Lucene search
+L

316 matches found

NVD
NVD
added 2026/09/11 2:17 p.m.2 views

CVE-2026-71416

Headroom compresses data before the data reaches a large language model. Prior to version 0.35.0, the Headroom WebSocket server does not validate the Origin header of incoming client WebSocket requests before forwarding the request to the upstream server, allowing malicious WebSocket clients to...

8.8CVSS
SaveExploits0References2
CVE
CVE
added 2026/09/11 1:34 p.m.12 views

CVE-2026-71416

Headroom is a WebSocket proxy that compresses data before it reaches a large language model. Prior to version 0.35.0 , its WebSocket server fails to validate the Origin header of incoming client WebSocket requests before forwarding them to the upstream server. This allows a Cross-Site WebSocket H...

8.8CVSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/11 1:34 p.m.7 views

CVE-2026-71416 Headroom vulnerable to Cross-Site WebSocket Hijacking (CSWSH)

Headroom compresses data before the data reaches a large language model. Prior to version 0.35.0, the Headroom WebSocket server does not validate the Origin header of incoming client WebSocket requests before forwarding the request to the upstream server, allowing malicious WebSocket clients to...

8.8CVSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/11 1:34 p.m.4 views

EUVD-2026-76105

Headroom compresses data before the data reaches a large language model. Prior to version 0.35.0, the Headroom WebSocket server does not validate the Origin header of incoming client WebSocket requests before forwarding the request to the upstream server, allowing malicious WebSocket clients to...

8.8CVSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.3 views

PT-2026-89869

Headroom compresses data before the data reaches a large language model. Prior to version 0.35.0, the Headroom WebSocket server does not validate the Origin header of incoming client WebSocket requests before forwarding the request to the upstream server, allowing malicious WebSocket clients to...

8.8CVSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/04 3:54 p.m.6 views

EUVD-2026-71275

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: ensure tx headroom in usbsdiotxprepareskb mt7925usbsdiotxprepareskb pushes a TX descriptor and a USB header onto every skb and assumes the headroom for them is already there. That holds for locally generated...

5.4AI score0.00168EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/04 3:54 p.m.18 views

CVE-2026-80825

CVE-2026-80825 affects the Linux kernel mt76 WiFi driver for mt7925 USB/SDIO devices (mt7925u). The function mt7925_usb_sdio_tx_prepare_skb() pushes a TX descriptor and USB header onto every skb, assuming sufficient headroom is already present. This assumption holds for locally generated traffic ...

5.4AI score0.00168EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2026/09/04 3:54 p.m.11 views

CVE-2026-80825

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: ensure tx headroom in usbsdiotxprepareskb mt7925usbsdiotxprepareskb pushes a TX descriptor and a USB header onto every skb and assumes the headroom for them is already there. That holds for locally generated...

5.9AI score0.00168EPSS
SaveExploits0
OSV
OSV
added 2026/09/04 3:54 p.m.10 views

CVE-2026-80825 wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: ensure tx headroom in usbsdiotxprepareskb mt7925usbsdiotxprepareskb pushes a TX descriptor and a USB header onto every skb and assumes the headroom for them is already there. That holds for locally generated...

5.7AI score
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2026/09/04 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-80825

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7925: ensure tx headroom in usbsdiotxprepareskb mt7925usbsdiotxprepareskb pushes a TX descriptor and a USB header onto every skb and assumes the...

6.4AI score0.00168EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.13 views

CVE-2026-80612

In the Linux kernel, the following vulnerability has been resolved: net: lwtunnel: Drop skb metadata before LWT encapsulation skb metadata is meant for passing information between XDP and TC. It lives in the skb headroom, immediately before skb-data. LWT programs cannot access the skbuff-datameta...

9.8CVSS5.8AI score0.00379EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/28 6:48 a.m.37 views

EUVD-2026-67488

In the Linux kernel, the following vulnerability has been resolved: net: lwtunnel: Drop skb metadata before LWT encapsulation skb metadata is meant for passing information between XDP and TC. It lives in the skb headroom, immediately before skb-data. LWT programs cannot access the skbuff-datameta...

5.8AI score0.00379EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/28 12:00 a.m.15 views

PT-2026-82912

In the Linux kernel, the following vulnerability has been resolved: net: lwtunnel: Drop skb metadata before LWT encapsulation skb metadata is meant for passing information between XDP and TC. It lives in the skb headroom, immediately before skb-data. LWT programs cannot access the sk buff-data me...

5.8AI score0.00379EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/08/27 7:04 a.m.7 views

CVE-2026-74743

A flaw was found in the Linux kernel's macvlan component. The macvlan component incorrectly initializes network packet buffer skb headroom and tailroom values, failing to inherit them from the underlying network device. This can occur when the underlying device requires additional space for heade...

9.8CVSS5.5AI score0.00519EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/27 6:49 a.m.6 views

CVE-2026-74744

A flaw was found in the Linux kernel's ipvlan component. The ipvlan devices do not properly inherit neededheadroom and neededtailroom from the physical device phydev. This can lead to insufficient space being reserved for packet headers and trailers, potentially causing memory corruption, such as...

9.8CVSS4.9AI score0.00519EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/27 6:31 a.m.8 views

EUVD-2026-66573

In the Linux kernel, the following vulnerability has been resolved: macvlan: inherit neededheadroom and neededtailroom from lowerdev macvlan devices inherit hardheaderlen from lowerdev during macvlaninit, but leave neededheadroom and neededtailroom set to 0. When the underlying lowerdev requires...

9.8CVSS5.4AI score0.00519EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/08/27 6:31 a.m.8 views

EUVD-2026-66574

In the Linux kernel, the following vulnerability has been resolved: ipvlan: inherit neededheadroom and neededtailroom from phydev ipvlan devices inherit hardheaderlen from phydev during ipvlaninit, but leave neededheadroom and neededtailroom set to 0. When the underlying phydev or stacked lower...

9.8CVSS5.4AI score0.00519EPSS
SaveExploits0References7
OSV
OSV
added 2026/08/26 3:16 p.m.8 views

AZL-97782 CVE-2026-74743 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: macvlan: inherit neededheadroom and neededtailroom from lowerdev macvlan devices inherit hardheaderlen from lowerdev during macvlaninit, but leave neededheadroom and neededtailroom set to 0. When the underlying lowerdev requires...

9.8CVSS5.8AI score0.00519EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/26 3:16 p.m.9 views

AZL-97799 CVE-2026-74744 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ipvlan: inherit neededheadroom and neededtailroom from phydev ipvlan devices inherit hardheaderlen from phydev during ipvlaninit, but leave neededheadroom and neededtailroom set to 0. When the underlying phydev or stacked lower...

9.8CVSS5.8AI score0.00519EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/26 3:16 p.m.12 views

CVE-2026-74743

In the Linux kernel, the following vulnerability has been resolved: macvlan: inherit neededheadroom and neededtailroom from lowerdev macvlan devices inherit hardheaderlen from lowerdev during macvlaninit, but leave neededheadroom and neededtailroom set to 0. When the underlying lowerdev requires...

9.8CVSS0.00519EPSS
SaveExploits0References6
Rows per page
Query Builder