Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 14

Количество 14

ubuntu логотип

CVE-2022-48883

около 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent A user is able to configure an arbitrary number of rx queues when creating an interface via netlink. This doesn't work for child PKEY interfaces because the child interface uses the parent receive channels. Although the child shares the parent's receive channels, the number of rx queues is important for the channel_stats array: the parent's rx channel index is used to access the child's channel_stats. So the array has to be at least as large as the parent's rx queue size for the counting to work correctly and to prevent out of bound accesses. This patch checks for the mentioned scenario and returns an error when trying to create the interface. The error is propagated to the user.

CVSS3: 7.8
EPSS: Низкий
redhat логотип

CVE-2022-48883

около 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent A user is able to configure an arbitrary number of rx queues when creating an interface via netlink. This doesn't work for child PKEY interfaces because the child interface uses the parent receive channels. Although the child shares the parent's receive channels, the number of rx queues is important for the channel_stats array: the parent's rx channel index is used to access the child's channel_stats. So the array has to be at least as large as the parent's rx queue size for the counting to work correctly and to prevent out of bound accesses. This patch checks for the mentioned scenario and returns an error when trying to create the interface. The error is propagated to the user.

CVSS3: 6.6
EPSS: Низкий
nvd логотип

CVE-2022-48883

около 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent A user is able to configure an arbitrary number of rx queues when creating an interface via netlink. This doesn't work for child PKEY interfaces because the child interface uses the parent receive channels. Although the child shares the parent's receive channels, the number of rx queues is important for the channel_stats array: the parent's rx channel index is used to access the child's channel_stats. So the array has to be at least as large as the parent's rx queue size for the counting to work correctly and to prevent out of bound accesses. This patch checks for the mentioned scenario and returns an error when trying to create the interface. The error is propagated to the user.

CVSS3: 7.8
EPSS: Низкий
debian логотип

CVE-2022-48883

около 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: n ...

CVSS3: 7.8
EPSS: Низкий
github логотип

GHSA-4hhg-35c9-5c3m

около 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent A user is able to configure an arbitrary number of rx queues when creating an interface via netlink. This doesn't work for child PKEY interfaces because the child interface uses the parent receive channels. Although the child shares the parent's receive channels, the number of rx queues is important for the channel_stats array: the parent's rx channel index is used to access the child's channel_stats. So the array has to be at least as large as the parent's rx queue size for the counting to work correctly and to prevent out of bound accesses. This patch checks for the mentioned scenario and returns an error when trying to create the interface. The error is propagated to the user.

CVSS3: 7.8
EPSS: Низкий
fstec логотип

BDU:2025-01974

почти 4 года назад

Уязвимость компонентов net/mlx5 ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 6.6
EPSS: Низкий
redos логотип

ROS-20250205-01

почти 2 года назад

Множественные уязвимости kernel-lt

CVSS3: 5.5
EPSS: Низкий
altlinux логотип

ALT-PU-2023-1086

почти 4 года назад

ALT-PU-2023-1086: package `kernel-image-un-def` update to version 6.1.7-alt1

CVSS3: 7.8
EPSS: Низкий
altlinux логотип

ALT-PU-2023-1126

почти 4 года назад

ALT-PU-2023-1126: package `kernel-image-mp` update to version 6.1.8-alt1

CVSS3: 7.8
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:3209-1

около 2 лет назад

Security update for the Linux Kernel

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:3190-1

около 2 лет назад

Security update for the Linux Kernel

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:3483-1

около 2 лет назад

Security update for the Linux Kernel

EPSS: Низкий
altlinux логотип

ALT-PU-2024-4843

больше 2 лет назад

ALT-PU-2024-4843: package `kernel-image-rpi-un` update to version 6.1.77-alt1

CVSS3: 10
EPSS: Низкий
altlinux логотип

ALT-PU-2024-4263

больше 2 лет назад

ALT-PU-2024-4263: package `kernel-image-rpi-un` update to version 6.1.77-alt1

CVSS3: 10
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2022-48883

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent A user is able to configure an arbitrary number of rx queues when creating an interface via netlink. This doesn't work for child PKEY interfaces because the child interface uses the parent receive channels. Although the child shares the parent's receive channels, the number of rx queues is important for the channel_stats array: the parent's rx channel index is used to access the child's channel_stats. So the array has to be at least as large as the parent's rx queue size for the counting to work correctly and to prevent out of bound accesses. This patch checks for the mentioned scenario and returns an error when trying to create the interface. The error is propagated to the user.

CVSS3: 7.8
0%
Низкий
около 2 лет назад
redhat логотип
CVE-2022-48883

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent A user is able to configure an arbitrary number of rx queues when creating an interface via netlink. This doesn't work for child PKEY interfaces because the child interface uses the parent receive channels. Although the child shares the parent's receive channels, the number of rx queues is important for the channel_stats array: the parent's rx channel index is used to access the child's channel_stats. So the array has to be at least as large as the parent's rx queue size for the counting to work correctly and to prevent out of bound accesses. This patch checks for the mentioned scenario and returns an error when trying to create the interface. The error is propagated to the user.

CVSS3: 6.6
0%
Низкий
около 2 лет назад
nvd логотип
CVE-2022-48883

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent A user is able to configure an arbitrary number of rx queues when creating an interface via netlink. This doesn't work for child PKEY interfaces because the child interface uses the parent receive channels. Although the child shares the parent's receive channels, the number of rx queues is important for the channel_stats array: the parent's rx channel index is used to access the child's channel_stats. So the array has to be at least as large as the parent's rx queue size for the counting to work correctly and to prevent out of bound accesses. This patch checks for the mentioned scenario and returns an error when trying to create the interface. The error is propagated to the user.

CVSS3: 7.8
0%
Низкий
около 2 лет назад
debian логотип
CVE-2022-48883

In the Linux kernel, the following vulnerability has been resolved: n ...

CVSS3: 7.8
0%
Низкий
около 2 лет назад
github логотип
GHSA-4hhg-35c9-5c3m

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent A user is able to configure an arbitrary number of rx queues when creating an interface via netlink. This doesn't work for child PKEY interfaces because the child interface uses the parent receive channels. Although the child shares the parent's receive channels, the number of rx queues is important for the channel_stats array: the parent's rx channel index is used to access the child's channel_stats. So the array has to be at least as large as the parent's rx queue size for the counting to work correctly and to prevent out of bound accesses. This patch checks for the mentioned scenario and returns an error when trying to create the interface. The error is propagated to the user.

CVSS3: 7.8
0%
Низкий
около 2 лет назад
fstec логотип
BDU:2025-01974

Уязвимость компонентов net/mlx5 ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 6.6
0%
Низкий
почти 4 года назад
redos логотип
ROS-20250205-01

Множественные уязвимости kernel-lt

CVSS3: 5.5
почти 2 года назад
altlinux логотип
ALT-PU-2023-1086

ALT-PU-2023-1086: package `kernel-image-un-def` update to version 6.1.7-alt1

CVSS3: 7.8
почти 4 года назад
altlinux логотип
ALT-PU-2023-1126

ALT-PU-2023-1126: package `kernel-image-mp` update to version 6.1.8-alt1

CVSS3: 7.8
почти 4 года назад
suse-cvrf логотип
SUSE-SU-2024:3209-1

Security update for the Linux Kernel

около 2 лет назад
suse-cvrf логотип
SUSE-SU-2024:3190-1

Security update for the Linux Kernel

около 2 лет назад
suse-cvrf логотип
SUSE-SU-2024:3483-1

Security update for the Linux Kernel

около 2 лет назад
altlinux логотип
ALT-PU-2024-4843

ALT-PU-2024-4843: package `kernel-image-rpi-un` update to version 6.1.77-alt1

CVSS3: 10
больше 2 лет назад
altlinux логотип
ALT-PU-2024-4263

ALT-PU-2024-4263: package `kernel-image-rpi-un` update to version 6.1.77-alt1

CVSS3: 10
больше 2 лет назад

Уязвимостей на страницу