https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 16:11:05 +0000 https://cve.radiocsirt.org/vuln/fkie_cve-2021-47581 <p>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.</p> <p>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-47581 https://cve.radiocsirt.org/vuln/ghsa-wmrp-qwhx-cpwv <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>xen/netback: don&#39;t queue unlimited number of packages</p> <p>In case a guest isn&#39;t consuming incoming network traffic as fast as it is coming in, xen-netback is buffering network packages in unlimited numbers today. This can result in host OOM situations.</p> <p>Commit f48da8b14d04ca8 (&#34;xen-netback: fix unlimited guest Rx internal queue and carrier flapping&#34;) meant to introduce a mechanism to limit the amount of buffered data by stopping the Tx queue when reaching the data limit, but this doesn&#39;t work for cases like UDP.</p> <p>When hitting the limit don&#39;t queue further SKBs, but drop them instead. In order to be able to tell Rx packages have been dropped increment the rx_dropped statistics counter in this case.</p> <p>It should be noted that the old solution to continue queueing SKBs had the additional problem of an overflow of the 32-bit rx_queue_len value would result in intermittent Tx queue enabling.</p> <p>This is part of XSA-392</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>xen/netback: don&#39;t queue unlimited number of packages</p> <p>In case a guest isn&#39;t consuming incoming network traffic as fast as it is coming in, xen-netback is buffering network packages in unlimited numbers today. This can result in host OOM situations.</p> <p>Commit f48da8b14d04ca8 (&#34;xen-netback: fix unlimited guest Rx internal queue and carrier flapping&#34;) meant to introduce a mechanism to limit the amount of buffered data by stopping the Tx queue when reaching the data limit, but this doesn&#39;t work for cases like UDP.</p> <p>When hitting the limit don&#39;t queue further SKBs, but drop them instead. In order to be able to tell Rx packages have been dropped increment the rx_dropped statistics counter in this case.</p> <p>It should be noted that the old solution to continue queueing SKBs had the additional problem of an overflow of the 32-bit rx_queue_len value would result in intermittent Tx queue enabling.</p> <p>This is part of XSA-392</p> https://cve.radiocsirt.org/vuln/ghsa-wmrp-qwhx-cpwv https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1418 <p>Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1418