detux

Detux: The Multiplatform Linux Sandbox Introduction: Detux is a sandbox developed to do traffic analysis of the Linux malwares and capture the IOCs by doing so. QEMU hypervisor is used to emulate Linux Debian for various CPU architectures. The following CPUs are currently supported: x86 x86-64 AR...

siper

Siper Shield Siper is a high-performance, XDP-based IP blacklist firewall built with Go and C eBPF. It allows you to drop malicious traffic at the earliest possible stage in the Linux networking stack—the network driver level. By leveraging XDP Express Data Path, Siper processes packets before th...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net: mana: Validate the packet length reported by the NIC Validate the packet length reported in the RX CQE before passing it to skb processing. The CQE is supplied by the NIC device and should not be blindly trusted...

CVE-2022-47952

Suggested description lxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer whether any file exists, even within a protected directory tree, because "Failed to open" often indicates that a file does not exist, whereas "does not refer to a network namespace...

CLEANSTART-2024-DP84679 Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

Security vulnerability affects the xen package. Linux disk/nic frontends data leaks This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE...

CLEANSTART-2024-DC10012 Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

Security vulnerability affects the xen package. Linux disk/nic frontends data leaks This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE...

CLEANSTART-2024-YR35979 Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

Security vulnerability affects the xen package. Linux disk/nic frontends data leaks This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE...

CLEANSTART-2024-AO47413 lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path

Security vulnerability affects the lxc package. lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path...

CLEANSTART-2026-XT22059 integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5

Security vulnerability affects the qemu package. An integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5...

DEBIAN-CVE-2026-99081

In the Linux kernel, the following vulnerability has been resolved: bnxten: fix DMA mapping length for padded small packets Stefan Fleischmann reported Intel IOMMU DMA Read faults on BCM57412 NetXtreme-E NICs when transmitting packets on VLAN/macvlan interfaces: DMAR: DMA Read NOPASID Request...

UBUNTU-CVE-2026-99081

In the Linux kernel, the following vulnerability has been resolved: bnxten: fix DMA mapping length for padded small packets Stefan Fleischmann reported Intel IOMMU DMA Read faults on BCM57412 NetXtreme-E NICs when transmitting packets on VLAN/macvlan interfaces: DMAR: DMA Read NOPASID Request...

UBUNTU-CVE-2026-99047

In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak when rings are stopped GVE does not free XSK buffers when resetting ring state as a part of stopping queues. This causes all XSK buffers which are posted to the NIC to be leaked. Free XSK buffers attached...

CVE-2026-99081 bnxt_en: fix DMA mapping length for padded small packets

In the Linux kernel, the following vulnerability has been resolved: bnxten: fix DMA mapping length for padded small packets Stefan Fleischmann reported Intel IOMMU DMA Read faults on BCM57412 NetXtreme-E NICs when transmitting packets on VLAN/macvlan interfaces: DMAR: DMA Read NOPASID Request...

CVE-2026-99047 gve: fix XSK buffer leak when rings are stopped

In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak when rings are stopped GVE does not free XSK buffers when resetting ring state as a part of stopping queues. This causes all XSK buffers which are posted to the NIC to be leaked. Free XSK buffers attached...

CVE-2026-98556

A flaw was found in the Linux kernel's Google Virtual NIC gve driver. A local user with raw packet access or an adjacent guest system can trigger a Denial of Service DoS by sending network packets with an excessively large segment size. The driver fails to validate the Maximum Segment Size MSS...

nic BIRD: Input validation error vulnerability

In versions nic BIRD 2.0.9 to 2.20.0, and 3.0.0 to 3.4.0, there is an input validation vulnerability caused by an IPv6 FlowSpec validation. This vulnerability allows components with non-zero offset destination prefixes to be accepted without being rejected. As a result, established BGP peers may ...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix race on per-CQ variable napi workdone After calling napicompletedone, the NAPIFSTATESCHED bit may be cleared, allowing another CPU to start a napi thread and access the per-CQ variable, cq-workdone. If this other...

Astra Linux - Vulnerability in linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: sfc: fix a crash that occurs when reading stats while the NIC is resetting efxnetstats .ndogetstats64 can be called during an ethtool selftest, during which time nicdata-mcstats is NULL because the NIC has been finished. In this...

EulerOS 2.0 SP13 : lxc (EulerOS-SA-2026-4070)

According to the versions of the lxc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : lxc is a Linux container runtime. In the setuid helper lxc-user-nic, the delete path contains a logic flaw in the findline function that allows an...

EulerOS 2.0 SP13 : lxc (EulerOS-SA-2026-4161)

According to the versions of the lxc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : lxc is a Linux container runtime. In the setuid helper lxc-user-nic, the delete path contains a logic flaw in the findline function that allows an...