https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 18:44:33 +0000 https://cve.radiocsirt.org/vuln/cve-2024-26693 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: iwlwifi: mvm: fix a crash when we run out of stations</p> <p>A DoS tool that injects loads of authentication frames made our AP crash. The iwl_mvm_is_dup() function couldn&#39;t find the per-queue dup_data which was not allocated.</p> <p>The root cause for that is that we ran out of stations in the firmware and we didn&#39;t really add the station to the firmware, yet we didn&#39;t return an error to mac80211. Mac80211 was thinking that we have the station and because of that, sta_info::uploaded was set to 1. This allowed ieee80211_find_sta_by_ifaddr() to return a valid station object, but that ieee80211_sta didn&#39;t have any iwl_mvm_sta object initialized and that caused the crash mentioned earlier when we got Rx on that station.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: iwlwifi: mvm: fix a crash when we run out of stations</p> <p>A DoS tool that injects loads of authentication frames made our AP crash. The iwl_mvm_is_dup() function couldn&#39;t find the per-queue dup_data which was not allocated.</p> <p>The root cause for that is that we ran out of stations in the firmware and we didn&#39;t really add the station to the firmware, yet we didn&#39;t return an error to mac80211. Mac80211 was thinking that we have the station and because of that, sta_info::uploaded was set to 1. This allowed ieee80211_find_sta_by_ifaddr() to return a valid station object, but that ieee80211_sta didn&#39;t have any iwl_mvm_sta object initialized and that caused the crash mentioned earlier when we got Rx on that station.</p> https://cve.radiocsirt.org/vuln/cve-2024-26693 https://cve.radiocsirt.org/vuln/usn-6895-1 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: linux-nvidia-6.5</p> <p>It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)</p> <p>It was discovered that the HugeTLB file system component of the Linux Kernel contained a NULL pointer dereference vulnerability. A privileged attacker could possibly use this to to cause a denial of service. (CVE-2024-0841)</p> <p>It was discovered that the Open vSwitch implementation in the Linux kernel could overflow its stack during recursive action operations under certain conditions. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-1151)</p> <p>Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)</p> <p>Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)</p> <p>Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 a…</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: linux-nvidia-6.5</p> <p>It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)</p> <p>It was discovered that the HugeTLB file system component of the Linux Kernel contained a NULL pointer dereference vulnerability. A privileged attacker could possibly use this to to cause a denial of service. (CVE-2024-0841)</p> <p>It was discovered that the Open vSwitch implementation in the Linux kernel could overflow its stack during recursive action operations under certain conditions. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-1151)</p> <p>Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)</p> <p>Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)</p> <p>Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 a…</p> https://cve.radiocsirt.org/vuln/usn-6895-1