Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pwf3-8jwg-55rq

Опубликовано: 15 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

In the Linux kernel, the following vulnerability has been resolved:

net: mana: Validate the packet length reported by the NIC

Validate the packet length reported in the RX CQE before passing it to skb processing. The CQE is supplied by the NIC device and should not be blindly trusted.

In the Linux kernel, the following vulnerability has been resolved:

net: mana: Validate the packet length reported by the NIC

Validate the packet length reported in the RX CQE before passing it to skb processing. The CQE is supplied by the NIC device and should not be blindly trusted.

EPSS

Процентиль: 51%
0.00728
Низкий

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.8
ubuntu
16 дней назад

In the Linux kernel, the following vulnerability has been resolved: net: mana: Validate the packet length reported by the NIC Validate the packet length reported in the RX CQE before passing it to skb processing. The CQE is supplied by the NIC device and should not be blindly trusted.

CVSS3: 7
redhat
16 дней назад

In the Linux kernel, the following vulnerability has been resolved: net: mana: Validate the packet length reported by the NIC Validate the packet length reported in the RX CQE before passing it to skb processing. The CQE is supplied by the NIC device and should not be blindly trusted.

CVSS3: 9.8
nvd
16 дней назад

In the Linux kernel, the following vulnerability has been resolved: net: mana: Validate the packet length reported by the NIC Validate the packet length reported in the RX CQE before passing it to skb processing. The CQE is supplied by the NIC device and should not be blindly trusted.

CVSS3: 9.8
debian
16 дней назад

In the Linux kernel, the following vulnerability has been resolved: n ...

EPSS

Процентиль: 51%
0.00728
Низкий

9.8 Critical

CVSS3