Extreme Networks

Summary In the Linux kernel's XFRM ESP-in-TCP subsystem, unsafe in-place cryptographic processing allows a low-privileged local attacker to write arbitrary bytes into the page cache of read-only files, including sensitive system files. An attacker ca...

Summary A flaw was found in the Linux kernel's RxRPC networking subsystem. When a non-linear socket buffer carrying a splice-pinned page-cache reference reaches the RxRPC authentication verification path, the kernel performs an in-place pcbc(fcrypt) ...

VOSS / FabricEngine 9.4.1.0 had been released! You can view the release notes here: VOSS release notesFabric Engine release notes The downloadable files can be found on the Extreme Portal, under Products: ·     VSP 4900 ·     VSP 7400 ·     4220 ·   ...

Summary The “Dirty Frag” vulnerability is a local privilege escalation (LPE) issue in the Linux kernel that combines flaws in the ESP/XFRM and RXRPC subsystems to allow an unprivileged local attacker to gain root access on major Linux distributions (...

SLXOS 20.7.3f has been released! The release notes can be found here.  The downloadable files can be found on the Extreme Portal, under Products: Extreme Switching: 8520 8720 SLX 9540 SLX 9250 SLX 9150   Extreme Routing: 8820 SLX 9640 SLX 9740