Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 20

Количество 20

ubuntu логотип

CVE-2025-21676

почти 2 года назад

In the Linux kernel, the following vulnerability has been resolved: net: fec: handle page_pool_dev_alloc_pages error The fec_enet_update_cbd function calls page_pool_dev_alloc_pages but did not handle the case when it returned NULL. There was a WARN_ON(!new_page) but it would still proceed to use the NULL pointer and then crash. This case does seem somewhat rare but when the system is under memory pressure it can happen. One case where I can duplicate this with some frequency is when writing over a smbd share to a SATA HDD attached to an imx6q. Setting /proc/sys/vm/min_free_kbytes to higher values also seems to solve the problem for my test case. But it still seems wrong that the fec driver ignores the memory allocation error and can crash. This commit handles the allocation error by dropping the current packet.

CVSS3: 5.5
EPSS: Низкий
redhat логотип

CVE-2025-21676

почти 2 года назад

In the Linux kernel, the following vulnerability has been resolved: net: fec: handle page_pool_dev_alloc_pages error The fec_enet_update_cbd function calls page_pool_dev_alloc_pages but did not handle the case when it returned NULL. There was a WARN_ON(!new_page) but it would still proceed to use the NULL pointer and then crash. This case does seem somewhat rare but when the system is under memory pressure it can happen. One case where I can duplicate this with some frequency is when writing over a smbd share to a SATA HDD attached to an imx6q. Setting /proc/sys/vm/min_free_kbytes to higher values also seems to solve the problem for my test case. But it still seems wrong that the fec driver ignores the memory allocation error and can crash. This commit handles the allocation error by dropping the current packet.

CVSS3: 5.5
EPSS: Низкий
nvd логотип

CVE-2025-21676

почти 2 года назад

In the Linux kernel, the following vulnerability has been resolved: net: fec: handle page_pool_dev_alloc_pages error The fec_enet_update_cbd function calls page_pool_dev_alloc_pages but did not handle the case when it returned NULL. There was a WARN_ON(!new_page) but it would still proceed to use the NULL pointer and then crash. This case does seem somewhat rare but when the system is under memory pressure it can happen. One case where I can duplicate this with some frequency is when writing over a smbd share to a SATA HDD attached to an imx6q. Setting /proc/sys/vm/min_free_kbytes to higher values also seems to solve the problem for my test case. But it still seems wrong that the fec driver ignores the memory allocation error and can crash. This commit handles the allocation error by dropping the current packet.

CVSS3: 5.5
EPSS: Низкий
msrc логотип

CVE-2025-21676

больше 1 года назад

net: fec: handle page_pool_dev_alloc_pages error

CVSS3: 5.5
EPSS: Низкий
debian логотип

CVE-2025-21676

почти 2 года назад

In the Linux kernel, the following vulnerability has been resolved: n ...

CVSS3: 5.5
EPSS: Низкий
github логотип

GHSA-2cvp-cxm8-hg6v

почти 2 года назад

In the Linux kernel, the following vulnerability has been resolved: net: fec: handle page_pool_dev_alloc_pages error The fec_enet_update_cbd function calls page_pool_dev_alloc_pages but did not handle the case when it returned NULL. There was a WARN_ON(!new_page) but it would still proceed to use the NULL pointer and then crash. This case does seem somewhat rare but when the system is under memory pressure it can happen. One case where I can duplicate this with some frequency is when writing over a smbd share to a SATA HDD attached to an imx6q. Setting /proc/sys/vm/min_free_kbytes to higher values also seems to solve the problem for my test case. But it still seems wrong that the fec driver ignores the memory allocation error and can crash. This commit handles the allocation error by dropping the current packet.

CVSS3: 5.5
EPSS: Низкий
fstec логотип

BDU:2025-01479

почти 2 года назад

Уязвимость функции page_pool_dev_alloc_pages() модуля drivers/net/ethernet/freescale/fec_main.c ядра операционных систем Linux, позволяющая нарушителю вызвать отказ в обслуживании.

CVSS3: 5.5
EPSS: Низкий
redos логотип

ROS-20260803-73-0018

3 месяца назад

Уязвимость kernel-lt

CVSS3: 5.5
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0564-1

больше 1 года назад

Security update for the Linux Kernel

EPSS: Низкий
altlinux логотип

ALT-PU-2025-3500

больше 1 года назад

ALT-PU-2025-3500: package `kernel-image-6.6` update to version 6.6.74-alt1

CVSS3: 7.8
EPSS: Низкий
altlinux логотип

ALT-PU-2025-3467

больше 1 года назад

ALT-PU-2025-3467: package `kernel-image-6.12` update to version 6.12.11-alt1

CVSS3: 7.8
EPSS: Низкий
altlinux логотип

ALT-PU-2025-1980

почти 2 года назад

ALT-PU-2025-1980: package `kernel-image-pine` update to version 6.12.11-alt1

CVSS3: 7.8
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0428-1

больше 1 года назад

Security update for the Linux Kernel

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0557-1

больше 1 года назад

Security update for the Linux Kernel

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0499-1

больше 1 года назад

Security update for the Linux Kernel

EPSS: Низкий
altlinux логотип

ALT-PU-2025-1925

почти 2 года назад

ALT-PU-2025-1925: package `kernel-image-rt` update to version 6.12.11-alt1

CVSS3: 8
EPSS: Низкий
oracle-oval логотип

ELSA-2025-20530

около 1 года назад

ELSA-2025-20530: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2025-20480

больше 1 года назад

ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS: Низкий
altlinux логотип

ALT-PU-2025-12647

около 1 года назад

ALT-PU-2025-12647: package `kernel-image-rpi-un` update to version 6.12.49-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-9924

5 месяцев назад

ALT-PU-2026-9924: package `kernel-image-rpi-un` update to version 6.12.94-alt1

CVSS3: 10
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-21676

In the Linux kernel, the following vulnerability has been resolved: net: fec: handle page_pool_dev_alloc_pages error The fec_enet_update_cbd function calls page_pool_dev_alloc_pages but did not handle the case when it returned NULL. There was a WARN_ON(!new_page) but it would still proceed to use the NULL pointer and then crash. This case does seem somewhat rare but when the system is under memory pressure it can happen. One case where I can duplicate this with some frequency is when writing over a smbd share to a SATA HDD attached to an imx6q. Setting /proc/sys/vm/min_free_kbytes to higher values also seems to solve the problem for my test case. But it still seems wrong that the fec driver ignores the memory allocation error and can crash. This commit handles the allocation error by dropping the current packet.

CVSS3: 5.5
0%
Низкий
почти 2 года назад
redhat логотип
CVE-2025-21676

In the Linux kernel, the following vulnerability has been resolved: net: fec: handle page_pool_dev_alloc_pages error The fec_enet_update_cbd function calls page_pool_dev_alloc_pages but did not handle the case when it returned NULL. There was a WARN_ON(!new_page) but it would still proceed to use the NULL pointer and then crash. This case does seem somewhat rare but when the system is under memory pressure it can happen. One case where I can duplicate this with some frequency is when writing over a smbd share to a SATA HDD attached to an imx6q. Setting /proc/sys/vm/min_free_kbytes to higher values also seems to solve the problem for my test case. But it still seems wrong that the fec driver ignores the memory allocation error and can crash. This commit handles the allocation error by dropping the current packet.

CVSS3: 5.5
0%
Низкий
почти 2 года назад
nvd логотип
CVE-2025-21676

In the Linux kernel, the following vulnerability has been resolved: net: fec: handle page_pool_dev_alloc_pages error The fec_enet_update_cbd function calls page_pool_dev_alloc_pages but did not handle the case when it returned NULL. There was a WARN_ON(!new_page) but it would still proceed to use the NULL pointer and then crash. This case does seem somewhat rare but when the system is under memory pressure it can happen. One case where I can duplicate this with some frequency is when writing over a smbd share to a SATA HDD attached to an imx6q. Setting /proc/sys/vm/min_free_kbytes to higher values also seems to solve the problem for my test case. But it still seems wrong that the fec driver ignores the memory allocation error and can crash. This commit handles the allocation error by dropping the current packet.

CVSS3: 5.5
0%
Низкий
почти 2 года назад
msrc логотип
CVE-2025-21676

net: fec: handle page_pool_dev_alloc_pages error

CVSS3: 5.5
0%
Низкий
больше 1 года назад
debian логотип
CVE-2025-21676

In the Linux kernel, the following vulnerability has been resolved: n ...

CVSS3: 5.5
0%
Низкий
почти 2 года назад
github логотип
GHSA-2cvp-cxm8-hg6v

In the Linux kernel, the following vulnerability has been resolved: net: fec: handle page_pool_dev_alloc_pages error The fec_enet_update_cbd function calls page_pool_dev_alloc_pages but did not handle the case when it returned NULL. There was a WARN_ON(!new_page) but it would still proceed to use the NULL pointer and then crash. This case does seem somewhat rare but when the system is under memory pressure it can happen. One case where I can duplicate this with some frequency is when writing over a smbd share to a SATA HDD attached to an imx6q. Setting /proc/sys/vm/min_free_kbytes to higher values also seems to solve the problem for my test case. But it still seems wrong that the fec driver ignores the memory allocation error and can crash. This commit handles the allocation error by dropping the current packet.

CVSS3: 5.5
0%
Низкий
почти 2 года назад
fstec логотип
BDU:2025-01479

Уязвимость функции page_pool_dev_alloc_pages() модуля drivers/net/ethernet/freescale/fec_main.c ядра операционных систем Linux, позволяющая нарушителю вызвать отказ в обслуживании.

CVSS3: 5.5
0%
Низкий
почти 2 года назад
redos логотип
ROS-20260803-73-0018

Уязвимость kernel-lt

CVSS3: 5.5
0%
Низкий
3 месяца назад
suse-cvrf логотип
SUSE-SU-2025:0564-1

Security update for the Linux Kernel

больше 1 года назад
altlinux логотип
ALT-PU-2025-3500

ALT-PU-2025-3500: package `kernel-image-6.6` update to version 6.6.74-alt1

CVSS3: 7.8
больше 1 года назад
altlinux логотип
ALT-PU-2025-3467

ALT-PU-2025-3467: package `kernel-image-6.12` update to version 6.12.11-alt1

CVSS3: 7.8
больше 1 года назад
altlinux логотип
ALT-PU-2025-1980

ALT-PU-2025-1980: package `kernel-image-pine` update to version 6.12.11-alt1

CVSS3: 7.8
почти 2 года назад
suse-cvrf логотип
SUSE-SU-2025:0428-1

Security update for the Linux Kernel

больше 1 года назад
suse-cvrf логотип
SUSE-SU-2025:0557-1

Security update for the Linux Kernel

больше 1 года назад
suse-cvrf логотип
SUSE-SU-2025:0499-1

Security update for the Linux Kernel

больше 1 года назад
altlinux логотип
ALT-PU-2025-1925

ALT-PU-2025-1925: package `kernel-image-rt` update to version 6.12.11-alt1

CVSS3: 8
почти 2 года назад
oracle-oval логотип
ELSA-2025-20530

ELSA-2025-20530: Unbreakable Enterprise kernel security update (IMPORTANT)

около 1 года назад
oracle-oval логотип
ELSA-2025-20480

ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT)

больше 1 года назад
altlinux логотип
ALT-PU-2025-12647

ALT-PU-2025-12647: package `kernel-image-rpi-un` update to version 6.12.49-alt1

CVSS3: 9.8
около 1 года назад
altlinux логотип
ALT-PU-2026-9924

ALT-PU-2026-9924: package `kernel-image-rpi-un` update to version 6.12.94-alt1

CVSS3: 10
5 месяцев назад

Уязвимостей на страницу