PT-2026-90133

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the afiucv hs rcv function where sockets are selected from the iucv sk list based solely on four 8-byte name fields in the transport header, without verifying the net...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004419)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004419 advisory. A missing CAPNETRAW check in NFC socket creation in net/nfc/rawsock.c in the Linux kernel before 5.8.2 could be used by local attackers to create raw sockets,...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003212)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003212 advisory. Linux kernel: heap out-of-bounds in AFPACKET sockets. This new issue is analogous to previously disclosed CVE-2016-8655. In both cases, a socket option that changes...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003129)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003129 advisory. Linux kernel: heap out-of-bounds in AFPACKET sockets. This new issue is analogous to previously disclosed CVE-2016-8655. In both cases, a socket option that changes...

Linux Distros Unpatched Vulnerability : CVE-2021-31523

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Debian xscreensaver 5.42+dfsg1-1 package for XScreenSaver has capnetraw enabled for the /usr/libexec/xscreensaver/sonar file, which allows local users to ga...

SUSE CVE-2016-8655

Race condition in net/packet/afpacket.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service use-after-free by leveraging the CAPNETRAW capability to change a socket version, related to the packetsetring and packetsetsockopt functions...

SUSE CVE-2021-31523

The Debian xscreensaver 5.42+dfsg1-1 package for XScreenSaver has capnetraw enabled for the /usr/libexec/xscreensaver/sonar file, which allows local users to gain privileges because this is arguably incompatible with the design of the Mesa 3D Graphics library dependency...

PT-2021-27362

Name of the Vulnerable Software and Affected Versions: aaa base affected versions not specified Description: The issue allows ping and ICMP commands without CAP NET RAW. This update also adds $HOME/.local/bin to PATH if it exists, fixes get kernel version.c to work with recent kernels on the s390...

PT-2021-27375

Name of the Vulnerable Software and Affected Versions: aaa base affected versions not specified Description: The issue allows ping and ICMP commands to be executed without the necessary CAP NET RAW capability. This could potentially lead to unauthorized access to network resources. Recommendation...

UBUNTU-CVE-2021-23134

Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAPNETRAW capability...

CVE-2021-31523

The Debian xscreensaver 5.42+dfsg1-1 package for XScreenSaver has capnetraw enabled for the /usr/libexec/xscreensaver/sonar file, which allows local users to gain privileges because this is arguably incompatible with the design of the Mesa 3D Graphics library dependency...

UBUNTU-CVE-2021-31523

The Debian xscreensaver 5.42+dfsg1-1 package for XScreenSaver has capnetraw enabled for the /usr/libexec/xscreensaver/sonar file, which allows local users to gain privileges because this is arguably incompatible with the design of the Mesa 3D Graphics library dependency...

PT-2021-19404

Name of the Vulnerable Software and Affected Versions Debian xscreensaver version 5.42+dfsg1-1 Description The issue arises from the Debian xscreensaver package having the cap net raw capability enabled for the /usr/libexec/xscreensaver/sonar file. This setting can be exploited by local users to...

The vulnerability of the CAP_NET_RAW component in software for automated deployment and application management in Docker-enabled environments allows a attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the CAPNETRAW component in software for automated deployment and management of applications in Docker-enabled environments is related to the lack of a mechanism for checking input data. Exploiting this vulnerability can allow an attacker operating remotely to access...

PT-2020-5185

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.8.2 Description The issue is related to a missing CAP NET RAW check in NFC socket creation in the Linux kernel. This could allow local attackers to create raw sockets, bypassing security mechanisms...

PT-2020-3631

Name of the Vulnerable Software and Affected Versions Docker Engine versions prior to 19.03.11 Description The issue is related to a lack of input validation in the CAP NET RAW component of Docker Engine, which can be exploited by a remote attacker to gain access to sensitive information,...

DEBIAN-CVE-2019-17055

basesockcreate in drivers/isdn/mISDN/socket.c in the AFISDN network module in the Linux kernel through 5.3.2 does not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21...

DEBIAN-CVE-2019-17052

ax25create in net/ax25/afax25.c in the AFAX25 network module in the Linux kernel 3.16 through 5.3.2 does not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-0614e2b73768...

UBUNTU-CVE-2019-17054

atalkcreate in net/appletalk/ddp.c in the AFAPPLETALK network module in the Linux kernel through 5.3.2 does not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-6cc03e8aa36c...

PT-2019-4750

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.3.2 Description The issue is related to the ieee802154 create function in the AF IEEE802154 network module, which does not enforce the CAP NET RAW capability. This means that unprivileged users can create a raw...