100 matches found
CVE-2026-72249
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: use dst in this direction when pushing IPIP header When pushing the IPIP header, the route of the other direction is used to calculate the headroom, use the route in this direction. Accessing the other tuple...
CVE-2026-72248
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: support IPIP tunnel with direct xmit The combination of IPIP tunnel with direct xmit, eg. bridge device, breaks because no dstentry is provided to check the skb headroom and to set the iph-fragoff field. Thi...
CVE-2026-72053
In the Linux kernel, the following vulnerability has been resolved: net: ipip: require CAPNETADMIN in the device netns for changelink ipipchangelink operates on at most two netns, devnetdev and the tunnel link netns t-net. They differ once the device is created in or moved to a netns other than t...
CVE-2026-72417
The CVE affects the Linux kernel netfilter flowtable implementation (nf_flow_ip4_tunnel_proto) in the IPv4 tunneling path. Root cause: missing validation of iph->ihl can lead to out-of-bounds header size calculations for malformed IP headers. The fix adds a sanity check on iph->ihl and, add...
CVE-2026-72249 netfilter: flowtable: use dst in this direction when pushing IPIP header
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: use dst in this direction when pushing IPIP header When pushing the IPIP header, the route of the other direction is used to calculate the headroom, use the route in this direction. Accessing the other tuple...
CVE-2026-72249
CVE-2026-72249 affects the Linux kernel netfilter flowtable when pushing IPIP headers. The root cause is using the reverse direction’s route (dst) to calculate headroom, instead of the route for the current direction, causing incorrect headroom calculation and affecting iph->frag_off. The bug ...
EUVD-2026-59148
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: use dst in this direction when pushing IPIP header When pushing the IPIP header, the route of the other direction is used to calculate the headroom, use the route in this direction. Accessing the other tuple...
CVE-2026-72248
CVE-2026-72248 pertains to the Linux kernel netfilter flowtable, addressing an IPIP tunnel with direct xmit scenario. The vulnerability arises when an IPIP tunnel with direct xmit (e.g., bridge device) lacks a dst_entry to validate skb headroom and set iph->frag_off, leading to invalid dst usa...
CVE-2026-72248 netfilter: flowtable: support IPIP tunnel with direct xmit
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: support IPIP tunnel with direct xmit The combination of IPIP tunnel with direct xmit, eg. bridge device, breaks because no dstentry is provided to check the skb headroom and to set the iph-fragoff field. Thi...
EUVD-2026-59147
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: support IPIP tunnel with direct xmit The combination of IPIP tunnel with direct xmit, eg. bridge device, breaks because no dstentry is provided to check the skb headroom and to set the iph-fragoff field. Thi...
CVE-2026-72248 netfilter: flowtable: support IPIP tunnel with direct xmit
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: support IPIP tunnel with direct xmit The combination of IPIP tunnel with direct xmit, eg. bridge device, breaks because no dstentry is provided to check the skb headroom and to set the iph-fragoff field. Thi...
CVE-2026-72053
CVE-2026-72053 affects the Linux kernel net/ipip subsystem. The vulnerability arises because ipip_changelink() validates CAP_NET_ADMIN only in the device’s netns (dev_net(dev)) and not in the tunnel’s netns (t->net). A caller with privileges in the device netns but not in the tunnel netns coul...
CVE-2026-72053 net: ipip: require CAP_NET_ADMIN in the device netns for changelink
In the Linux kernel, the following vulnerability has been resolved: net: ipip: require CAPNETADMIN in the device netns for changelink ipipchangelink operates on at most two netns, devnetdev and the tunnel link netns t-net. They differ once the device is created in or moved to a netns other than t...
EUVD-2026-59011
In the Linux kernel, the following vulnerability has been resolved: net: ipip: require CAPNETADMIN in the device netns for changelink ipipchangelink operates on at most two netns, devnetdev and the tunnel link netns t-net. They differ once the device is created in or moved to a netns other than t...
PT-2026-72242
In the Linux kernel, the following vulnerability has been resolved: net: ipip: require CAP NET ADMIN in the device netns for changelink ipip changelink operates on at most two netns, dev netdev and the tunnel link netns t-net. They differ once the device is created in or moved to a netns other th...
PT-2026-72436
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: support IPIP tunnel with direct xmit The combination of IPIP tunnel with direct xmit, eg. bridge device, breaks because no dst entry is provided to check the skb headroom and to set the iph-frag off field...
PT-2026-72437
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: use dst in this direction when pushing IPIP header When pushing the IPIP header, the route of the other direction is used to calculate the headroom, use the route in this direction. Accessing the other tuple...
SUSE CVE-2026-64410
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: IPIP tunnel hardware offload is not yet support No driver supports for IPIP tunnels yet, give up early on setting up the hardware offload for this scenario. This patch adds a stub that can be enhanced to add...
CVE-2026-64410
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: IPIP tunnel hardware offload is not yet support No driver supports for IPIP tunnels yet, give up early on setting up the hardware offload for this scenario. This patch adds a stub that can be enhanced to add...
UBUNTU-CVE-2026-64410
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: IPIP tunnel hardware offload is not yet support No driver supports for IPIP tunnels yet, give up early on setting up the hardware offload for this scenario. This patch adds a stub that can be enhanced to add...