Lucene search
+L

88 matches found

osv-cve
osv-cve
•added 2026/10/14 1:25 p.m.•7 views

CVE-2026-98394 af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer.

In the Linux kernel, the following vulnerability has been resolved: afunix: Return immediately when manageoob returns NULL for 0-length buffer. Fahad Alharbi reported that recv0, MSGPEEK triggers busy-wait in unixstreamreadgeneric if recv is blocking and the last skb in the queue is MSGOOB skb. I...

5.9AI score
SaveExploits0References7
EUVD
EUVD
•added 2026/10/14 1:25 p.m.•7 views

EUVD-2026-101043

In the Linux kernel, the following vulnerability has been resolved: afunix: Return immediately when manageoob returns NULL for 0-length buffer. Fahad Alharbi reported that recv0, MSGPEEK triggers busy-wait in unixstreamreadgeneric if recv is blocking and the last skb in the queue is MSGOOB skb. I...

5.8AI score0.00209EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/10/09 7:38 p.m.•35 views

bad_garbage

BADGARBAGE.c CVE-2026-53361 — an unprivileged, container-escapable use-after-free in the AFUNIX socket garbage collector. This is the single-vector MSGPEEK only version. The Bug The AFUNIX GC reclaims "in-flight" sockets that form unreachable reference cycles. A concurrent MSGPEEK on an in-flight...

7.1CVSS7.1AI score0.00867EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2026/09/30 3:00 p.m.•17 views

SUSE CVE-2026-97985

In the Linux kernel, the following vulnerability has been resolved: afunix: Update last skb marker in manageoob. Fahad Alharbi reported that blocking recvMSGPEEK could hog CPU due to OOB skb. In the following cases, manageoob skips OOB skbs and returns NULL for the last recvMSGPEEK:...

5.9AI score0.00168EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/25 11:17 a.m.•13 views

CVE-2026-97985

In the Linux kernel, the following vulnerability has been resolved: afunix: Update last skb marker in manageoob. Fahad Alharbi reported that blocking recvMSGPEEK could hog CPU due to OOB skb. In the following cases, manageoob skips OOB skbs and returns NULL for the last recvMSGPEEK:...

0.00168EPSS
SaveExploits0References4
osv-debian
osv-debian
•added 2026/09/25 11:17 a.m.•9 views

DEBIAN-CVE-2026-97985

In the Linux kernel, the following vulnerability has been resolved: afunix: Update last skb marker in manageoob. Fahad Alharbi reported that blocking recvMSGPEEK could hog CPU due to OOB skb. In the following cases, manageoob skips OOB skbs and returns NULL for the last recvMSGPEEK:...

6.1AI score0.00168EPSS
SaveExploits0References1
osv-azl
osv-azl
•added 2026/09/25 11:17 a.m.•9 views

AZL-104352 CVE-2026-97985 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: afunix: Update last skb marker in manageoob. Fahad Alharbi reported that blocking recvMSGPEEK could hog CPU due to OOB skb. In the following cases, manageoob skips OOB skbs and returns NULL for the last recvMSGPEEK:...

5.9AI score0.00168EPSS
SaveExploits0References1
osv-ubuntu
osv-ubuntu
•added 2026/09/25 11:17 a.m.•11 views

UBUNTU-CVE-2026-97985

In the Linux kernel, the following vulnerability has been resolved: afunix: Update last skb marker in manageoob. Fahad Alharbi reported that blocking recvMSGPEEK could hog CPU due to OOB skb. In the following cases, manageoob skips OOB skbs and returns NULL for the last recvMSGPEEK:...

6.1AI score0.00168EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/25 10:23 a.m.•39 views

CVE-2026-97985 af_unix: Update last skb marker in manage_oob().

In the Linux kernel, the following vulnerability has been resolved: afunix: Update last skb marker in manageoob. Fahad Alharbi reported that blocking recvMSGPEEK could hog CPU due to OOB skb. In the following cases, manageoob skips OOB skbs and returns NULL for the last recvMSGPEEK:...

0.00168EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/25 10:23 a.m.•15 views

EUVD-2026-86639

In the Linux kernel, the following vulnerability has been resolved: afunix: Update last skb marker in manageoob. Fahad Alharbi reported that blocking recvMSGPEEK could hog CPU due to OOB skb. In the following cases, manageoob skips OOB skbs and returns NULL for the last recvMSGPEEK:...

5.9AI score0.00168EPSS
SaveExploits0References4
osv-cve
osv-cve
•added 2026/09/25 10:23 a.m.•17 views

CVE-2026-97985 af_unix: Update last skb marker in manage_oob().

In the Linux kernel, the following vulnerability has been resolved: afunix: Update last skb marker in manageoob. Fahad Alharbi reported that blocking recvMSGPEEK could hog CPU due to OOB skb. In the following cases, manageoob skips OOB skbs and returns NULL for the last recvMSGPEEK:...

5.8AI score
SaveExploits0References7
CVE
CVE
•added 2026/09/25 10:23 a.m.•48 views

CVE-2026-97985

The Linux kernel contains a vulnerability in the af_unix component where blocking recv(MSG_PEEK) operations could hog CPU resources. The issue occurs because manage_oob() skips Out-Of-Band (OOB) socket buffers and returns NULL for the last MSG_PEEK , failing to update the @last marker in unix_str...

5.9AI score0.00168EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/09/25 12:00 a.m.•17 views

CVE-2026-97985

In the Linux kernel, the following vulnerability has been resolved: afunix: Update last skb marker in manageoob. Fahad Alharbi reported that blocking recvMSGPEEK could hog CPU due to OOB skb. In the following cases, manageoob skips OOB skbs and returns NULL for the last recvMSGPEEK:...

5.9AI score0.00168EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/25 12:00 a.m.•8 views

CVE-2026-97985: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: afunix: Update last skb marker in manageoob. Fahad Alharbi reported that blocking recvMSGPEEK could hog CPU due to OOB skb. In the following cases, manageoob skips OOB skbs and returns NULL for the last recvMSGPEEK:...

5.9AI score0.00168EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/09/08 12:00 a.m.•10 views

Vulnerability of the unix_gc() component. Igor, MSG_PEEK. Let’s talk about the kernels of the Linux operating system, which allow attackers to trigger a service failure.

Vulnerability of the unixgc component. Igor, MSGPEEK. The kernels of the Linux operating system are related to the swapping of pointers with expired lifetimes. Exploitation of this vulnerability can allow an attacker to cause a service failure...

7.1CVSS6.8AI score0.00232EPSS
SaveExploits0References16Affected Software4
AstraLinux
AstraLinux
•added 2026/09/03 2:20 p.m.•9 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: afunix: Set gcinprogress to true in unixgc. Igor Ushakov reported that unixgc could run with gcinprogress being false if the work is scheduled while it is running: Thread 1 Thread 2 Thread 3 -------- -------- --------...

7.1CVSS6.5AI score0.00232EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2026/09/02 12:54 p.m.•17 views

kernel: af_unix: Set gc_in_progress to true in unix_gc()

A flaw was found in the Linux kernel's afunix component. A race condition exists within the unixgc garbage collection function where the gcinprogress flag may not be correctly set. This could lead to unixpeekfpl misinterpreting garbage collection status when handling MSGPEEK operations, potential...

7.1CVSS6.5AI score0.00232EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/08/31 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2026-26445

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - stomper 5e2741e is vulnerable to Denial of Service. A malicious client can send partial STOMP frames and keep the TCP connections open, which, combined with the...

7.5CVSS5.8AI score0.00488EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/26 12:00 a.m.•12 views

CVE-2026-26445: Allocation of Resources Without Limits or Throttling

stomper 5e2741e is vulnerable to Denial of Service. A malicious client can send partial STOMP frames and keep the TCP connections open, which, combined with the broker s use of edge-triggered epoll EPOLLET and MSGPEEK in recv, causes sockets to enter a permanent half-read state. When enough such...

7.5CVSS5.8AI score0.00488EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/26 12:00 a.m.•17 views

EUVD-2026-66756

stomper 5e2741e is vulnerable to Denial of Service. A malicious client can send partial STOMP frames and keep the TCP connections open, which, combined with the broker s use of edge-triggered epoll EPOLLET and MSGPEEK in recv, causes sockets to enter a permanent half-read state. When enough such...

5.3AI score0.00488EPSS
SaveExploits0References2
Rows per page
Query Builder