CVE-2026-97901

A flaw was found in the Linux kernel's Generic Netlink genetlink component. This flaw allows a local user to cause a Denial of Service DoS through a system crash. The vulnerability occurs because the kernel fails to maintain a reference to the target module during a policy dump that spans multipl...

CVE-2026-97608

A flaw was found in the Linux kernel's netfilter subsystem. A race condition occurs when network namespace operations are torn down before global logging backends are unregistered. A local user can exploit this timing window through sysctl or netlink interfaces to rebind a logger while it is bein...

CVE-2026-97419

A flaw was found in the Linux kernel's High-availability Seamless Redundancy HSR subsystem. When ring error or node down events occur, asynchronous netlink notifications are broadcast exclusively to the root network namespace rather than the device's specific network namespace. This issue allows ...

mtechweek_04

mtechweek04 Prueba de penetración basada en Metasploit en una VM de laboratorio Metasploitable2 aislada — explotación remota mediante DistCC CVE-2004-2687, escalada de privilegios mediante udev netlink CVE-2009-1185 y análisis del backdoor vsftpd 2.3.4 CVE-2011-2523, con mitigación de firewall...

CVE-2026-64531

🔥 CVE-2026-64531 — OVSwrap Corrupción de Memoria en Open vSwitch del Kernel de Linux 🩸 Resumen de la Vulnerabilidad CVE-2026-64531 es una vulnerabilidad de seguridad que afecta al subsistema de red Open vSwitch OVS del Kernel de Linux. La falla existe en el manejo de atributos Netlink anidados ,...

CVE-2017-11176

CVE-2017-11176 Proof of concept for CVE-2017-11176 for code execution. Vulnerability The mqnotify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic. During a user-space close of a Netlink socket, it allows attackers to cause a denial...

CVE-2020-8958

CVE-2020-8958 CVE-2020-8958 : Authenticated Remote Code Execution Exploit for NetLink Routers using boa server. CVSS Score: 7.2 Vulnerability Types: OS Command Injection Authentication: Required Affected Models: HG323 Description The /boaform/admin/formPing resource in Netlink routers allows remo...

CVE-2017-7184

CVE-2017-7184 – Linux Kernel XFRM Privilege Escalation No Sudo Overview This repository contains a proof-of-concept local privilege escalation exploit for CVE-2017-7184 , a Linux kernel vulnerability in the XFRM IPsec netlink subsystem. The exploit demonstrates how an unprivileged user can gain...

CVE-2023-1829

CVE-2023-1829 La explotación se probó en el código fuente oficial de Ubuntu22.04 5.15.0-25.25 Instalando dependencias para algunas funciones de filtro netlink sudo apt install libnftnl-dev libmnl-dev Paso de compilación: make Referencias https://github.com/randorisec/CVE-2022-34918-LPE-PoC/tree/m...

cve-2017-11176

cve-2017-11176 Información Pública La función mqnotify en el kernel de Linux hasta 4.11.9 no establece el puntero sock a NULL al entrar en la lógica de reintento. Durante el cierre desde espacio de usuario de un socket Netlink, permite a atacantes causar una denegación de servicio use-after-free ...

AZL-104346 CVE-2026-98021 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: net: reject oversized txqueuelen at netlink parse time rtnlcreatelink assigns IFLATXQLEN directly to dev-txqueuelen without going through netifchangetxqueuelen, so a device created with "ip link add ... txqueuelen 500000" bypasse...

CVE-2026-97901

In the Linux kernel, the following vulnerability has been resolved: genetlink: pin family module during policy dump The generic netlink controller's policy dump keeps pointers to the target family's operation and policy tables in its callback state. A dump may be split across multiple skbs and...

EUVD-2026-86674

In the Linux kernel, the following vulnerability has been resolved: net: reject oversized txqueuelen at netlink parse time rtnlcreatelink assigns IFLATXQLEN directly to dev-txqueuelen without going through netifchangetxqueuelen, so a device created with "ip link add ... txqueuelen 500000" bypasse...

CVE-2026-98021

In the Linux kernel, the following vulnerability has been resolved: net: reject oversized txqueuelen at netlink parse time rtnlcreatelink assigns IFLATXQLEN directly to dev-txqueuelen without going through netifchangetxqueuelen, so a device created with "ip link add ... txqueuelen 500000" bypasse...

CVE-2026-98021

The Linux kernel contains a vulnerability where rtnl_create_link() assigns IFLA_TXQLEN directly to dev->tx_queue_len without proper validation. This allows a device created with an oversized txqueuelen (e.g., 500000) to bypass the S16_MAX cap, leading to oversized ring allocations in pfifo_fas...

EUVD-2026-86812

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: Don't replay RTMGETCHAIN in tcctlchain. If a netlink socket sends RTMGETCHAIN requests repeatedly without recving the responses, tcctlchain hogs CPU and triggers Hung Task splat. 0 As caught in the stack trace,...

CVE-2026-97901

The Linux kernel contains a vulnerability in the generic netlink controller where the policy dump keeps pointers to a target family's operation and policy tables in its callback state. Because Netlink only pins the module owning the dump callback (the controller's owner) rather than the target fa...

Linux Distros Unpatched Vulnerability : CVE-2026-93267

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/core: Fix potential use after free in uverbsfreedmah When accessing a dmah via the netlink path the only synchronization mechanism for the said dmah is...

Linux Distros Unpatched Vulnerability : CVE-2026-98021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: reject oversized txqueuelen at netlink parse time rtnlcreatelink assigns IFLATXQLEN directly to dev-txqueuelen without going through netifchangetxqueuelen,...

CVE-2026-98021

In the Linux kernel, the following vulnerability has been resolved: net: reject oversized txqueuelen at netlink parse time rtnlcreatelink assigns IFLATXQLEN directly to dev-txqueuelen without going through netifchangetxqueuelen, so a device created with "ip link add ... txqueuelen 500000" bypasse...