Lucene search
K

12 matches found

SUSE CVE
SUSE CVE
added 2026/02/05 12:24 a.m.2 views

SUSE CVE-2026-23095

In the Linux kernel, the following vulnerability has been resolved: gue: Fix skb memleak with inner IP protocol 0. syzbot reported skb memleak below. 0 The repro generated a GUE packet with its inner protocol 0. gueudprecv returns -guehdr-protoctype for "resubmit" in ipprotocoldeliverrcu, but thi...

5.5CVSS5.2AI score0.00036EPSS
Exploits0References20
NVD
NVD
added 2026/02/04 5:16 p.m.2 views

CVE-2026-23095

In the Linux kernel, the following vulnerability has been resolved: gue: Fix skb memleak with inner IP protocol 0. syzbot reported skb memleak below. 0 The repro generated a GUE packet with its inner protocol 0. gueudprecv returns -guehdr-protoctype for "resubmit" in ipprotocoldeliverrcu, but thi...

7.5CVSS0.00036EPSS
Exploits0References7
OSV
OSV
added 2026/02/04 5:16 p.m.0 views

UBUNTU-CVE-2026-23095

In the Linux kernel, the following vulnerability has been resolved: gue: Fix skb memleak with inner IP protocol 0. syzbot reported skb memleak below. 0 The repro generated a GUE packet with its inner protocol 0. gueudprecv returns -guehdr-protoctype for "resubmit" in ipprotocoldeliverrcu, but thi...

7.5CVSS5.7AI score0.00036EPSS
Exploits0References26
EUVD
EUVD
added 2026/02/04 4:8 p.m.1 views

EUVD-2026-5447

In the Linux kernel, the following vulnerability has been resolved: gue: Fix skb memleak with inner IP protocol 0. syzbot reported skb memleak below. 0 The repro generated a GUE packet with its inner protocol 0. gueudprecv returns -guehdr-protoctype for "resubmit" in ipprotocoldeliverrcu, but thi...

5.2AI score0.00036EPSS
Exploits0References4
CVE
CVE
added 2026/02/04 4:8 p.m.6 views

CVE-2026-23095

CVE-2026-23095 affects the Linux kernel Gue (GUE) path. It describes a skb memory leak when inner IP protocol is 0, triggered by a GUE repro. The issue arises because gue_udp_recv() may propagate a zero protocol, causing a memory leak; the fix drops such packets. The description notes that 0 is a...

7.5CVSS5.2AI score0.00036EPSS
Exploits0References7Affected Software1
Cvelist
Cvelist
added 2026/02/04 4:8 p.m.22 views

CVE-2026-23095 gue: Fix skb memleak with inner IP protocol 0.

In the Linux kernel, the following vulnerability has been resolved: gue: Fix skb memleak with inner IP protocol 0. syzbot reported skb memleak below. 0 The repro generated a GUE packet with its inner protocol 0. gueudprecv returns -guehdr-protoctype for "resubmit" in ipprotocoldeliverrcu, but thi...

7.5CVSS0.00036EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.3 views

PT-2026-6165

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel’s GUE Generic UDP Encapsulation protocol handler contains a memory leak when processing packets with an inner IP protocol of 0. The issue occurs because gue udp recv...

7.5CVSS5.5AI score0.00036EPSS
Exploits0
NVD
NVD
added 2025/02/05 6:15 p.m.11 views

CVE-2024-7596

Proposed Generic UDP Encapsulation GUE IETF Draft do not validate or verify the source of a network packet allowing an attacker to spoof and route arbitrary traffic via an exposed network interface that can lead to spoofing, access control bypass, and other unexpected network behaviors. This can ...

6.5CVSS0.0002EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/02/05 5:37 p.m.16 views

CVE-2024-7596 Generic UDP Encapsulation (GUE) (IETF Draft) do not validate or verify the source of a network packet

Proposed Generic UDP Encapsulation GUE IETF Draft do not validate or verify the source of a network packet allowing an attacker to spoof and route arbitrary traffic via an exposed network interface that can lead to spoofing, access control bypass, and other unexpected network behaviors. This can ...

0.0002EPSS
Exploits0References2
CVE
CVE
added 2025/02/05 5:37 p.m.69 views

CVE-2024-7596

CVE-2024-7596 / CVE-2025-23018 (and related CVEs) involve tunneling protocols that do not validate the source of a network packet. Specifically: The GRE/GRE6 (CVE-2024-7595) and Propose d Generic UDP Encapsulation (GUE) (CVE-2024-7596) cases describe lack of source verification in encapsulated tr...

6.5CVSS6.5AI score0.0002EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/02/05 5:37 p.m.10 views

CVE-2024-7596 Generic UDP Encapsulation (GUE) (IETF Draft) do not validate or verify the source of a network packet

Proposed Generic UDP Encapsulation GUE IETF Draft do not validate or verify the source of a network packet allowing an attacker to spoof and route arbitrary traffic via an exposed network interface that can lead to spoofing, access control bypass, and other unexpected network behaviors. This can ...

6.5AI score0.0002EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2025/01/18 4:5 a.m.1 views

SUSE CVE-2024-7596

Proposed Generic UDP Encapsulation GUE IETF Draft do not validate or verify the source of a network packet allowing an attacker to spoof and route arbitrary traffic via an exposed network interface that can lead to spoofing, access control bypass, and other unexpected network behaviors. This can ...

6.5CVSS7AI score0.0002EPSS
Exploits0References3
Rows per page
Query Builder