PT-2026-69527

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the Linux kernel when processing remote IPv6 packets routed through a configured ILA csum-adjust-transport route or receive-side mapping. The functi...

PT-2026-69736

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the bonding driver when the system boots with the ipv6.disable=1 parameter. In this configuration, devconf all is not initialized because inet6 init...

PT-2026-69520

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A TX hang can occur during packet transmission due to how the hardware parses protocol headers. The hardware parser expects additional data when processing incomplete IPv4, IPv6, TCP, or...

PT-2026-69722

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference occurs in the Reliable Datagram Sockets RDS implementation when the system is booted with the ipv6.disable=1 parameter. In this configuration, the inet6 addr lst is no...

Linux Distros Unpatched Vulnerability : CVE-2026-68322

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rds: Fix inet6addrlst NULL dereference when IPv6 is disabled When booting with the 'ipv6.disable=1' parameter, inet6addrlst is never initialized because...

[SECURITY] Fedora 43 Update: bird-3.3.2-1.fc43

BIRD is a dynamic IP routing daemon supporting both, IPv4 and IPv6, Border Gateway Protocol BGPv4, Routing Information Protocol RIPv2, RIPng, Open Shortest Path First protocol OSPFv2, OSPFv3, Babel Routing Protocol Babel, Bidirectional Forwarding Detection BFD, IPv6 router advertisements, static...

EulerOS 2.0 SP11 : kernel (EulerOS-SA-2026-3071)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : bridge: brndsend: linearize skb before parsing ND optionsCVE-2026-31682 media: mc, v4l2: serialize REINIT and REQBUFS with...

EulerOS 2.0 SP11 : kernel (EulerOS-SA-2026-3126)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : bridge: brndsend: linearize skb before parsing ND optionsCVE-2026-31682 media: mc, v4l2: serialize REINIT and REQBUFS with...

SUSE CVE-2026-70367

A Server-Side Request Forgery SSRF bypass vulnerability exists in "stunnel" 5.79 and lower when configured in SOCKS proxy mode. This flaw allows a client to bypass intended localhost restrictions by using IPv4-mapped IPv6 addresses e.g., "::ffff:127.0.0.1" or unspecified addresses "0.0.0.0", "::"...

SUSE SLES15 Security Update : nodejs24 (SUSE-SU-2026:3520-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3520-1 advisory. Update to 24.18.1. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF an...

RHEL 10 : kernel (RHSA-2026:51295)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:51295 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv6: ioam: fix heap buffer overflow ...

ALSA-2026:51295 Moderate: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv6: ioam: fix heap buffer overflow in ioam6filltracedata CVE-2026-43186 Bug Fixes and Enhancements: kernel panics caused by NULL pointer dereferences within octeonepvf almalinux-10.2.z...

The vulnerability of the xfrm6_get_saddr() function in the net/ipv6/xfrm6_policy.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xfrm6getsaddr function in the net/ipv6/xfrm6policy.c module of the Linux operating system’s IPv6 kernel implementation is related to the use of uninitialized variables. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrit...

MiracleLinux 9 : skopeo-1.22.2-7.el9_8 (AXSA:2026-1477:04)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1477:04 advisory. net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive...

AZL-94464 CVE-2026-64580 affecting package kernel for versions less than 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: xfrm6: clear dst.dev on error to avoid double netdevput in xfrm6filldst On the error path where in6devgetdev returns NULL, xfrm6filldst releases the device reference with netdevput but leaves xdst-u.dst.dev set. dstdestroy later...

[slackware-security] stunnel

New stunnel packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/stunnel-5.80-i586-1slack15.0.txz: Upgraded. This update fixes security issues: Fixed an out-of-bounds memory access triggered by...

EUVD-2026-39025

Ghost: Private IP filtering bypass to make server-side requests to internal services...

GHSA-WVP2-4QQP-4H3R Ghost: Private IP filtering bypass to make server-side requests to internal services

Impact When making an external request, it is possible to bypass the IP filter that ensures the request isn't going to an internal service using an IPv6 literal which maps to a private IPv4 address. Vulnerable versions This vulnerability is present in Ghost from v6.0.9 up to v6.21.0. Patches...

CVE-2026-18812 H3C NX15 esps esps.ipv6.wan command injection

A flaw has been found in H3C NX15 V100R017. The impacted element is the function esps.ipv6.wan of the file /api/esps. Executing a manipulation of the argument workMode can lead to command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The...

EUVD-2026-52898

A flaw has been found in H3C NX15 V100R017. The impacted element is the function esps.ipv6.wan of the file /api/esps. Executing a manipulation of the argument workMode can lead to command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The...