Lucene search
+L

378 matches found

Cvelist
Cvelist
•added 2026/06/01 9:14 p.m.•55 views

CVE-2026-0050

In handleBondStateChanged of AdapterService.java, there is a possible sensitive information disclosure due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00068EPSS
SaveExploits0References1
OSV
OSV
•added 2026/06/01 12:00 a.m.•20 views

ASB-A-290364858

In handleBondStateChanged of AdapterService.java, there is a possible sensitive information disclosure due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

3.3CVSS5.5AI score0.00068EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2026/05/28 3:55 a.m.•21 views

SUSE CVE-2026-45970

In the Linux kernel, the following vulnerability has been resolved: bonding: alb: fix UAF in rlbarprecv during bond up/down The ALB RX path may access rxhashtbl concurrently with bond teardown. During rapid bond up/down cycles, rlbdeinitialize frees rxhashtbl while RX handlers are still running,...

7CVSS6.2AI score0.00171EPSS
SaveExploits0References171
EUVD
EUVD
•added 2026/05/27 3:33 p.m.•22 views

EUVD-2026-32257

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix UMR hang in LAG error state unload During firmware reset in LAG mode, a race condition causes the driver to hang indefinitely while waiting for UMR completion during device unload. See 1. In LAG mode the bond devic...

5.8AI score0.00162EPSS
SaveExploits0References5
NVD
NVD
•added 2026/05/27 2:17 p.m.•20 views

CVE-2026-45973

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix UMR hang in LAG error state unload During firmware reset in LAG mode, a race condition causes the driver to hang indefinitely while waiting for UMR completion during device unload. See 1. In LAG mode the bond devic...

5.5CVSS0.00162EPSS
SaveExploits0References4
NVD
NVD
•added 2026/05/27 2:17 p.m.•20 views

CVE-2026-45970

In the Linux kernel, the following vulnerability has been resolved: bonding: alb: fix UAF in rlbarprecv during bond up/down The ALB RX path may access rxhashtbl concurrently with bond teardown. During rapid bond up/down cycles, rlbdeinitialize frees rxhashtbl while RX handlers are still running,...

7.8CVSS0.00171EPSS
SaveExploits0References8
OSV
OSV
•added 2026/05/27 2:17 p.m.•29 views

UBUNTU-CVE-2026-45970

In the Linux kernel, the following vulnerability has been resolved: bonding: alb: fix UAF in rlbarprecv during bond up/down The ALB RX path may access rxhashtbl concurrently with bond teardown. During rapid bond up/down cycles, rlbdeinitialize frees rxhashtbl while RX handlers are still running,...

7.8CVSS6.6AI score0.00171EPSS
SaveExploits0References28
OSV
OSV
•added 2026/05/27 2:17 p.m.•25 views

UBUNTU-CVE-2026-45973

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix UMR hang in LAG error state unload During firmware reset in LAG mode, a race condition causes the driver to hang indefinitely while waiting for UMR completion during device unload. See 1. In LAG mode the bond devic...

5.5CVSS5.8AI score0.00162EPSS
SaveExploits0References15
OSV
OSV
•added 2026/05/27 12:18 p.m.•13 views

CVE-2026-45973 RDMA/mlx5: Fix UMR hang in LAG error state unload

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix UMR hang in LAG error state unload During firmware reset in LAG mode, a race condition causes the driver to hang indefinitely while waiting for UMR completion during device unload. See 1. In LAG mode the bond devic...

6AI score
SaveExploits0References7
OSV
OSV
•added 2026/05/27 12:18 p.m.•13 views

CVE-2026-45970 bonding: alb: fix UAF in rlb_arp_recv during bond up/down

In the Linux kernel, the following vulnerability has been resolved: bonding: alb: fix UAF in rlbarprecv during bond up/down The ALB RX path may access rxhashtbl concurrently with bond teardown. During rapid bond up/down cycles, rlbdeinitialize frees rxhashtbl while RX handlers are still running,...

7.8CVSS6.3AI score
SaveExploits0References11
Cvelist
Cvelist
•added 2026/05/27 12:18 p.m.•64 views

CVE-2026-45970 bonding: alb: fix UAF in rlb_arp_recv during bond up/down

In the Linux kernel, the following vulnerability has been resolved: bonding: alb: fix UAF in rlbarprecv during bond up/down The ALB RX path may access rxhashtbl concurrently with bond teardown. During rapid bond up/down cycles, rlbdeinitialize frees rxhashtbl while RX handlers are still running,...

7.8CVSS0.00171EPSS
SaveExploits0References8
CVE
CVE
•added 2026/05/27 12:18 p.m.•77 views

CVE-2026-45970

CVE-2026-45970 affects the Linux kernel bonding driver (Active-Backup Load Balancing, ALB). The root cause is a Use-After-Free in rlb_arp_recv where RX path may access rx_hashtbl concurrently with bond teardown, allowing a race with rlb_deinitialize() to dereference freed memory and trigger a ker...

7.8CVSS6.2AI score0.00171EPSS
SaveExploits0References8Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/05/27 12:00 a.m.•34 views

Linux Distros Unpatched Vulnerability : CVE-2026-45970

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bonding: alb: fix UAF in rlbarprecv during bond up/down The ALB RX path may access rxhashtbl concurrently with bond teardown. During rapid bond up/down cycles,...

7.8CVSS6.9AI score0.00171EPSS
SaveExploits0References3
NVD
NVD
•added 2026/05/26 9:16 p.m.•22 views

CVE-2026-8676

An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond...

8.8CVSS0.00315EPSS
SaveExploits0References2
CVE
CVE
•added 2026/05/26 7:36 p.m.•50 views

CVE-2026-8676

CVE-2026-8676 describes a vulnerability in Bluetooth Low Energy bonding where an attacker can downgrade security by deleting an existing bond, spoofing the bonded device, and establishing a new bond. The CVSS v3.1 vector indicates an Adjacent attacker, no privileges, low attack complexity, with h...

8.8CVSS5.8AI score0.00315EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/05/26 7:36 p.m.•15 views

CVE-2026-8676

An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond...

8.8CVSS5.8AI score0.00315EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/05/26 7:36 p.m.•53 views

CVE-2026-8676

An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond...

8.8CVSS0.00315EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/05/26 7:36 p.m.•12 views

CVE-2026-8676

An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond...

8.8CVSS5.8AI score0.00315EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/05/26 7:36 p.m.•39 views

EUVD-2026-31969

An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond...

8.8CVSS5.8AI score0.00315EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/26 12:00 a.m.•34 views

PT-2026-43409

An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond...

8.8CVSS5.8AI score0.00315EPSS
SaveExploits0References3
Rows per page
Query Builder