Lucene search
+L

660 matches found

osv_azl
osv_azl
•added 2026/06/25 9:16 a.m.•22 views

AZL-90627 CVE-2026-53181 affecting package kernel for versions less than 6.6.143.1-1

In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: fix skackbacklog leak on failed handshake When vmcitransportrecvconnectingserver returns an error, vmcitransportrecvlisten calls vsockremovepending but never calls skacceptqremoved. This leaves skackbacklog incremente...

5.5CVSS5.5AI score0.00125EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/06/25 9:16 a.m.•30 views

CVE-2026-53181

In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: fix skackbacklog leak on failed handshake When vmcitransportrecvconnectingserver returns an error, vmcitransportrecvlisten calls vsockremovepending but never calls skacceptqremoved. This leaves skackbacklog incremente...

5.5CVSS5.5AI score0.00125EPSS
SaveExploits0References33
osv_ubuntu
osv_ubuntu
•added 2026/06/25 9:16 a.m.•24 views

UBUNTU-CVE-2026-53181

In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: fix skackbacklog leak on failed handshake When vmcitransportrecvconnectingserver returns an error, vmcitransportrecvlisten calls vsockremovepending but never calls skacceptqremoved. This leaves skackbacklog incremente...

5.7CVSS5.7AI score0.00125EPSS
SaveExploits0References34
CVE
CVE
•added 2026/06/25 8:38 a.m.•73 views

CVE-2026-53181

CVE-2026-53181 affects the Linux kernel vsock/vmci stack. On failing handshake, vmci_transport_recv_listen() could leave sk_ack_backlog incremented (due to missing sk_acceptq_removed() call), allowing backlog growth toward sk_max_ack_backlog and a possible listener denial of new connections (-ECO...

5.5CVSS5.5AI score0.00125EPSS
SaveExploits0References9Affected Software1
EUVD
EUVD
•added 2026/06/25 8:38 a.m.•23 views

EUVD-2026-39272

In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: fix skackbacklog leak on failed handshake When vmcitransportrecvconnectingserver returns an error, vmcitransportrecvlisten calls vsockremovepending but never calls skacceptqremoved. This leaves skackbacklog incremente...

5.5AI score0.00125EPSS
SaveExploits0References8
Debian CVE
Debian CVE
•added 2026/06/25 8:38 a.m.•35 views

CVE-2026-53181

In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: fix skackbacklog leak on failed handshake When vmcitransportrecvconnectingserver returns an error, vmcitransportrecvlisten calls vsockremovepending but never calls skacceptqremoved. This leaves skackbacklog incremente...

5.5CVSS5.7AI score0.00125EPSS
SaveExploits0
CVE
CVE
•added 2026/06/24 4:29 p.m.•99 views

CVE-2026-52997

The CVE-2026-52997 issue affects the Linux kernel’s net/sched sch_dualpi2 qdisc. The root cause was that dualpi2_change() could attempt to dequeue from the C-queue even when it was empty while packets resided in the L-queue, leading to a NULL skb dereference during limit/memlimit enforcement. The...

5.5CVSS5.8AI score0.0016EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2026/06/21 12:00 a.m.•28 views

PT-2026-61648

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the DualPI2 scheduler regarding GSO Generic Segmentation Offload backlog accounting. When DualPI2 splits a GSO skb into N segments, it propagates N additional packets ...

5.5CVSS5.5AI score0.00113EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/06/04 12:00 a.m.•34 views

PT-2026-52277

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the vsock/vmci component during a failed handshake. When the function vmci transport recv connecting server returns an error, the vmci transport recv listen...

6CVSS5.4AI score0.00125EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2026/05/29 1:14 a.m.•22 views

SUSE CVE-2026-46214

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix accept queue count leak on transport mismatch virtiotransportrecvlisten calls skacceptqadded before vsockassigntransport. If vsockassigntransport fails or selects a different transport, the error path returns...

4.7CVSS5.6AI score0.00166EPSS
SaveExploits0References16
RedhatCVE
RedhatCVE
•added 2026/05/28 1:19 p.m.•25 views

CVE-2026-46214

A flaw was found in the Linux kernel's vsock/virtio component. This vulnerability occurs when virtiotransportrecvlisten calls skacceptqadded before transport validation, leading to a permanent increment of the skackbacklog counter if transport assignment fails. A remote attacker could exploit thi...

5.5CVSS5.9AI score0.00166EPSS
SaveExploits0References4
NVD
NVD
•added 2026/05/28 10:16 a.m.•34 views

CVE-2026-46214

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix accept queue count leak on transport mismatch virtiotransportrecvlisten calls skacceptqadded before vsockassigntransport. If vsockassigntransport fails or selects a different transport, the error path returns...

5.5CVSS0.00166EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/05/28 10:16 a.m.•20 views

CVE-2026-46214

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix accept queue count leak on transport mismatch virtiotransportrecvlisten calls skacceptqadded before vsockassigntransport. If vsockassigntransport fails or selects a different transport, the error path returns...

5.5CVSS5.6AI score0.00166EPSS
SaveExploits0References45
osv_ubuntu
osv_ubuntu
•added 2026/05/28 10:16 a.m.•32 views

UBUNTU-CVE-2026-46214

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix accept queue count leak on transport mismatch virtiotransportrecvlisten calls skacceptqadded before vsockassigntransport. If vsockassigntransport fails or selects a different transport, the error path returns...

5.5CVSS5.8AI score0.00166EPSS
SaveExploits0References46
Cvelist
Cvelist
•added 2026/05/28 9:40 a.m.•58 views

CVE-2026-46214 vsock/virtio: fix accept queue count leak on transport mismatch

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix accept queue count leak on transport mismatch virtiotransportrecvlisten calls skacceptqadded before vsockassigntransport. If vsockassigntransport fails or selects a different transport, the error path returns...

0.00166EPSS
SaveExploits0References8
attackerkb
attackerkb
•added 2026/05/28 9:40 a.m.•29 views

CVE-2026-46214

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix accept queue count leak on transport mismatch virtiotransportrecvlisten calls skacceptqadded before vsockassigntransport. If vsockassigntransport fails or selects a different transport, the error path returns...

5.6AI score0.00166EPSS
SaveExploits0References9Affected Software1
EUVD
EUVD
•added 2026/05/28 9:40 a.m.•28 views

EUVD-2026-32841

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix accept queue count leak on transport mismatch virtiotransportrecvlisten calls skacceptqadded before vsockassigntransport. If vsockassigntransport fails or selects a different transport, the error path returns...

5.6AI score0.00166EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2026/05/28 9:40 a.m.•22 views

CVE-2026-46214 vsock/virtio: fix accept queue count leak on transport mismatch

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix accept queue count leak on transport mismatch virtiotransportrecvlisten calls skacceptqadded before vsockassigntransport. If vsockassigntransport fails or selects a different transport, the error path returns...

5.6AI score0.00166EPSS
SaveExploits0References12
CVE
CVE
•added 2026/05/28 9:40 a.m.•80 views

CVE-2026-46214

CVE-2026-46214 relates to the Linux kernel vsock/virtio transport: a backlog count leak occurs when vsock_assign_transport() fails or switches transport, because sk_acceptq_added() is called before transport validation and not removed on error. This can cause sk_acceptq_is_full() to reject new co...

5.5CVSS5.6AI score0.00166EPSS
SaveExploits0References9Affected Software1
osv_clsa
osv_clsa
•added 2026/05/22 9:05 a.m.•69 views

CLSA-2026-1779375889 kernel: Fix of 95 CVEs

perf/x86/intel/uncore: Fix die ID init and look up bugs CVE-2026-43344 - x86/apic: Disable x2apic on resume if the kernel expects so CVE-2026-43363 - drm/amdgpu: Fix use-after-free race in VM acquire CVE-2026-43370 - dm: remove fake timeout to avoid leak request CVE-2026-43314 - md/bitmap: fix...

9.8CVSS5.8AI score0.00693EPSS
SaveExploits0References1
Rows per page
Query Builder