DEBIAN-CVE-2026-64355

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject fragmented frames in devmap Devmap broadcast redirects clone the packet for all but the last destination. For native XDP, that clone path copies only the linear xdpframe data, while fragmented frames keep skbsharedinf...

CVE-2026-64355

CVE-2026-64355 (Linux kernel) shows a fix for a vulnerability in BPF devmap handling of fragmented frames. In native XDP, cloning fragmented frames could carry skb_shared_info in tailroom outside the linear area, leaving XDP_FLAGS_HAS_FRAGS set but with invalid frag metadata. The subsequent free ...

Linux Distros Unpatched Vulnerability : CVE-2026-64355

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Reject fragmented frames in devmap Devmap broadcast redirects clone the packet for all but the last destination. For native XDP, that clone path copies onl...

CVE-2025-64355

creationtimestamp| type| source ---|---|--- 2025-12-18 19:48:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mabwyvq5tf2y...

CVE-2025-64355 WordPress JetElements For Elementor plugin <= 2.7.12 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetElements For Elementor jet-elements allows DOM-Based XSS.This issue affects JetElements For Elementor: from n/a through = 2.7.12...

WordPress JetElements For Elementor plugin <= 2.7.12 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Bonds in WordPress Plugin JetElements For Elementor versions = 2.7.12...