40 matches found
UBUNTU-CVE-2026-72351
In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE private flags can indicate that remote checksum offload metadata is present. The private flags field itself is accounted for by guehdrflagslen, but guehdrprivflagslen currently...
CVE-2026-72351 gue: validate REMCSUM private option length
In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE private flags can indicate that remote checksum offload metadata is present. The private flags field itself is accounted for by guehdrflagslen, but guehdrprivflagslen currently...
EUVD-2026-59250
In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE private flags can indicate that remote checksum offload metadata is present. The private flags field itself is accounted for by guehdrflagslen, but guehdrprivflagslen currently...
CVE-2026-72351
CVE-2026-72351 : In the Linux kernel, the vulnerability concerns GUE private flags indicating REMCSUM metadata. The root cause is that guehdr_priv_flags_len() returns 0 when GUE_PFLAG_REMCSUM is set, allowing a packet with only the private flags field to pass validate_gue_flags(). Consequently, g...
CVE-2026-72351 gue: validate REMCSUM private option length
In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE private flags can indicate that remote checksum offload metadata is present. The private flags field itself is accounted for by guehdrflagslen, but guehdrprivflagslen currently...
PT-2026-72539
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Generic UDP Encapsulation GUE implementation where the guehdr priv flags len function returns 0 even when the GUE PFLAG REMCSUM flag is set. This allows packets...
CVE-2026-72351: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE private flags can indicate that remote checksum offload metadata is present. The private flags field itself is accounted for by guehdrflagslen, but guehdrprivflagslen currently...
AZL-77136 CVE-2026-23095 affecting package kernel for versions less than 6.6.126.1-1
In the Linux kernel, the following vulnerability has been resolved: gue: Fix skb memleak with inner IP protocol 0. syzbot reported skb memleak below. 0 The repro generated a GUE packet with its inner protocol 0. gueudprecv returns -guehdr-protoctype for "resubmit" in ipprotocoldeliverrcu, but thi...
CVE-2026-23095
In the Linux kernel, the following vulnerability has been resolved: gue: Fix skb memleak with inner IP protocol 0. syzbot reported skb memleak below. 0 The repro generated a GUE packet with its inner protocol 0. gueudprecv returns -guehdr-protoctype for "resubmit" in ipprotocoldeliverrcu, but thi...
CVE-2026-23095 gue: Fix skb memleak with inner IP protocol 0.
In the Linux kernel, the following vulnerability has been resolved: gue: Fix skb memleak with inner IP protocol 0. syzbot reported skb memleak below. 0 The repro generated a GUE packet with its inner protocol 0. gueudprecv returns -guehdr-protoctype for "resubmit" in ipprotocoldeliverrcu, but thi...
CVE-2026-23095 gue: Fix skb memleak with inner IP protocol 0.
In the Linux kernel, the following vulnerability has been resolved: gue: Fix skb memleak with inner IP protocol 0. syzbot reported skb memleak below. 0 The repro generated a GUE packet with its inner protocol 0. gueudprecv returns -guehdr-protoctype for "resubmit" in ipprotocoldeliverrcu, but thi...
CVE-2026-23095: Missing Release of Memory after Effective Lifetime
In the Linux kernel, the following vulnerability has been resolved: gue: Fix skb memleak with inner IP protocol 0. syzbot reported skb memleak below. 0 The repro generated a GUE packet with its inner protocol 0. gueudprecv returns -guehdr-protoctype for "resubmit" in ipprotocoldeliverrcu, but thi...
Linux Distros Unpatched Vulnerability : CVE-2026-23095
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gue: Fix skb memleak with inner IP protocol 0. syzbot reported skb memleak below. 0 The repro generated a GUE packet with its inner protocol 0. gueudprecv retur...
Malicious code in @zalastax/nolb-_gue (npm)
The package @zalastax/nolb-gue was found to contain malicious code...
MAL-2025-10056 Malicious code in @zalastax/nolb-_gue (npm)
The package @zalastax/nolb-gue was found to contain malicious code...
CVE-2024-7596: Undefined Security Weakness
Proposed Generic UDP Encapsulation GUE IETF Draft do not validate or verify the source of a network packet allowing an attacker to spoof and route arbitrary traffic via an exposed network interface that can lead to spoofing, access control bypass, and other unexpected network behaviors. This can ...
DEBIAN-CVE-2024-44940
In the Linux kernel, the following vulnerability has been resolved: fou: remove warn in guegroreceive on unsupported protocol Drop the WARNONONCE inn guegroreceive if the encapsulated type is not known or does not have a GRO handler. Such a packet is easily constructed. Syzbot generates them and...
PT-2024-7193
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the function gue gro receive in the Linux kernel, which has a problem with incorrect input validation. This can potentially impact the confidentiality, integrity,...
gue-seattle.org Cross Site Scripting vulnerability OBB-3903753
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Unfixed XSS vulnerability at www.gue-ngl.org
Security researcher RubberDuck, has submitted on 21/02/2007 a cross-site-scripting XSS vulnerability affecting www.gue-ngl.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/02/2007. It is currently...