CVE-2022-34718-PoC

Esempio di exploit per CVE-2022-34718 IPv6 Remote Code Execution Questo repository contiene un exploit di CVE-2022-34718, una vulnerabilità di Remote Code Execution RCE in IPv6 sui sistemi Windows. Come fare Poiché la vulnerabilità richiede pacchetti IPv6 appositamente costruiti, dipende dal modu...

ipv6_frag_escape

IPV6FRAGESCAPE — Sito di monitoraggio della fuga dai container tramite frammentazione IPv6 in Linux Sorgente del tracker dello stato delle patch IPV6FRAGESCAPE : un sito a pagina singola che registra quali distribuzioni hanno rilasciato una correzione per la fuga dai container tramite...

ipv6_frag_escape

IPV6FRAGESCAPE Ein zuverlässiger Proof-of-Concept für einen nicht-privilegierten Container-/Jail-Escape für CentOS / RHEL 10. Es reitet einen mittlerweile behobenen IPv6-Fragmentierungsfehler in ip6appenddata upstream geschlossen durch 38becddc, keine CVE, einen linearen In-Slab-Überlauf in den...

CVE-2026-72250

A flaw was found in the Linux kernel's nfconntrackreasm module, specifically within the IPv6 defragmentation process. An attacker could exploit this by sending specially crafted IPv6 fragmented packets. The nfctfrag6reasm function incorrectly adjusts the macheader offset, causing the system to...

CVE-2026-72250 netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackreasm: guard macheader adjustment after IPv6 defrag nfctfrag6reasm slides the packet head forward to drop the IPv6 fragment header and then unconditionally advances skb-macheader: skb-macheader += sizeofstru...

CVE-2026-68120 rtase: Workaround for TX hang caused by hardware packet parsing

In the Linux kernel, the following vulnerability has been resolved: rtase: Workaround for TX hang caused by hardware packet parsing The hardware performs packet parsing before packet transmission. Parsing incomplete IPv4, IPv6, TCP, or UDP headers may trigger a TX hang because the hardware parser...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ipv6: Proper accounting of fraggap on the paged allocation path In ip6.AppendData, when the paged-allocation branch is taken MSGMORE / NETIFFSG / large fraglen, alloclen and pagedlen are computed as follows: alloclen =...

SUSE CVE-2026-64554

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: fix stale prevhdr pointer in brip6fragment brip6fragment gets prevhdr, a pointer into the skb head, from ip6find1stfragopt, then calls skbchecksumhelp. For a cloned skb skbchecksumhelp reallocates the head via...

Linux Distros Unpatched Vulnerability : CVE-2026-64554

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: bridge: fix stale prevhdr pointer in brip6fragment brip6fragment gets prevhdr, a pointer into the skb head, from ip6find1stfragopt, then calls...

Important: Red Hat Security Advisory: kpatch-patch-6_12_0-211_16_1 security update

An update for kpatch-patch-6120-211161 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: kernel-livepatch-6.12.88-119.160

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path CVE-2026-53362 Affected Packages: kernel-livepatch-6.12.88-119.160 Issue Correction: Please ensure you have live patching enabled. Run dnf update...

Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-1936)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1936 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path CVE-2026-53362 In the Linux kernel, the following vulnerability has...

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path CVE-2026-53362 In the Linux kernel, the following vulnerability has been resolved: ipv4: account for fraggap on the paged allocation path CVE-2026-53366...

CVE-2026-53362

In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In ip6appenddata, when the paged-allocation branch is taken MSGMORE / NETIFFSG / large fraglen, alloclen and pagedlen are computed as alloclen = fragheaderlen + transhdrlen;...

CVE-2026-53362 ipv6: account for fraggap on the paged allocation path

In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In ip6appenddata, when the paged-allocation branch is taken MSGMORE / NETIFFSG / large fraglen, alloclen and pagedlen are computed as alloclen = fragheaderlen + transhdrlen;...

CVE-2026-13351

Zephyr's IPv6 network stack can be prevented from receiving or processing future incoming packets by sending a small number of maliciously fragmented IPv6 packets. When such a packet is handled by the fragment-header processing path, the associated RX network packet buffer allocated from a memory...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001632)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001632 advisory. The IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not consider that the nexthdr field may be associated with an invalid option, which...

MiracleLinux 3 : kernel-2.6.18-371.5.AXS3 (AXSA:2014-508:03)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-508:03 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating...

MiracleLinux 4 : kernel-2.6.32-696.20.1.el6 (AXSA:2018-2579:02)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-2579:02 advisory. An integer overflow vulnerability in ip6find1stfragopt function was found. A local attacker that has privileges of CAPNETRAW to open raw socket can...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002387)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002387 advisory. The ip6fragqueue function in net/ipv6/reassembly.c in the Linux kernel before 2.6.36 allows remote attackers to bypass intended network restrictions via overlapping...