All CVEs — page 302 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The Linux kernel's IPv6 XFRM implementation has a flaw where error handling callbacks incorrectly assume all socket objects are full IPv6 sockets when processing packets with lower MTU routes. This can lead to memory corruption when mini-sockets from TCP SYN-ACK packets are misinterpreted as full sockets, potentially allowing attackers to execute arbitrary code or cause system crashes.
The Linux kernel's LAN743x network driver has a use-after-free vulnerability in its RX checksum processing logic. When packets span multiple receive buffers, the driver incorrectly writes to freed fragment skb metadata instead of the surviving head skb, potentially leading to memory corruption.
The Linux kernel's XFRM subsystem has a race condition where it can dereference a freed security association (xfrm_state) after the secpath structure has been reset during packet processing. This occurs when receive callbacks like VTI and XFRM interfaces reset the secpath before xfrm_input() finishes using the state data, potentially leading to memory corruption or information disclosure.
The Linux kernel fails to properly handle memory ordering on I6500 CPU cores when using load-linked/store-conditional (lld/scd) instructions. Without proper synchronization, concurrent operations can lead to kernel page faults and system instability, particularly affecting embedded systems using Mobile EyeQ5 hardware.