الرئيسية
الرئيسية
الاتجاهات
الاتجاهات
الثغرات
الثغرات
الأخبار
الأخبار
الباحثون
الباحثون
لماذا dbugs؟
لماذا dbugs؟
الإعدادات

John Meneghini

باحث منRed Hat
#22845من 60,554
13.3إجمالي CVSS
الثغرات · 2
متوسطة
1
عالية
1
PT-2022-7535
2022-01-31
5.5
CVE-2022-48715
Linux
Linux Kernel
The vulnerability is related to the `bnx2fc recv frame()` function in the Linux kernel, which modifies the per cpu lport stats counters in a non-mpsafe way. This can lead to a bug when using `smp processor id()` in preemptible code. The issue can be reproduced by running tests with a debug kernel and enabling the bnx2fc driver with the hardware. The vulnerability may cause a denial of service.
PT-2022-7611
2022-01-24
7.8
CVE-2022-48758
Linux
Linux Kernel
The vulnerability is related to the `bnx2fc` driver in the Linux kernel. The `bnx2fc destroy()` function removes the interface before calling `destroy work`, resulting in multiple warnings from `sysfs remove group()` as the controller rport device attributes are removed too early. This issue can be reproduced by following specific steps, including enabling `fcoe` and executing `fipvlan` and `fcoeadm` commands. The problem is caused by the removal of the `fcoe port`'s `destroy work` queue, which is not needed.