Lucene search
K

139 matches found

CVE
CVE
added 2026/06/18 7:29 p.m.19 views

CVE-2026-56099

OpenBSD before commit 6a23123 (2026-06-18) contains an out-of-bounds read in sys/netmpls/mpls_input.c:mpls_do_error, allowing remote disclosure of kernel stack memory by crafting MPLS frames with 16 labels and no Bottom-of-Stack bit. Affected component is the MPLS input handling path; root cause ...

6.9CVSS5.3AI score0.00356EPSS
Exploits1References5
SUSE CVE
SUSE CVE
added 2026/05/06 1:40 a.m.6 views

SUSE CVE-2026-43042

In the Linux kernel, the following vulnerability has been resolved: mpls: add seqcount to protect the platformlabel,s pair The RCU-protected codepaths mplsforward, mplsdumproutes can have an inconsistent view of platformlabels vs platformlabel in case of a concurrent resize...

7.1CVSS5.7AI score0.0011EPSS
Exploits0References3
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.4 views

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/sched: actmpls: Fixed the warning during failed attribute validation. The TCAMPLSLABEL attribute is of type NLAU32, but its validation type is NLAVALIDATEFUNCTION. This is an invalid combination according to the comment above...

7.8CVSS5.6AI score0.00248EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/05/02 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-43042

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mpls: add seqcount to protect the platformlabel,s pair The RCU-protected codepaths mplsforward, mplsdumproutes can have an inconsistent view of platformlabels v...

7.1CVSS5.8AI score0.0011EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/05/01 6:11 p.m.3 views

CVE-2026-43042

A flaw was found in the Linux kernel's Multiprotocol Label Switching MPLS module. This vulnerability is caused by a race condition where concurrent operations on network label data can lead to inconsistent memory access. This can result in out-of-bounds memory reads or writes, potentially causing...

7.1CVSS5.8AI score0.0011EPSS
Exploits0References4
NVD
NVD
added 2026/05/01 3:16 p.m.9 views

CVE-2026-43042

In the Linux kernel, the following vulnerability has been resolved: mpls: add seqcount to protect the platformlabel,s pair The RCU-protected codepaths mplsforward, mplsdumproutes can have an inconsistent view of platformlabels vs platformlabel in case of a concurrent resize...

7.1CVSS0.0011EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/01 2:15 p.m.25 views

EUVD-2026-26641

In the Linux kernel, the following vulnerability has been resolved: mpls: add seqcount to protect the platformlabel,s pair The RCU-protected codepaths mplsforward, mplsdumproutes can have an inconsistent view of platformlabels vs platformlabel in case of a concurrent resize...

5.8AI score0.0011EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2026/05/01 2:15 p.m.5 views

CVE-2026-43042

In the Linux kernel, the following vulnerability has been resolved: mpls: add seqcount to protect the platformlabel,s pair The RCU-protected codepaths mplsforward, mplsdumproutes can have an inconsistent view of platformlabels vs platformlabel in case of a concurrent resize...

7.1CVSS5.7AI score0.0011EPSS
Exploits0
CVE
CVE
added 2026/05/01 2:15 p.m.17 views

CVE-2026-43042

The CVE-2026-43042 issue affects the Linux kernel MPLS code. It describes a race condition where concurrent operations on platform label data can yield an inconsistent view during a resize of the platform_label tables, particularly in the RCU-protected paths mpls_forward and mpls_dump_routes unde...

7.1CVSS5.8AI score0.0011EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/01 2:15 p.m.2 views

CVE-2026-43042

In the Linux kernel, the following vulnerability has been resolved: mpls: add seqcount to protect the platformlabel,s pair The RCU-protected codepaths mplsforward, mplsdumproutes can have an inconsistent view of platformlabels vs platformlabel in case of a concurrent resize...

5.8AI score0.0011EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2026/05/01 2:15 p.m.38 views

CVE-2026-43042 mpls: add seqcount to protect the platform_label{,s} pair

In the Linux kernel, the following vulnerability has been resolved: mpls: add seqcount to protect the platformlabel,s pair The RCU-protected codepaths mplsforward, mplsdumproutes can have an inconsistent view of platformlabels vs platformlabel in case of a concurrent resize...

7.1CVSS0.0011EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/05/01 12:0 a.m.7 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a lack of protection for platformlabel and platformlabel pairs in mpls during concurrent tuning, which could...

7.1CVSS5.8AI score0.0011EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/04/27 10:49 a.m.4 views

CVE-2026-31679

A flaw was found in the Linux kernel's openvswitch component. This vulnerability arises from improper validation of Multiprotocol Label Switching MPLS payload lengths during SET/SETMASKED actions. An attacker could potentially exploit this by providing malformed MPLS key data, leading to unexpect...

7.1CVSS5.4AI score0.00117EPSS
Exploits0References4
Microsoft CVE
Microsoft CVE
added 2026/04/26 8:9 a.m.3 views

openvswitch: validate MPLS set/set_masked payload length

...

7.1CVSS5.2AI score0.00117EPSS
Exploits0
NVD
NVD
added 2026/04/25 9:16 a.m.0 views

CVE-2026-31679

In the Linux kernel, the following vulnerability has been resolved: openvswitch: validate MPLS set/setmasked payload length validateset accepted OVSKEYATTRMPLS as variable-sized payload for SET/SETMASKED actions. In action handling, OVS expects fixed-size MPLS key data struct ovskeympls. Use the...

7.1CVSS0.00117EPSS
Exploits0References8
ATTACKERKB
ATTACKERKB
added 2026/04/25 8:46 a.m.3 views

CVE-2026-31679

In the Linux kernel, the following vulnerability has been resolved: openvswitch: validate MPLS set/setmasked payload length validateset accepted OVSKEYATTRMPLS as variable-sized payload for SET/SETMASKED actions. In action handling, OVS expects fixed-size MPLS key data struct ovskeympls. Use the...

5.3AI score0.00117EPSS
Exploits0References9Affected Software1
CVE
CVE
added 2026/04/25 8:46 a.m.14 views

CVE-2026-31679

Summary: CVE-2026-31679 affects the Linux kernel openvswitch code. The vulnerability arises from improper validation of MPLS payload lengths in SET/SET_MASKED actions: openvswitch accepted OVS_KEY_ATTR_MPLS as a variable-sized payload, while action handling expects fixed-size MPLS data (struct ov...

7.1CVSS5.3AI score0.00117EPSS
Exploits0References8Affected Software1
Debian CVE
Debian CVE
added 2026/04/25 8:46 a.m.4 views

CVE-2026-31679

In the Linux kernel, the following vulnerability has been resolved: openvswitch: validate MPLS set/setmasked payload length validateset accepted OVSKEYATTRMPLS as variable-sized payload for SET/SETMASKED actions. In action handling, OVS expects fixed-size MPLS key data struct ovskeympls. Use the...

7.1CVSS5.2AI score0.00117EPSS
Exploits0
Cvelist
Cvelist
added 2026/04/25 8:46 a.m.30 views

CVE-2026-31679 openvswitch: validate MPLS set/set_masked payload length

In the Linux kernel, the following vulnerability has been resolved: openvswitch: validate MPLS set/setmasked payload length validateset accepted OVSKEYATTRMPLS as variable-sized payload for SET/SETMASKED actions. In action handling, OVS expects fixed-size MPLS key data struct ovskeympls. Use the...

7.1CVSS0.00117EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2026/04/25 12:0 a.m.6 views

PT-2026-35139

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In openvswitch, the validate set function accepted OVS KEY ATTR MPLS as a variable-sized payload for SET and SET MASKED actions. However, action handling expects fixed-size MPLS key data...

8.8CVSS5.8AI score0.00282EPSS
Exploits0References55
Rows per page
Query Builder