130732 matches found
ppp: require CAP_NET_ADMIN in target netns for unattached ioctls
...
sctp: fix uninit-value in __sctp_rcv_asconf_lookup()
...
net/sched: taprio: fix use-after-free in advance_sched() on schedule switch
...
net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr
...
net/rds: Restrict use of RDS/IB to the initial network namespace
...
net: bcmgenet: fix racing timeout handler
...
net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS
...
net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list
...
batman-adv: v: stop OGMv2 on disabled interface
...
SUSE CVE-2026-13318
A server-side request forgery SSRF flaw was found in KubeVirt's virt-api port-forward handler. When processing a port-forward request to a VirtualMachineInstance VMI, virt-api reads the target IP from vmi.Status.Interfaces0.IP and passes it directly to net.Dial without validation. For VMIs using...
SUSE CVE-2026-52978
In the Linux kernel, the following vulnerability has been resolved: net: psp: require admin permission for dev-set and key-rotate The dev-set and key-rotate netlink operations modify shared device state PSP version configuration and cryptographic key material, respectively but do not require...
SUSE CVE-2026-53077
In the Linux kernel, the following vulnerability has been resolved: net/rds: Restrict use of RDS/IB to the initial network namespace Prevent using RDS/IB in network namespaces other than the initial one. The existing RDS/IB code will not work properly in non-initial network namespaces...
[SECURITY] Fedora 44 Update: openbao-2.5.5-1.fc44
Openbao secures, stores, and tightly controls access to tokens, passwords, certificates, API keys, and other secrets in modern computing. Openbao handles leasing, key revocation, key rolling, and auditing. Through a unified API, us ers can access an encrypted Key/Value store and network...
[SECURITY] Fedora 43 Update: tigervnc-1.16.2-4.fc43
Virtual Network Computing VNC is a remote display system which allows you to view a computing 'desktop' environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. This package contains a client which will allow you ...
Oracle Linux 9 : thunderbird (ELSA-2026-29940)
The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-29940 advisory. 140.12.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 140.12.0 - Add OpenELA debranding 140.12.0-1 - Update to 140.12.0 ESR Tenab...
The vulnerability of the veth_poll() function in the drivers/net/veth.c module of the network device driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the vethpoll function in the drivers/net/veth.c file of the network device driver for the Linux operating system is due to a race condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
EUVD-2026-36599
Nezha Monitoring: Authenticated users can claim the dashboard Host through NAT and preempt all dashboard routing...
GHSA-X6FG-52VR-HJ4W Nezha Monitoring: Authenticated users can claim the dashboard Host through NAT and preempt all dashboard routing
Summary An authenticated non-admin user who owns any server can create or update a NAT profile whose domain is equal to the dashboard's own HTTP Host for example, dashboard.example:8008. The dashboard's top-level HTTP/gRPC multiplexer checks NATShared.GetNATConfigByDomainr.Host before dispatching...
Nezha Monitoring: Authenticated users can claim the dashboard Host through NAT and preempt all dashboard routing
Summary An authenticated non-admin user who owns any server can create or update a NAT profile whose domain is equal to the dashboard's own HTTP Host for example, dashboard.example:8008. The dashboard's top-level HTTP/gRPC multiplexer checks NATShared.GetNATConfigByDomainr.Host before dispatching...
GHSA-M8J6-RC5X-WV36 nono-py's policy JSON accepts unknown security fields
Summary nono-py policy handling could fail open in two ways. First, resolving a policy-derived ProxyConfig did not automatically enforce CapabilitySet.proxyonly, allowing sandboxed children to bypass a resolved domain allowlist by using direct network access. Second, policy JSON accepted unknown...