Lucene search
+L

28 matches found

NVD
NVD
added 2026/05/27 2:17 p.m.19 views

CVE-2026-45952

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: Add validation for MTU changes Increasing the MTU beyond the HDS threshold causes the hardware to fragment packets across multiple buffers. If a single-buffer XDP program is attached, the driver will drop all multi-fr...

5.5CVSS0.00126EPSS
SaveExploits0References3
CVE
CVE
added 2026/05/27 12:18 p.m.31 views

CVE-2026-45952

The CVE-2026-45952 issue affects the Linux kernel fbnic driver. It concerns MTU changes when an XDP program is attached: increasing MTU beyond the hardware threshold can cause fragmentation across multiple buffers, and the driver will drop all multi-fragment frames for single-buffer XDP. This can...

5.5CVSS5.8AI score0.00126EPSS
SaveExploits0References3Affected Software1
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.5 views

Astra Linux – Vulnerability in Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: L2CAP: Fixed a division by zero issue in l2capleflowctlinit. l2capleflowctlinit may cause both a division by zero and an integer overflow, as hdev-lemtu may not fall within the valid range. The MTU value was moved...

6.5CVSS6.4AI score0.00215EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/05/07 2:18 a.m.13 views

SUSE CVE-2026-43092

In the Linux kernel, the following vulnerability has been resolved: xsk: validate MTU against usable frame size on bind AFXDP bind currently accepts zero-copy pool configurations without verifying that the device MTU fits into the usable frame space provided by the UMEM chunk. This becomes a...

5.5CVSS5.9AI score0.00122EPSS
SaveExploits0References16
NVD
NVD
added 2026/05/06 10:16 a.m.17 views

CVE-2026-43092

In the Linux kernel, the following vulnerability has been resolved: xsk: validate MTU against usable frame size on bind AFXDP bind currently accepts zero-copy pool configurations without verifying that the device MTU fits into the usable frame space provided by the UMEM chunk. This becomes a...

5.5CVSS0.00122EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/06 7:40 a.m.6 views

CVE-2026-43092

In the Linux kernel, the following vulnerability has been resolved: xsk: validate MTU against usable frame size on bind AFXDP bind currently accepts zero-copy pool configurations without verifying that the device MTU fits into the usable frame space provided by the UMEM chunk. This becomes a...

5.9AI score0.00122EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2026/05/06 7:40 a.m.19 views

CVE-2026-43092

The CVE-2026-43092 issue affects the Linux kernel AF_XDP subsystem: bind now validates MTU against the usable frame space provided by UMEM chunks. Previously, zero-copy pool configurations could be accepted without confirming that the device MTU fits into the usable frame space, considering tailr...

5.5CVSS5.9AI score0.00122EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/05/06 7:40 a.m.5 views

CVE-2026-43092 xsk: validate MTU against usable frame size on bind

In the Linux kernel, the following vulnerability has been resolved: xsk: validate MTU against usable frame size on bind AFXDP bind currently accepts zero-copy pool configurations without verifying that the device MTU fits into the usable frame space provided by the UMEM chunk. This becomes a...

5.5CVSS6AI score0.00122EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2026/05/06 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-43092

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xsk: validate MTU against usable frame size on bind AFXDP bind currently accepts zero-copy pool configurations without verifying that the device MTU fits into t...

5.5CVSS5.7AI score0.00122EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.4 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000991)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000991 advisory. net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel before 4.0 does not validate attempted changes to the MTU value, which allows context-dependent attackers t...

5CVSS6.5AI score0.05059EPSS
SaveExploits0References18
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.7 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002388)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002388 advisory. net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel before 4.0 does not validate attempted changes to the MTU value, which allows context-dependent attackers t...

5CVSS6.5AI score0.05059EPSS
SaveExploits0References18
Cvelist
Cvelist
added 2025/10/15 7:56 a.m.13 views

CVE-2025-39986 can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow

In the Linux kernel, the following vulnerability has been resolved: can: sun4ican: populate ndochangemtu to prevent buffer overflow Sending an PFPACKET allows to bypass the CAN framework logic and to directly reach the xmit function of a CAN driver. The only check which is performed by the PFPACK...

7.8CVSS0.00161EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/10/15 12:0 a.m.8 views

PT-2025-42260

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's mcba usb CAN driver related to handling PF PACKET sockets and CAN XL frames. Specifically, the driver lacks proper MTU validation through the ndo chan...

7.7CVSS7.6AI score0.00164EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/10/15 12:0 a.m.4 views

PT-2025-42261

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the sun4i can driver within the Linux kernel where a missing check in the ndo change mtu function allows an attacker to configure an invalid MTU. This can be exploited b...

7.7CVSS7.8AI score0.00161EPSS
SaveExploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2015-4346

Malware in sbrugna...

6.1CVSS6.4AI score0.00979EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2024/06/11 2:5 a.m.4 views

SUSE CVE-2024-36968

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix div-by-zero in l2capleflowctlinit l2capleflowctlinit can cause both div-by-zero and an integer overflow since hdev-lemtu may not fall in the valid range. Move MTU from hcidev to hciconn to validate MTU and...

5.5CVSS6.2AI score0.00215EPSS
SaveExploits0References15
OSV
OSV
added 2024/06/08 1:15 p.m.2 views

DEBIAN-CVE-2024-36968

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix div-by-zero in l2capleflowctlinit l2capleflowctlinit can cause both div-by-zero and an integer overflow since hdev-lemtu may not fall in the valid range. Move MTU from hcidev to hciconn to validate MTU and...

6.5CVSS5.5AI score0.00215EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2024/06/08 1:15 p.m.29 views

CVE-2024-36968

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix div-by-zero in l2capleflowctlinit l2capleflowctlinit can cause both div-by-zero and an integer overflow since hdev-lemtu may not fall in the valid range. Move MTU from hcidev to hciconn to validate MTU and...

6.5CVSS6.2AI score0.00215EPSS
SaveExploits0References30
OSV
OSV
added 2024/06/08 1:15 p.m.13 views

UBUNTU-CVE-2024-36968

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix div-by-zero in l2capleflowctlinit l2capleflowctlinit can cause both div-by-zero and an integer overflow since hdev-lemtu may not fall in the valid range. Move MTU from hcidev to hciconn to validate MTU and...

6.5CVSS6.2AI score0.00215EPSS
SaveExploits0References30
Vulnrichment
Vulnrichment
added 2024/06/08 12:53 p.m.26 views

CVE-2024-36968 Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix div-by-zero in l2capleflowctlinit l2capleflowctlinit can cause both div-by-zero and an integer overflow since hdev-lemtu may not fall in the valid range. Move MTU from hcidev to hciconn to validate MTU and...

6.7AI score0.00215EPSS
SaveExploits0References5
Rows per page
Query Builder