PT-2026-36792

Name of the Vulnerable Software and Affected Versions GnuTLS affected versions not specified Description A heap buffer overflow exists in the DTLS handshake fragment reassembly logic. The issue occurs in the merge handshake packet function, where incoming handshake fragments are matched and merge...

PT-2026-5519

In the Linux kernel, the following vulnerability has been resolved: inet: frags: drop fraglist conntrack references Jakub added a warning in nf conntrack cleanup net list to make debugging leaked skbs/conntrack references more obvious. syzbot reports this as triggering, and I can also reproduce...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001525)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001525 advisory. The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000657)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000657 advisory. The ip6fragqueue function in net/ipv6/reassembly.c in the Linux kernel before 2.6.36 allows remote attackers to bypass intended network restrictions via overlapping...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002057)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002057 advisory. The ip6fragqueue function in net/ipv6/reassembly.c in the Linux kernel before 2.6.36 allows remote attackers to bypass intended network restrictions via overlapping...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003508)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003508 advisory. The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An...

AZL-74360 CVE-2025-68768 affecting package kernel for versions less than 6.6.143.1-1

In the Linux kernel, the following vulnerability has been resolved: inet: frags: flush pending skbs in fqdirpreexit We have been seeing occasional deadlocks on pernetopsrwsem since September in NIPA. The stuck task was usually modprobe often loading a driver like ipvlan, trying to take the lock a...

CVE-2025-66646

RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things IoT devices and other embedded devices. A vulnerability was discovered in the IPv6 fragmentation reassembly implementation of RIOT OS v2025.07. When receiving an fragmented IPv6 packe...

CVE-2025-66647

The CVE concerns RIOT OS IPv6 fragmentation reassembly in the gnrc_ipv6_ext_frag module. Copying the first fragment (offset=0) into the reassembly buffer lacks a size check, enabling an attacker to create a small buffer by sending a shorter initial fragment and potentially overflow other packet b...

CVE-2025-66647 RIOT OS has buffer overflow in gnrc_ipv6_ext_frag_reass

RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things IoT devices and other embedded devices. A vulnerability was discovered in the IPv6 fragmentation reassembly implementation of RIOT OS v2025.07. When copying the contents of the first...

EUVD-2025-203929

RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things IoT devices and other embedded devices. A vulnerability was discovered in the IPv6 fragmentation reassembly implementation of RIOT OS v2025.07. When receiving an fragmented IPv6 packe...

CVE-2025-66646 RIOT-OS has NULL pointer dereference in gnrc_ipv6_ext_frag_reass

RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things IoT devices and other embedded devices. A vulnerability was discovered in the IPv6 fragmentation reassembly implementation of RIOT OS v2025.07. When receiving an fragmented IPv6 packe...

EUVD-2020-18774

Malware in sbrugna...

EUVD-2018-18667

Malware in sbrugna...

EUVD-2020-9421

Malware in sbrugna...

EUVD-2015-6215

Malware in sbrugna...

EUVD-2019-15172

Malware in sbrugna...

CVE-2025-21484

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet...

CVE-2025-21484 Buffer Over-read in Data Network Stack & Connectivity

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a potential information disclosure during decoding and reassembling of fragments when the UE receives RTP packets...