CVE-2026-64531

🔥 CVE-2026-64531 — OVSwrap Повреждение памяти в Open vSwitch ядра Linux 🩸 Обзор уязвимости CVE-2026-64531 — это уязвимость безопасности, затрагивающая подсистему сетевого взаимодействия Open vSwitch OVS ядра Linux. Ошибка заключается в обработке вложенных атрибутов Netlink , где структуры действи...

CVE-2017-11176

CVE-2017-11176 Концептуальное доказательство для CVE-2017-11176 с целью выполнения кода. Уязвимость Функция mqnotify в ядре Linux до версии 4.11.9 не устанавливает указатель sock в NULL при входе в логику повторных попыток. При закрытии сокета Netlink в пользовательском пространстве это позволяет...

CVE-2022-1015

Мой PoC для CVE-2022-1015 Компиляция: gcc -o exploit exploit.c helpers.c -lmnl -lnftnl -lpthread -no-pie...

mtechweek_04

mtechweek04 Тест на проникновение на основе Metasploit в изолированную лабораторную ВМ Metasploitable2 — удалённая эксплуатация через DistCC CVE-2004-2687, повышение привилегий через udev netlink CVE-2009-1185 и анализ бэкдора vsftpd 2.3.4 CVE-2011-2523, со сквозной проверкой митигирования...

CVE-2023-1829

CVE-2023-1829 Эксплуатация протестирована на официальном исходном коде Ubuntu 22.04, версия 5.15.0-25.25 Установка зависимостей для некоторых функций фильтрации netlink root@kitploit: sudo apt install libnftnl-dev libmnl-dev Шаг сборки: root@kitploit: make Ссылки...

CVE-2020-8958

CVE-2020-8958 CVE-2020-8958 : boa 서버를 사용하는 NetLink 라우터에 대한 인증된 원격 코드 실행 익스플로잇 CVSS 점수: 7.2 취약점 유형: OS 명령 주입 인증: 필요 영향받는 모델: HG323 설명 Netlink 라우터의 /boaform/admin/formPing 리소스는 원격 공격자가 targetaddr 매개변수를 통해 OS 명령 주입을 수행할 수 있도록 합니다. 사용법 root@kitploit: usage: CVE-2020-8958.py -h -i URL -u USER -p PASS...

cve-2017-11176

cve-2017-11176 Informazioni Pubbliche La funzione mqnotify nel kernel Linux fino alla versione 4.11.9 non imposta il puntatore sock a NULL prima di entrare nella logica di ripetizione. Durante la chiusura da spazio utente di un socket Netlink, consente ad attaccanti di causare un denial of servic...

CVE-2017-7184

CVE-2017-7184 – Escalation dei privilegi nel kernel Linux XFRM senza sudo Panoramica Questo repository contiene un exploit proof-of-concept di escalation locale dei privilegi per CVE-2017-7184 , una vulnerabilità del kernel Linux nel sottosistema netlink XFRM IPsec. L'exploit dimostra come un...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098850)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098850 advisory. In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fix unsafe attribute parsing in outputuserspace This patch replaces the manual Netli...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098981)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098981 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: clear trailing padding in buildpolexpire buildexpire clears the trailing padding bytes of...

Astra Linux - Vulnerability in linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: net: genl: fix a memory leak in the error path during policy dumping If the construction of the policy array fails while recording a policy other than the first one, we need to unwind. netlinkpolicydumpaddpolicy itself also needs...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: fixed the global out-of-bounds read in ksmbdnlpolicy. Similar to the reported issue see commit b33fb5b801c6 “net: qualcomm: rmnet: fixed global out-of-bounds in rmnetpolicy”, my local fuzzer discovered another global...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ethtool: Do not perform operations on net devices that are not yet registered. There is a short period between when a net device starts to be unregistered and when it is actually gone. During that time frame, ethtool operations c...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: netlink: avoided infinite retry loops in netlinkunicast The netlinkattachskb function checks the read memory allocation constraints of the socket. First, it checks whether the newly increased rmem value fits within the socket’...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: netlink: Fixed wraparounds of sk-skrmemalloc. Netlink has this pattern in some places: c if atomicread&sk-skrmemalloc sk-skrcvbuf atomicaddskb-truesize, &sk-skrmemalloc; This issue was also fixed in commit 5a465a0da13e “udp: Fixe...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: mptcp: pm: fixed the UaF read in mptcppmnlrmaddrorsubflow Syzkaller reported this issue as follows: ================================================================== BUG: KASAN: slab-use-after-free in...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-6.1, Linux-5.15

In the Linux kernel, the following vulnerability has been resolved: rtnetlink: The error logic for writing back the IFLABRIDGEFLAGS flags has been fixed. In the commit d73ef2d69c0d “rtnetlink: let rtnlbridgesetlink checks IFLABRIDGEMODE length”, an adjustment was made to the old loop logic in the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: fixed the integer overflow in the geneveopt structure’s length field. The struct geneveopt uses 5 bits to represent the length of each individual option. This means that the size of each option should be less than 128 bytes...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: netlink: added nla be16/32 types to the minlen array BUGs: KMSAN: uninit-value in nlavalidaterangeunsigned, lib/nlattr.c:222 inline BUGs: KMSAN: uninit-value in nlavalidateintrange, lib/nlattr.c:336 inline BUGs: KMSAN:...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix middle attribute validation in pushnsh action The pushnsh action structure looks like this: OVSACTIONATTRPUSHNSHOVSKEYATTRNSHOVSNSHKEYATTRBASE,... The outermost OVSACTIONATTRPUSHNSH attribute is OK'ed by the...