PT-2026-139505

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18.61 Linux kernel versions prior to 7.3.2 Description An access control bypass exists in the TUN/TAP driver. A local user can attach to persistent TUN devices that have no assigned owner or group without...

PT-2026-122051

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IPv4 implementation where the ip rt update pmtu function updates every path when multipath is enabled. For nexthop objects, the functions fib info num path and fib...

PT-2026-128619

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls api: reclaim an empty proto on the error path Two racing tc filter add requests on the same chain/prio of an unlocked classifier both run change on the shared proto and both can fail: the winner's tcf chain tp dele...

PT-2026-117030

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the net/sched: cls api component when two concurrent tc filter add requests occur on the same chain or priority of an unlocked classifier. Both requests execut...

Astra Linux – Vulnerability in Linux

A issue was discovered in netfilter within the Linux kernel before version 5.10. There may be a use-after-free situation in the packet processing context, as the per-CPU sequence count is mishandled during concurrent iptables rule replacements. This vulnerability could be exploited with the...

PT-2026-106513

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A heap buffer overflow exists in the mwifiex cfg80211 authenticate function. The issue occurs because the authentication frame length is derived from req-ie len and req-auth data len both...

PT-2026-106607

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A routing loop can be configured by a user with CAP NET ADMIN privileges. When ipip fill forward path or ip6 tnl fill forward path look up the route to a tunnel's remote endpoint and the...

PT-2026-115786

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: refuse to make a monitor active when it has no queue A monitor interface only gets a TXQ if it's created active, and one can't be added later. Setting the flag on a down interface is still allowed, so the driver i...

PT-2026-106511

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the mac80211 wireless subsystem where a monitor interface may be activated without a transmit queue TXQ. This occurs because setting the active flag on a down interface i...

PT-2026-115713

In the Linux kernel, the following vulnerability has been resolved: net/sched: hhf: cap hh flows limit at change time hhf change stores TCA HHF HH FLOWS LIMIT with no upper bound. A huge hh flows limit lets each new heavy-hitter flow pass the hh flows current cnt check in alloc new hh and forces ...

PT-2026-106563

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/sched component where the hhf change function stores the TCA HHF HH FLOWS LIMIT attribute without an upper bound. An excessively large hh flows limit allows ne...

PT-2026-98674

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A denial of service occurs when the hhf change function accepts an arbitrary quantum value from userspace. If a quantum of 1 is provided alongside a crafted size table, the qdisc pkt len...

PT-2026-98766

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cls u32 classifier where the node ID pool can be exhausted. The function gen new kid fails to report an error when idr alloc u32 ranges are full, instead returning...

PT-2026-94422

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A signed overflow occurs in the fq pie init function when the default quantum is set using psched mtu without clamping. On devices with an exceptionally large Maximum Transmission Unit...

PT-2026-94420

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A signed overflow issue exists in the Stochastic Fairness Queueing sfq scheduler. When sfq init sets the q-quantum value using psched mtu, a device with an excessively large Maximum...

PT-2026-94423

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fq codel init function where the q-quantum and q-cparams.mtu values are set using psched mtu without proper clamping. When a device is configured with an excessive...

PT-2026-94406

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the network scheduler where the qdisc get stab function accepts a user-supplied size table. The qdisc calculate pkt len function can amplify the qdisc pkt len value...

PT-2026-94421

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs in the net/sched component when handling the quantum value. The hhf init function sets q-quantum using psched mtu without an overflow check. On devices with an...

PT-2026-94424

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fq init function where quantum and initial quantum are computed using psched mtu without overflow checks. When a device has an excessively large Maximum Transmissi...

PT-2026-94398

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Fair Queuing fq scheduler where the change path accepts TCA FQ QUANTUM and TCA FQ INITIAL QUANTUM values up to INT MAX. This allows a user with CAP NET ADMIN...