netlink

About this tag
Netlink is a Linux kernel interface used for communication between the kernel and userspace processes, particularly in networking and security subsystems. Discussions on WindowsForum.com cover vulnerabilities and fixes related to netlink, including CVE-2025-38465, which addresses integer wraparound bugs in netlink socket receive-accounting, and CVE-2025-40278 and CVE-2025-40279, which fix kernel information leaks in traffic-control actions that use netlink to dump data. Additionally, CVE-2023-3772 involves a null-pointer crash in the XFRM subsystem, which interacts with netlink. These threads focus on Linux kernel security patches, mitigation strategies, and the impact on systems like Azure Linux. A separate request for a Broadcom NetXtreme Netlink driver for Windows 7 highlights a different use of the term, referring to a network driver.
  1. CVE-2023-3772: Linux XFRM NULL Pointer Crash Patch and Mitigation

    A null-pointer bug tucked inside the Linux kernel’s XFRM (IP transformation) code — specifically in xfrm_update_ae_params() — can be triggered by a local actor with network administration privileges to cause a complete kernel crash and a hard denial-of-service on affected systems; the defect was...
  2. CVE-2025-38465 Linux Netlink Bug: Fix Details, Azure Linux Attestation Limits

    A recently assigned Linux-kernel vulnerability, tracked as CVE‑2025‑38465, fixes integer wraparound bugs in netlink code paths that update a socket’s receive-accounting counter (sk->sk_rmem_alloc); Microsoft’s public advisory names Azure Linux as a product that “includes this open‑source library...
  3. Linux Kernel Info Leak Fix CVE-2025-40279 Zero Init in tc_ife connmark

    A compact but consequential Linux kernel information‑leak fix has been published under CVE‑2025‑40279: a small change in the traffic‑control connmark action (act_connmark) zero‑initializes a local struct (tc_ife / opt) in tcf_connmark_dump to stop uninitialized padding bytes from being copied...
  4. Linux Kernel Patch: Zero Initialize Structs to Fix CVE-2025-40278 Infoleak

    The Linux kernel received a surgical fix for CVE-2025-40278 that zero-initializes a local struct used by the traffic-control “ife” action, closing a KMSAN-reported kernel information leak that could otherwise disclose residual stack bytes to unprivileged userspace. Background / Overview...
  5. O

    Windows 7 Request for Broadcom NetXtremes Netlink Driver 14.4.6.2 for Windows 7 32-bit

    Hey May I have link to download Broadcom netxtreme netlink driver 14.4.6.2 for windows 7 32bit Thanks