CVE-2026-119737

The pppoewrapper vendor daemon from the Amlogic Android SDK, as shipped on Nexbox A95X Amlogic S905/S905X TV boxes, contains a command injection vulnerability that allows local attackers to execute arbitrary commands as root by sending crafted messages to a world-writable AFUNIX datagram socket a...

CVE-2026-119737 Amlogic pppoe_wrapper Command Injection via AF_UNIX Socket

The pppoewrapper vendor daemon from the Amlogic Android SDK, as shipped on Nexbox A95X Amlogic S905/S905X TV boxes, contains a command injection vulnerability that allows local attackers to execute arbitrary commands as root by sending crafted messages to a world-writable AFUNIX datagram socket a...

EUVD-2026-115546

The pppoewrapper vendor daemon from the Amlogic Android SDK, as shipped on Nexbox A95X Amlogic S905/S905X TV boxes, contains a command injection vulnerability that allows local attackers to execute arbitrary commands as root by sending crafted messages to a world-writable AFUNIX datagram socket a...

CVE-2026-119737

The pppoe_wrapper vendor daemon in the Amlogic Android SDK , specifically on Nexbox A95X (Amlogic S905/S905X) TV boxes, is vulnerable to a command injection flaw. A local attacker can execute arbitrary commands as root by sending crafted messages to a world-writable AF_UNIX datagram socket at /de...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: afunix: Drop all SCM attributes for SOCKMAP. SOCKMAP can hide inflight fd from AFUNIX GC. When a socket in SOCKMAP receives a skb containing an inflight fd, skpsockverdictdataready looks up the mapped socket and enqueues the skb ...

kernel: af_unix: Fix UAF read of tail->len in unix_stream_data_wait()

A flaw was found in the Linux kernel's afunix UNIX domain sockets component. A race condition in the unixstreamdatawait function allows a local attacker to trigger a Use-After-Free UAF vulnerability. This occurs because the function peeks at a socket buffer without proper locking, enabling anothe...

kernel: af_unix: Fix UAF read of tail->len in unix_stream_data_wait()

A flaw was found in the Linux kernel's afunix UNIX domain sockets component. A race condition in the unixstreamdatawait function allows a local attacker to trigger a Use-After-Free UAF vulnerability. This occurs because the function peeks at a socket buffer without proper locking, enabling anothe...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CVE-2026-119737: Nexbox, Amlogic: The pppoe_wrapper vendor daemon from the Amlogic Android SDK, as shipped on Nexbox A95X (Amlogic S905/S905X) TV boxes,…

The pppoewrapper vendor daemon from the Amlogic Android SDK, as shipped on Nexbox A95X Amlogic S905/S905X TV boxes, contains a command injection vulnerability that allows local attackers to execute arbitrary commands as root by sending crafted messages to a world-writable AFUNIX datagram socket a...

kernel security update

4.18.0-553.182.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

AlmaLinux 8 : kernel-rt (ALSA-2026:93437)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:93437 advisory. kernel: ipv6: exthdrs: refresh nh pointer after ipv6hopjumbo CVE-2026-63924 kernel: ipv6: exthdrs: refresh nh after handling HAO option CVE-2026-63922...

ALSA-2026:93437 Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: ipv6: exthdrs: refresh nh pointer after ipv6hopjumbo CVE-2026-63924 kernel: ipv6: exthdrs: refresh nh after handling HAO option...

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: ipv6: exthdrs: refresh nh pointer after ipv6hopjumbo CVE-2026-63924 kernel: ipv6: exthdrs: refresh nh after handling HAO option...

RHEL 8 : kernel (RHSA-2026:93436)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93436 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv6: exthdrs: refresh nh...

ALSA-2026:93436 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv6: exthdrs: refresh nh pointer after ipv6hopjumbo CVE-2026-63924 kernel: ipv6: exthdrs: refresh nh after handling HAO option CVE-2026-63922 kernel: afunix: Fix UAF read of tail-len in...

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv6: exthdrs: refresh nh pointer after ipv6hopjumbo CVE-2026-63924 kernel: ipv6: exthdrs: refresh nh after handling HAO option CVE-2026-63922 kernel: afunix: Fix UAF read of tail-len in...

bad_garbage

BADGARBAGE.c CVE-2026-53361 — an unprivileged, container-escapable use-after-free in the AFUNIX socket garbage collector. This is the single-vector MSGPEEK only version. The Bug The AFUNIX GC reclaims "in-flight" sockets that form unreachable reference cycles. A concurrent MSGPEEK on an in-flight...

Oracle Linux 10 : kernel (ELSA-2026-91565)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-91565 advisory. - scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE CKI Backport Bot RHEL-283521 CVE-2026-72083 - md/raid5-ppl: fix use-after-fr...

kernel: af_unix: Fix UAF read of tail->len in unix_stream_data_wait()

A flaw was found in the Linux kernel's afunix UNIX domain sockets component. A race condition in the unixstreamdatawait function allows a local attacker to trigger a Use-After-Free UAF vulnerability. This occurs because the function peeks at a socket buffer without proper locking, enabling anothe...

ALSA-2026:91565 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: tcp: restrict SOATTACHFILTER to priv users CVE-2026-53236 kernel: fuse: re-lock request before replacing page cache folio CVE-2026-53388 kernel: net: shaper: rework the VALID marking agai...