Поиск уязвимостей
Количество 20
Количество 20
CVE-2025-39965
In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_alloc_spi shouldn't use 0 as SPI x->id.spi == 0 means "no SPI assigned", but since commit 94f39804d891 ("xfrm: Duplicate SPI Handling"), we now create states and add them to the byspi list with this value. __xfrm_state_delete doesn't remove those states from the byspi list, since they shouldn't be there, and this shows up as a UAF the next time we go through the byspi list.
CVE-2025-39965
In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_alloc_spi shouldn't use 0 as SPI x->id.spi == 0 means "no SPI assigned", but since commit 94f39804d891 ("xfrm: Duplicate SPI Handling"), we now create states and add them to the byspi list with this value. __xfrm_state_delete doesn't remove those states from the byspi list, since they shouldn't be there, and this shows up as a UAF the next time we go through the byspi list.
CVE-2025-39965
In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_alloc_spi shouldn't use 0 as SPI x->id.spi == 0 means "no SPI assigned", but since commit 94f39804d891 ("xfrm: Duplicate SPI Handling"), we now create states and add them to the byspi list with this value. __xfrm_state_delete doesn't remove those states from the byspi list, since they shouldn't be there, and this shows up as a UAF the next time we go through the byspi list.
CVE-2025-39965
xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
CVE-2025-39965
In the Linux kernel, the following vulnerability has been resolved: x ...
GHSA-jc8g-4mch-vjcv
In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_alloc_spi shouldn't use 0 as SPI x->id.spi == 0 means "no SPI assigned", but since commit 94f39804d891 ("xfrm: Duplicate SPI Handling"), we now create states and add them to the byspi list with this value. __xfrm_state_delete doesn't remove those states from the byspi list, since they shouldn't be there, and this shows up as a UAF the next time we go through the byspi list.
BDU:2025-13242
Уязвимость функции xfrm_alloc_spi() модуля net/xfrm/xfrm_state.c ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании
ELSA-2025-20719
ELSA-2025-20719: Unbreakable Enterprise kernel security update (IMPORTANT)
openSUSE-SU-2025:20091-1
Security update for the Linux Kernel
SUSE-SU-2025:4111-1
Security update for the Linux Kernel
SUSE-SU-2025:4128-1
Security update for the Linux Kernel
SUSE-SU-2025:4301-1
Security update for the Linux Kernel
SUSE-SU-2025:4140-1
Security update for the Linux Kernel
SUSE-SU-2025:4320-1
Security update for the Linux Kernel
ALT-PU-2025-12715
ALT-PU-2025-12715: package `kernel-image-rt` update to version 6.12.51-alt1
ALT-PU-2025-12713
ALT-PU-2025-12713: package `kernel-image-6.12` update to version 6.12.51-alt1
SUSE-SU-2025:4141-1
Security update for the Linux Kernel
SUSE-SU-2025:4132-1
Security update for the Linux Kernel
SUSE-SU-2025:4057-1
Security update for the Linux Kernel
ALT-PU-2026-6044
ALT-PU-2026-6044: package `kernel-image-rpi-un` update to version 6.12.79-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-39965 In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_alloc_spi shouldn't use 0 as SPI x->id.spi == 0 means "no SPI assigned", but since commit 94f39804d891 ("xfrm: Duplicate SPI Handling"), we now create states and add them to the byspi list with this value. __xfrm_state_delete doesn't remove those states from the byspi list, since they shouldn't be there, and this shows up as a UAF the next time we go through the byspi list. | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
 | CVE-2025-39965 In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_alloc_spi shouldn't use 0 as SPI x->id.spi == 0 means "no SPI assigned", but since commit 94f39804d891 ("xfrm: Duplicate SPI Handling"), we now create states and add them to the byspi list with this value. __xfrm_state_delete doesn't remove those states from the byspi list, since they shouldn't be there, and this shows up as a UAF the next time we go through the byspi list. | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
 | CVE-2025-39965 In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_alloc_spi shouldn't use 0 as SPI x->id.spi == 0 means "no SPI assigned", but since commit 94f39804d891 ("xfrm: Duplicate SPI Handling"), we now create states and add them to the byspi list with this value. __xfrm_state_delete doesn't remove those states from the byspi list, since they shouldn't be there, and this shows up as a UAF the next time we go through the byspi list. | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
 | CVE-2025-39965 xfrm: xfrm_alloc_spi shouldn't use 0 as SPI | CVSS3: 5.6 | 0% Низкий | около 1 года назад |
| CVE-2025-39965 In the Linux kernel, the following vulnerability has been resolved: x ... | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
| GHSA-jc8g-4mch-vjcv In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_alloc_spi shouldn't use 0 as SPI x->id.spi == 0 means "no SPI assigned", but since commit 94f39804d891 ("xfrm: Duplicate SPI Handling"), we now create states and add them to the byspi list with this value. __xfrm_state_delete doesn't remove those states from the byspi list, since they shouldn't be there, and this shows up as a UAF the next time we go through the byspi list. | CVSS3: 7.8 | 0% Низкий | около 1 года назад |
 | BDU:2025-13242 Уязвимость функции xfrm_alloc_spi() модуля net/xfrm/xfrm_state.c ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
| ELSA-2025-20719 ELSA-2025-20719: Unbreakable Enterprise kernel security update (IMPORTANT) | около 1 года назад | ||
 | openSUSE-SU-2025:20091-1 Security update for the Linux Kernel | 12 месяцев назад | ||
| SUSE-SU-2025:4111-1 Security update for the Linux Kernel | 12 месяцев назад | ||
| SUSE-SU-2025:4128-1 Security update for the Linux Kernel | 12 месяцев назад | ||
| SUSE-SU-2025:4301-1 Security update for the Linux Kernel | 12 месяцев назад | ||
| SUSE-SU-2025:4140-1 Security update for the Linux Kernel | 12 месяцев назад | ||
| SUSE-SU-2025:4320-1 Security update for the Linux Kernel | 11 месяцев назад | ||
| ALT-PU-2025-12715 ALT-PU-2025-12715: package `kernel-image-rt` update to version 6.12.51-alt1 | CVSS3: 8 | около 1 года назад | |
| ALT-PU-2025-12713 ALT-PU-2025-12713: package `kernel-image-6.12` update to version 6.12.51-alt1 | CVSS3: 8 | около 1 года назад | |
| SUSE-SU-2025:4141-1 Security update for the Linux Kernel | 12 месяцев назад | ||
| SUSE-SU-2025:4132-1 Security update for the Linux Kernel | 12 месяцев назад | ||
| SUSE-SU-2025:4057-1 Security update for the Linux Kernel | 12 месяцев назад | ||
| ALT-PU-2026-6044 ALT-PU-2026-6044: package `kernel-image-rpi-un` update to version 6.12.79-alt1 | CVSS3: 9.8 | 7 месяцев назад |
Уязвимостей на страницу