block-copyfail

Resumen CVE-2026-31431 "Copy Fail" es una vulnerabilidad de escalada de privilegios en el kernel de Linux en la interfaz criptográfica algifaead. Un atacante utiliza sockets AFALG con el algoritmo authencesn y splice para corromper archivos arbitrarios en la caché de páginas del kernel, incluidos...

copy-fail-blocker

copy-fail-blocker Mitigación BPF-LSM para CVE-2026-31431 "Copy Fail" y la variante RxRPC de Dirty Frag, y para vulnerabilidades similares de escalada de privilegios que dependen del acceso de espacio de usuario a una ruta criptográfica in-place del lado del kernel accesible a través de las famili...

block-copyfail

block-copyfail Prueba de concepto de mitigación en tiempo de ejecución para CVE-2026-31431 "Copy Fail" — una escalada de privilegios en el kernel de Linux mediante la plantilla criptográfica authencesn en algifaead. A diferencia del bloqueo de módulos, esto no requiere reinicio. Un programa BPF L...

deny-af-alg-bpf

deny-af-alg-bpf Descripción Programa BPF LSM que bloquea la creación de sockets AFALG API criptográfica del kernel de Linux y registra todos los intentos mediante un ring buffer hacia el espacio de usuario. Qué hace Se adjunta al hook lsm/socketcreate Deniega cualquier llamada socketAFALG, ... co...

CVE-2026-80669

A flaw was found in the Linux kernel. A local attacker with the ability to load BPF Berkeley Packet Filter LSM Linux Security Module programs could exploit a vulnerability in the xfrmdecodesession hook. This could lead to a system panic, resulting in a Denial of Service DoS...

Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-2071)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2071 advisory. In the Linux kernel, the following vulnerability has been resolved: afunix: Drop all SCM attributes for SOCKMAP. CVE-2026-53005 In the Linux kernel, the following vulnerability has been...

Important: kernel6.18

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: afunix: Drop all SCM attributes for SOCKMAP. CVE-2026-53005 In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing locking around retry adding new subreqs CVE-2026-64068 In the Linu...

CVE-2026-80669

In the Linux kernel, the following vulnerability has been resolved: bpf: Disable xfrmdecodesession hook attachment BPF LSM programs can currently attach to xfrmdecodesession. That hook may return an error, but securityskbclassifyflow calls it from a void path and triggers BUGON if an error is...

UBUNTU-CVE-2026-80669

In the Linux kernel, the following vulnerability has been resolved: bpf: Disable xfrmdecodesession hook attachment BPF LSM programs can currently attach to xfrmdecodesession. That hook may return an error, but securityskbclassifyflow calls it from a void path and triggers BUGON if an error is...

CVE-2026-80669

In the Linux kernel, the following vulnerability has been resolved: bpf: Disable xfrmdecodesession hook attachment BPF LSM programs can currently attach to xfrmdecodesession. That hook may return an error, but securityskbclassifyflow calls it from a void path and triggers BUGON if an error is...

EUVD-2026-67545

In the Linux kernel, the following vulnerability has been resolved: bpf: Disable xfrmdecodesession hook attachment BPF LSM programs can currently attach to xfrmdecodesession. That hook may return an error, but securityskbclassifyflow calls it from a void path and triggers BUGON if an error is...

CVE-2026-80669

This Linux kernel vulnerability affects the interaction between BPF LSM programs and the xfrm_decode_session() hook. BPF LSM programs can attach to this hook, which may return an error. However, security_skb_classify_flow() invokes the hook from a void path and triggers a BUG_ON() if an error is ...

CVE-2026-80669 bpf: Disable xfrm_decode_session hook attachment

In the Linux kernel, the following vulnerability has been resolved: bpf: Disable xfrmdecodesession hook attachment BPF LSM programs can currently attach to xfrmdecodesession. That hook may return an error, but securityskbclassifyflow calls it from a void path and triggers BUGON if an error is...

Linux Distros Unpatched Vulnerability : CVE-2026-80669

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Disable xfrmdecodesession hook attachment BPF LSM programs can currently attach to xfrmdecodesession. That hook may return an error, but...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098979)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098979 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Prevent tail call between progs attached to different hooks bpf progs can be attached to...

SUSE CVE-2026-63865

In the Linux kernel, the following vulnerability has been resolved: bpf: Drop tasktoinode and inetconnestablished from lsm sleepable hooks bpflsmtasktoinode is called under rcureadlock and bpflsminetconnestablished is called from softirq context, so neither hook can be used by sleepable LSM...

CVE-2026-64192

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject BPFMAPTYPEINODESTORAGE creation if BPF LSM is uninitialized When CONFIGBPFLSM=y is set, BPF inode storage maps BPFMAPTYPEINODESTORAGE are compiled into the kernel. However, if the BPF LSM is not explicitly enabled at...

CVE-2026-64192 bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject BPFMAPTYPEINODESTORAGE creation if BPF LSM is uninitialized When CONFIGBPFLSM=y is set, BPF inode storage maps BPFMAPTYPEINODESTORAGE are compiled into the kernel. However, if the BPF LSM is not explicitly enabled at...

CVE-2026-64192

CVE-2026-64192 affects the Linux kernel (BPF inode storage maps). When CONFIG_BPF_LSM=y and the BPF LSM is not enabled at boot, lsm_prepare() doesn’t run, so the BPF LSM blob size (lbs_inode) remains at the compiled default (8 bytes) instead of a larger offset. This lets a privileged user create/...

Linux Distros Unpatched Vulnerability : CVE-2026-64192

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Reject BPFMAPTYPEINODESTORAGE creation if BPF LSM is uninitialized When CONFIGBPFLSM=y is set, BPF inode storage maps BPFMAPTYPEINODESTORAGE are compiled...