CVE-2026-33792

A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to execute code as root or cause a denial of service via a crafted packet received on a configured GRE tunnel...

CVE-2026-33792

A Stack-based Buffer Overflow vulnerability exists in the srxpfe process of Juniper Networks Junos OS running on SRX Series devices. An unauthenticated network attacker can exploit this by sending a crafted packet received on a configured GRE tunnel . Successful exploitation could allow the attac...

EUVD-2026-101402

A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to execute code as root or cause a denial of service via a crafted packet received on a configured GRE tunnel...

CVE-2026-33792 Junos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured

A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to execute code as root or cause a denial of service via a crafted packet received on a configured GRE tunnel...

PT-2026-90279

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the ip6 tnl xmit function where the use of skb realloc headroom to expand headroom for outer IPv6 and optional encap headers can lead to a use-after-free scenario. The...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098960)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098960 advisory. In the Linux kernel, the following vulnerability has been resolved: bonding: fix type confusion in bondsetupbyslave kernel BUG at net/core/skbuff.c:2306! Oops: inval...

CVE-2026-68296

A flaw was found in the Linux kernel's Generic Routing Encapsulation GRE tunnel implementation. An issue with how lockless transmission was handled for GRE tunnels with Sequence Number SEQ or Checksum CSUM features could lead to a deadlock. This deadlock occurs when the GRE transmit function...

Linux Distros Unpatched Vulnerability : CVE-2026-68296

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM Before commit 00d066a4d4ed...

CVE-2026-68296

In the Linux kernel, the following vulnerability has been resolved: net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM Before commit 00d066a4d4ed "netdevfeatures: convert NETIFFLLTX to dev-lltx", NETIFFLLTX was set unconditionally in both gretunnelinit and ip6gretnlinitfeatures alongside...

UBUNTU-CVE-2026-68296

In the Linux kernel, the following vulnerability has been resolved: net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM Before commit 00d066a4d4ed "netdevfeatures: convert NETIFFLLTX to dev-lltx", NETIFFLLTX was set unconditionally in both gretunnelinit and ip6gretnlinitfeatures alongside...

CVE-2026-68296 net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM

In the Linux kernel, the following vulnerability has been resolved: net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM Before commit 00d066a4d4ed "netdevfeatures: convert NETIFFLLTX to dev-lltx", NETIFFLLTX was set unconditionally in both gretunnelinit and ip6gretnlinitfeatures alongside...

CVE-2026-68296

CVE-2026-68296 refers to a Linux kernel issue where GRE/GRETAP/ip6gre tunnels with SEQ/CSUM could lose lockless TX due to a regression in NETIF_F_LLTX handling. The root cause was that after the 00d066a4d4ed commit, dev->lltx was assigned after the early returns, breaking the unconditional TX ...

CVE-2026-68296 net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM

In the Linux kernel, the following vulnerability has been resolved: net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM Before commit 00d066a4d4ed "netdevfeatures: convert NETIFFLLTX to dev-lltx", NETIFFLLTX was set unconditionally in both gretunnelinit and ip6gretnlinitfeatures alongside...

EUVD-2026-55397

In the Linux kernel, the following vulnerability has been resolved: net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM Before commit 00d066a4d4ed "netdevfeatures: convert NETIFFLLTX to dev-lltx", NETIFFLLTX was set unconditionally in both gretunnelinit and ip6gretnlinitfeatures alongside...

PT-2026-69696

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A regression in the GRE tunnel implementation occurs when NETIF F LLTX is converted to the dev-lltx flag. In the functions gre tunnel init and ip6gre tnl init features, the assignment of...

CVE-2026-68296: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM Before commit 00d066a4d4ed "netdevfeatures: convert NETIFFLLTX to dev-lltx", NETIFFLLTX was set unconditionally in both gretunnelinit and ip6gretnlinitfeatures alongside...

SUSE-SU-2026:22866-1 Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues The following security issues were fixed: - CVE-2026-46120: ip6gre: Use cached t-net in ip6erspanchangelink bsc1267893. - CVE-2026-46173: exit: prevent preemption of oopsing TASKDEAD task bsc1267723....

CVE-2026-7473: Incomplete Comparison with Missing Factors

On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN Virtual Extensible LAN, decap-groups, or a GRE Generic Routing Encapsulation tunnel interface—is present, the switch will incorrectly decapsulate and forward other unexpected tunneled packet with a...

CVE-2026-46120 ip6_gre: Use cached t->net in ip6erspan_changelink().

In the Linux kernel, the following vulnerability has been resolved: ip6gre: Use cached t-net in ip6erspanchangelink. After commit 5e72ce3e3980 "net: ipv6: Use link netns in newlink of rtnllinkops", ip6erspannewlink correctly resolves the per-netns ip6gre hash via linknet. ip6erspanchangelink was...

AZL-86169 CVE-2026-43456 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: bonding: fix type confusion in bondsetupbyslave kernel BUG at net/core/skbuff.c:2306! Oops: invalid opcode: 0000 1 SMP KASAN NOPTI RIP: 0010:pskbexpandhead+0xa08/0xfe0 net/core/skbuff.c:2306 RSP: 0018:ffffc90004aff760 EFLAGS:...