Linux net/ipv4/raw.c Heap Buffer Overflow DoS

The vulnerability of the rawsendhdrinc function in the net/ipv4/raw.c component of the Linux kernel is related to the execution of operations outside of the buffer memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Unbreakable Enterprise kernel security update

5.4.17-2136.360.3 - IB/mlx4: delete allocated idmapentry while sending REJ Praveen Kumar Kannoju Orabug: 39999072 - net: tun: bound receive headroom Asim Viladi Oglu Manizada Orabug: 40020673 CVE-2026-81000 - xfrm: ah6: validate routing header segmentsleft Asim Viladi Oglu Manizada Orabug: 399821...

Linux Distros Unpatched Vulnerability : CVE-2026-98238

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: wwan: t7xx: validate the netif index in t7xxccmnirecvskb The netif index carried in the DPMAIF PIT header is five bits wide, but ccmniinst only has room fo...

OPENSUSE-SU-2026:12066-1 perl-Net-Whois-Raw-2.99044-1.1 on GA media

These are all security issues fixed in the perl-Net-Whois-Raw-2.99044-1.1 package on the GA media of openSUSE Tumbleweed...

ROS-20261006-73-0349

The vulnerability of the net/netfilter/ipset component of the Linux operating system’s kernel is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-115766

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: move switchdev call outside rcu This is a follow-up of one of sashiko's pre-existing bug reports. br mst set state calls switchdev port attr set for nonzero MSTIs while holding rcu read lock which invokes the...

ROS-20261006-73-0364

The vulnerability of the rdsibgetmr function in the net/rds/ibrdma.c module, which implements kernel networking functions in the Linux operating system, is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261006-73-0059

The vulnerability of the net/tls/tlssw.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

ROS-20261006-73-0433

The vulnerability of the startxmit function in the drivers/net/virtionet.c file of the Linux kernel network device driver involves the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

ROS-20261006-73-0003

The vulnerability of the bcmrxsetup function in the net/can/bcm.c module of the Linux kernel’s CAN subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261006-73-0352

The vulnerability of the fwchange function in the net/sched/clsfw.c module of the network scheduling subsystem of the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261006-73-0026

The vulnerability of the xtcttgdestroy function in the net/netfilter/xtCT.c module of the netfilter component of the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity...

CVE-2026-98239: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: fix RX checksum use-after-free lan743xrxprocessbuffer adds each non-first receive buffer to the head skb's fraglist. On the last descriptor, lan743xrxtrimskb linearizes the head and frees the fragment skb metadata...

PT-2026-106567

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An out-of-bounds read exists in the t7xx ccmni recv skb function. The netif index in the DPMAIF PIT header is five bits wide, allowing values up to 31, while the ccmni inst array only...

CVE-2026-98235: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/sched: actapi: release tail references on DELACTION failure A batched RTMDELACTION request takes a temporary reference on each action before attempting any deletion. tcfactiondelete clears each processed slot and drops its...

Linux kernel TCP Connection Request Buffer Overflow DoS

The vulnerability of the tcpconnrequest function in the include/net/tcp.h component of the Linux kernel is related to the predictability of random initial numbers for TCP sessions. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

PT-2026-106630

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description The br mst set state function calls switchdev port attr set for nonzero MSTIs while holding rcu read lock. This action invokes the blocking switchdev notifier chain, which may sleep, leadin...

PT-2026-115729

In the Linux kernel, the following vulnerability has been resolved: net: bridge: vlan: fix bugs caused by switchdev deletion errors Allowing switchdev to prevent vlan deletion and error out in vlan del could cause multiple different issues - inconsistent state, memory leaks when flushing, NULL...

RHCOS 4 : OpenShift Container Platform 4.22.17 (RHSA-2026:74427)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:74427 advisory. - net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGSMAXFRAMESIZE frame CVE-2026-33814 No...

CVE-2026-98302: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: fddi: skfp: fix NULL deref when setting the MAC address while down skfpctlsetmacaddress calls ResetAdapter unconditionally, without checking netifrunning. ResetAdapter first calls cardstop, which sets smc-hw.hwstate to...