EUVD-2026-66577

In the Linux kernel, the following vulnerability has been resolved: ipvs: revalidate ihl to prevent out-of-bounds access While the outer IP header is already pulled into the skb head, we must be careful and revalidate the embedded headers after reading them from the skb frags to prevent...

CVE-2026-74747

CVE-2026-74747 affects the Linux kernel in the ipvs (IP Virtual Server) subsystem, specifically in ip_vs_nat_icmp() . After reading embedded IP headers from skb frags, the ihl field is not revalidated; a local process can modify it so that after skb_ensure_writable() a larger value is visible, ca...

PT-2026-82127

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ipvs module where the system fails to revalidate embedded headers after reading them from the skb frags. A local process can modify the ihl field, which, following...

CVE-2026-74724

This vulnerability affects the Linux kernel's IPVS (IP Virtual Server) component, specifically the ip_vs_nat_icmp function. A local attacker with low privileges can modify a packet while it is being processed by IPVS. The root cause is that the IP IHL (Internet Header Length) field is read multip...

CVE-2026-74724 ipvs: avoid out-of-bounds write in ip_vs_nat_icmp

In the Linux kernel, the following vulnerability has been resolved: ipvs: avoid out-of-bounds write in ipvsnaticmp Sashiko warns that local attacker can modify the packet while it is processed by IPVS. Some places read the IP ihl field multiple times which can cause out-of-bounds access. One such...

EUVD-2026-64411

In the Linux kernel, the following vulnerability has been resolved: ipvs: avoid out-of-bounds write in ipvsnaticmp Sashiko warns that local attacker can modify the packet while it is processed by IPVS. Some places read the IP ihl field multiple times which can cause out-of-bounds access. One such...

CVE-2026-74724 ipvs: avoid out-of-bounds write in ip_vs_nat_icmp

In the Linux kernel, the following vulnerability has been resolved: ipvs: avoid out-of-bounds write in ipvsnaticmp Sashiko warns that local attacker can modify the packet while it is processed by IPVS. Some places read the IP ihl field multiple times which can cause out-of-bounds access. One such...

PT-2026-79729

In the Linux kernel, the following vulnerability has been resolved: ipvs: avoid out-of-bounds write in ip vs nat icmp Sashiko warns that local attacker can modify the packet while it is processed by IPVS. Some places read the IP ihl field multiple times which can cause out-of-bounds access. One...

Linux Distros Unpatched Vulnerability : CVE-2026-74724

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvs: avoid out-of-bounds write in ipvsnaticmp Sashiko warns that local attacker can modify the packet while it is processed by IPVS. Some places read the IP ih...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000734)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000734 advisory. The skbflowdissect function in net/core/flowdissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denial of service infinite loop via a sma...

EUVD-2013-4232

Malware in sbrugna...

Oracle Linux 6 : unbreakable enterprise kernel (ELSA-2014-3046)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3046 advisory. - l2tp: fix an unprivileged user to kernel privilege escalation Sasha Levin Orabug: 19229497 CVE-2014-4943 CVE-2014-4943 - ptrace,x86: force IRET path...

Medium: kernel

Issue Overview: The Linux kernel before 3.12, when UDP Fragmentation Offload UFO is enabled, does not properly initialize certain data structures, which allows local users to cause a denial of service memory corruption and system crash or possibly gain privileges via a crafted application that us...

CVE-2013-4348

The skbflowdissect function in net/core/flowdissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denial of service infinite loop via a small value in the IHL field of a packet with IPIP encapsulation...

CVE-2013-4348

The skbflowdissect function in net/core/flowdissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denial of service infinite loop via a small value in the IHL field of a packet with IPIP encapsulation...