274 matches found
bandwhich
bandwhich Esta es una utilidad CLI para mostrar la utilizaciĆ³n actual de la red por proceso, conexiĆ³n y IP/hostname remoto. Tabla de contenidos bandwhich Table of contents Project status How does it work? Installation Downstream packaging status Download a prebuilt binary Building from source...
CVE-2026-89488
A flaw was found in the Linux kernel's Open vSwitch OVS component. An unprivileged user, operating from a user and network namespace, can trigger a use-after-free vulnerability during network namespace teardown. This occurs because packet processing attempts to use connection tracking CT limit...
CVE-2026-89488
CVE-2026-89488 is a slab-use-after-free in the Linux kernel's Open vSwitch (OVS) connection-tracking (CT) limit handling. Packet processing reads CT limit state under RCU , while network-namespace teardown frees it under ovs_mutex without a grace period, leaving a dangling pointer that packet pro...
CVE-2026-89488 openvswitch: Fix CT limit teardown use-after-free
In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fix CT limit teardown use-after-free Packet processing uses CT limit state under RCU, while netns teardown frees that state under ovsmutex. The CT limit pointer was neither removed from readers nor protected by a gra...
slipstream
NAT Slipstreaming NAT ę»ęµę»å» å č®øę»å»č čæēØč®æé®å害č NAT åę¹ ä»»ęē³»ē» äøēä»»ä½ TCP/UDP ęå”ļ¼åŖéå害č č®æé®äøäøŖē½ē«å³åÆē»čæå害č ē NAT/é²ē«å¢ļ¼čæēØä»»ęé²ē«å¢ē«Æå£ę§å¶ļ¼ć v1 å¼åč ļ¼@SamyKamkar // https://samy.pl v2 å¼åč ļ¼Samy Kamkar && Ben Seri && Gregory Vishnipolsky of Armisć é čÆ»Ben å Gregory å ³äŗ v2 ēä¼ē§ęęÆęē« ļ¼å ¶äøę·±å „ä»ē»äŗä»ä»¬åƹ v2 ēę“ę°ä»„å大éé¢å¤ē»čć v1 ååøę„ę ļ¼2020幓10ę31ę„ š» v2...
netsniff-ng
////////////////////////////////////////////////////////////////////////////// root@kitploit: netsniff-ng - the packet sniffing beast \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ . . netsniff-ng is a free, performant / Linux network analyzer and .' '. networking...
Astra Linux ā Vulnerability in Linux
In the Linux kernel, the following vulnerabilities have been resolved: netfilter: nftct: Skip the evaluation of expectations for confirmed conntrack entries. The nftctexpectobjeval function calls nfctextadd for an confirmed conntrack entry. However, nfctextadd can only be called when...
Astra Linux ā Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: fix ref leak when switching zones When switching zones or network namespaces without performing a ct clear in between, a reference to the old ct entry is still leaked. This occurs because tcfctskbnfctcached...
Astra Linux ā Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: CT: Fixed the null-ptr-deref in addruleerrflow In the error flow of mlx5tcctentryaddrule, if the ctruleadd callback returns an error, zonerule-attr is used without initialization. This issue was fixed by using attr,...
CVE-2026-72253
A flaw was found in the Linux kernel's Netfilter Session Initiation Protocol SIP connection tracking helper. This vulnerability occurs when network traffic control tc ingress or Open vSwitch openvswitch subsystems are active, and a specific media handling feature sipexternalmedia is enabled. The...
CVE-2026-72418
A flaw was found in the Linux kernel's netfilter connection tracking module. When a new network connection attempts to reuse a socket that is in a temporary waiting state after closing, the system incorrectly identifies it as an already confirmed connection. This misidentification causes the...
CVE-2026-72020
A flaw was found in the Linux kernel's IP Virtual Server IPVS component. When a new connection is created from a malformed synchronization message, certain TCP sequence number fields may not be properly initialized. This can lead to forwarded packets containing stale data in their TCP sequence an...
CVE-2026-74464
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix skb leak on flow key update failure during ct ovsctexecute always steals or frees the skb on failure while ovsflowkeyupdate does not. So, if it fails and we return right away, the skb ends up leaked. Fix tha...
CVE-2026-72418
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconncount: prevent connlimit drops for early confirmed ct Commit 69894e5b4c5e "netfilter: nftconnlimit: update the count if add was skipped" introduced a regression where packets for valid connections are dropped whe...
UBUNTU-CVE-2026-72418
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconncount: prevent connlimit drops for early confirmed ct Commit 69894e5b4c5e "netfilter: nftconnlimit: update the count if add was skipped" introduced a regression where packets for valid connections are dropped whe...
CVE-2026-72247
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconncount: fix zone comparison in tuple dedup The "already exists" dedup logic in nfconncountadd decides whether a connection has already been counted and can be skipped instead of incrementing the connlimit count. I...
CVE-2026-72418 netfilter: nf_conncount: prevent connlimit drops for early confirmed ct
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconncount: prevent connlimit drops for early confirmed ct Commit 69894e5b4c5e "netfilter: nftconnlimit: update the count if add was skipped" introduced a regression where packets for valid connections are dropped whe...
EUVD-2026-59317
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconncount: prevent connlimit drops for early confirmed ct Commit 69894e5b4c5e "netfilter: nftconnlimit: update the count if add was skipped" introduced a regression where packets for valid connections are dropped whe...
CVE-2026-72418 netfilter: nf_conncount: prevent connlimit drops for early confirmed ct
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconncount: prevent connlimit drops for early confirmed ct Commit 69894e5b4c5e "netfilter: nftconnlimit: update the count if add was skipped" introduced a regression where packets for valid connections are dropped whe...
CVE-2026-72247 netfilter: nf_conncount: fix zone comparison in tuple dedup
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconncount: fix zone comparison in tuple dedup The "already exists" dedup logic in nfconncountadd decides whether a connection has already been counted and can be skipped instead of incrementing the connlimit count. I...