xmit function. The issue arises after calling netif rx niskb, where dereferencing skb becomes...

7.8CVSS7.7AI score0.13707EPSS
SaveExploits5References303
RedHat Linux
RedHat Linux
added 2025/04/16 3:19 a.m.3 views

kernel: wifi: mac80211: fix race condition on enabling fast-xmit

A vulnerability was found in the mac80211 driver in the Linux kernel. This issue could lead to potential crashes or memory corruption due to of a situation where the driver attempts to utilize data structures that haven't been fully initialized yet...

5.5CVSS7.2AI score0.00193EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2025/04/04 2:59 a.m.9 views

SUSE CVE-2025-21925

In the Linux kernel, the following vulnerability has been resolved: llc: do not use skbget before devqueuexmit syzbot is able to crash hosts 1, using llc and devices not supporting IFFTXSKBSHARING. In this case, e1000 driver calls ethskbpad, while the skb is shared. Simply replace skbget by...

5.5CVSS7.7AI score0.002EPSS
SaveExploits0References15
OSV
OSV
added 2025/04/01 4:15 p.m.8 views

DEBIAN-CVE-2025-21925

In the Linux kernel, the following vulnerability has been resolved: llc: do not use skbget before devqueuexmit syzbot is able to crash hosts 1, using llc and devices not supporting IFFTXSKBSHARING. In this case, e1000 driver calls ethskbpad, while the skb is shared. Simply replace skbget by...

5.5CVSS5.8AI score0.002EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/01 4:15 p.m.5 views

UBUNTU-CVE-2025-21925

In the Linux kernel, the following vulnerability has been resolved: llc: do not use skbget before devqueuexmit syzbot is able to crash hosts 1, using llc and devices not supporting IFFTXSKBSHARING. In this case, e1000 driver calls ethskbpad, while the skb is shared. Simply replace skbget by...

5.5CVSS6.5AI score0.002EPSS
SaveExploits0References59
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.16 views

The vulnerability of the stmmac_tso_xmit() function in the drivers/net/ethernet/stmicro/stmmac/stmmac_main.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the stmmactsoxmit function in the drivers/net/ethernet/stmicro/stmmac/stmmacmain.c file of the Linux kernel is related to incorrect error handling. Exploiting this vulnerability can allow an attacker to cause a system failure...

5.5CVSS6.7AI score0.00245EPSS
SaveExploits0References13Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/03/21 12:0 a.m.14 views

The vulnerability of the ibmvnic_xmit() function in the drivers/net/ethernet/ibm/ibmvnic.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the ibmvnicxmit function in the drivers/net/ethernet/ibm/ibmvnic.c file of the Linux kernel is related to improper memory release before deleting the last reference „memory leak“. Exploiting this vulnerability could allow an attacker to cause a system failure...

7.5CVSS6.5AI score0.00227EPSS
SaveExploits0References14Affected Software6
OSV
OSV
added 2025/02/27 3:15 a.m.4 views

UBUNTU-CVE-2025-21762

In the Linux kernel, the following vulnerability has been resolved: arp: use RCU protection in arpxmit arpxmit can be called without RTNL or RCU protection. Use RCU protection to avoid potential UAF...

7.8CVSS6.5AI score0.00613EPSS
SaveExploits0References47
SUSE CVE
SUSE CVE
added 2025/02/27 3:5 a.m.4 views

SUSE CVE-2022-49544

In the Linux kernel, the following vulnerability has been resolved: ipw2x00: Fix potential NULL dereference in libipwxmit crypt and crypt-ops could be null, so we need to checking null before dereference...

5.5CVSS7.9AI score0.00259EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
added 2025/02/27 3:2 a.m.5 views

SUSE CVE-2022-49691

In the Linux kernel, the following vulnerability has been resolved: erspan: do not assume transport header is always set Rewrite tests in ip6erspantunnelxmit and erspanfbxmit to not assume transport header is set. syzbot reported: WARNING: CPU: 0 PID: 1350 at include/linux/skbuff.h:2911...

5.5CVSS6.2AI score0.00282EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/02/26 12:0 a.m.5 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a possible null pointer dereference in libipwxmit...

5.5CVSS6AI score0.00259EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2025/02/26 12:0 a.m.3 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from ipgrexmit not properly validating csumstart, which could result in a buffer overflow...

5.5CVSS5.6AI score0.00274EPSS
SaveExploits0References8
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.3 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: be2net: fixed a potential memory leak in bexmit. bexmit returns NETDEVTXOK without freeing the skb variable, in case bexmitenqueue fails. To address this issue, add devkfreeskbany to properly handle the situation...

5.5CVSS6.2AI score0.00253EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.4 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: bridge: xmit: Ensure that the ethheaderlen field is set to a valid value. The syzbot triggered an uninitvalue1 error in the bridgedevice’s xmit path by sending a short packet less than ETHHLEN bytes. To fix this issue, check...

7.1CVSS6.3AI score0.00284EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.7 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: systemport: a potential memory leak has been fixed in bcmsysportxmit. The function bcmsysportxmit returns NETDEVTXOK without freeing the skb in case of a failure in dmamapsingle. Add devkfreeskb to address this issue...

5.5CVSS6.2AI score0.00239EPSS
SaveExploits0References3
Amazon
Amazon
added 2025/01/24 12:0 a.m.10 views

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: CDC-NCM: avoid overflow in sanity checking CVE-2022-48938 In the Linux kernel, the following vulnerability has been resolved: inet: inetdefrag: prevent sk release while still in use CVE-2024-26921 In the Linux...

9.1CVSS6.7AI score0.01358EPSS
SaveExploits2
RedhatCVE
RedhatCVE
added 2025/01/21 2:21 p.m.11 views

CVE-2024-57932

A flaw was found in the Google Virtual Ethernet gve module in the Linux kernel. The eXpress Data Path XDP xmit Network Device Operation NDO callback does not properly check for an empty XDP queue, causing a divide-by-zero error or a NULL pointer dereference, resulting in a denial of service...

5.5CVSS6.2AI score0.00203EPSS
SaveExploits0References4
CVE
CVE
added 2025/01/21 12:1 p.m.144 views

CVE-2024-57932

CVE-2024-57932: In the Linux kernel exFAT filesystem, there is a fixed bug that could cause an infinite loop in exfat_readdir() when a cluster chain is corrupted. The related advisory describes the root cause as a loop condition in directory reading and notes that a patch was applied to prevent t...

5.5CVSS6.8AI score0.00203EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2025/01/21 12:1 p.m.38 views

CVE-2024-57932

In the Linux kernel, the following vulnerability has been resolved: gve: guard XDP xmit NDO on existence of xdp queues In GVE, dedicated XDP queues only exist when an XDP program is installed and the interface is up. As such, the NDO XDP XMIT callback should return early if either of these...

5.5CVSS5.8AI score0.00203EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2024/12/30 3:48 a.m.5 views

SUSE CVE-2024-56717

In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: fix incorrect IFH SRCPORT field in ocelotifhsetbasic Packets injected by the CPU should have a SRCPORT field equal to the CPU port module index in the Analyzer block ocelot-numphysports. The blamed commit copie...

6.1CVSS7.7AI score0.00206EPSS
SaveExploits0References3
Rows per page
Query Builder