Regular Expression Denial of Service (ReDoS)

Overview ip-address is an A library for parsing IPv4 and IPv6 IP addresses in node and the browser. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the Address6 constructor in src/ipv6.ts, where the REZONESTRING regular expression /%.$/ is applie...

CVE-2026-111997

A flaw was found in ip-address. A remote attacker can cause a Denial of Service DoS by providing specially crafted input containing excessive percent characters to an application parsing IPv6 addresses. When processed by the Address6 constructor, inefficient parsing logic leads to high CPU...

PT-2026-116789

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: keep room for the mac header in dst dev overhead The seg6, ioam6 and rpl lwtunnels size their skb cow head request as the length they are about to push plus dst dev overhead, then push the new headers and rebuild the m...

CVE-2026-98604: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ovpn: replace bind when learning local endpoint struct ovpnbind is published through peer-bind with RCU, but local endpoint learning updates bind-local in place under peer-lock. UDP TX reads the field without that lock. In...

PT-2026-116815

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix dst leak for uncached routes. ip6 route output flags, ip6 rt put flags, and ip6 dst check detect an uncached route by list empty&rt-dst.rt uncached, which replaced the static DST NOCACHE flag check in commit a4c2fd7f789...

PT-2026-116814

In the Linux kernel, the following vulnerability has been resolved: udp: remove a disconnected socket from the 4-tuple hash table A UDP socket bound to a specific address and port keeps its entry in the 4-tuple hash table after it is disconnected: sk binds to 127.0.0.1:21001 sk connects to...

PT-2026-117071

In the Linux kernel, the following vulnerability has been resolved: net: extend IPv6 exthdr detection of tunneled packets Commit c4336a07eb6b "net: correctly handle tunneled traffic on IPV6 CSUM GSO fallback" split skb gso has extension hdr into mutually exclusive branches on skb-encapsulation...

PT-2026-116823

In the Linux kernel, the following vulnerability has been resolved: ovpn: replace bind when learning local endpoint struct ovpn bind is published through peer-bind with RCU, but local endpoint learning updates bind-local in place under peer-lock. UDP TX reads the field without that lock. In...

CVE-2026-98852: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: extend IPv6 exthdr detection of tunneled packets Commit c4336a07eb6b "net: correctly handle tunneled traffic on IPV6CSUM GSO fallback" split skbgsohasextensionhdr into mutually exclusive branches on skb-encapsulation. This d...

CVE-2026-98497: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix swapped IPv6 IPsec policy masks IPv6 XFRM policies may use different source and destination prefix lengths. mlx5eipsecpolicymask builds the corresponding masks independently, but setupfteaddr6 installs each mask in...

PT-2026-116822

In the Linux kernel, the following vulnerability has been resolved: ovpn: replace bind when clearing stale local source The UDP output fallback clears bind-local in place when the remembered source address is no longer usable. The bind is RCU-published and read locklessly by concurrent TX, so an...

CVE-2026-112112: Improper Validation of Specified Quantity in Input

An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an established BGP peer to inject FlowSpec rules matching destinations outside the address space authorized by the unicast-route validation procedure. With validation enabled on the receiving flow6 channel, BIRD...

PT-2026-117165

Name of the Vulnerable Software and Affected Versions BIRD Internet Routing Daemon affected versions not specified Description An IPv6 FlowSpec validation bypass allows an established BGP peer to inject FlowSpec rules matching destinations outside the authorized address space. This occurs because...

PT-2026-116792

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix pull-bound underflow in skb checksum setup ipv6 skb maybe pull tail subtracts skb headlenskb from the unsigned max argument and passes the result to pskb pull tail as a signed int. The function does not ensure th...

PT-2026-116751

In the Linux kernel, the following vulnerability has been resolved: ipv6: do not let ipv6 find hdr return an offset past the packet end ipv6 find hdr walks the extension header chain, skipping each header by the length that header itself declares. ipv6 optlen returns up to 2048, and the skip is...

Linux Distros Unpatched Vulnerability : CVE-2026-98852

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: extend IPv6 exthdr detection of tunneled packets Commit c4336a07eb6b net: correctly handle tunneled traffic on IPV6CSUM GSO fallback split...

Linux Distros Unpatched Vulnerability : CVE-2026-98570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ipv6: keep room for the mac header in dstdevoverhead The seg6, ioam6 and rpl lwtunnels size their skbcowhead request as the length they are about to push...

Linux Distros Unpatched Vulnerability : CVE-2026-98598

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: Prevent rt6insertexception for dying fib6info. Before the cited commit, fib6nhflushexceptions always set from-exceptionbucketflushed = 1 under...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities stem from a race condition in IPv6’s cached routing processing: when listdelinit is executed concurrently, listempty is incorrectly evaluated as true. This leads to the incorrect invocation of dstholdsafe, and...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions from 6.12.81 to 6.12.113, from 6.18.22 to 6.18.56, from 6.1.168 to 6.2, from 6.6.134 to 6.7, from 6.19.12 to 6.20, and 7.0. The vulnerability stems from incomplete detection of IPv6 extension headers in tunneled data packets. The system...