CVE-2026-99078

A flaw was found in the Linux kernel's Mellanox network driver mlx5e. When processing high-speed network traffic using XDP eXpress Data Path sockets under low-memory conditions, a failure during receive queue replenishment can cause previously freed memory buffers to be released again through sta...

etherleak-checker

Etherleak Vulnerability Checker This Python script helps to detect the Etherleak CVE-2003-0001 vulnerability on a target host by analyzing the padding data in network packets. The script uses Scapy to send various types of requests ICMP, ARP, or TCP and checks if the responses contain any padding...

windows_tcpip_fuzz

windowstcpipfuzz This is my attempt at fuzzing the tcpip.sys driver in windows via using scapy. This is inspired by this vulnerability here: https://doar-e.github.io/blog/2021/04/15/reverse-engineering-tcpipsys-mechanics-of-a-packet-of-the-death-cve-2021-24086/...

CVE-2026-98922

A flaw was found in the Linux kernel's IBM EMAC Ethernet Media Access Controller network driver. During device initialization, the driver attempts to attach the physical network interface before network device operations are configured, causing a null pointer dereference. A local user capable of...

CVE-2026-98913

A flaw was found in the Linux kernel's Cavium ThunderX network driver. When initializing a network interface, an error occurring after acquiring a reference to the Precision Time Protocol PTP device fails to properly release that reference. A privileged local attacker could exploit this issue by...

CVE-2026-99029

A flaw was found in the Linux kernel's Sparx5 network driver. When removing offloaded matchall traffic control filters, the driver unlinks filter entries without freeing the allocated memory. A local user with network administration privileges can exploit this flaw by repeatedly adding and deleti...

CVE-2026-99026

A flaw was found in the Linux kernel's team network driver. When a team interface is configured in broadcast mode and lacks transmittable ports, the driver fails to properly free packet buffers during transmission. A local user can exploit this vulnerability by sending network traffic through the...

CVE-2026-99044

A flaw was found in the Linux kernel's ice network driver. During dynamic port cleanup, the driver prematurely frees internal interface memory before removing the port entry, resulting in a use-after-free condition. A local user could exploit this flaw to cause a Denial of Service DoS through a...

CVE-2026-98967

A flaw was found in the Linux kernel's cxgb4 network driver. During connection cleanup or error handling, the driver removes entries from an internal tracking table without disabling software interrupts. If concurrent network traffic triggers an interrupt on the same processor core during this...

CVE-2026-98909

A flaw was found in the Linux kernel's CPSW network driver. When network port registration fails during device initialization, the driver does not properly unregister its devlink management interface. This improper cleanup leaves resources allocated in the kernel, which may allow a local user to...

CVE-2026-98908

A flaw was found in the Linux kernel's Microchip Sparx5 network driver. When configuring traffic control rules with Per-Stream Filtering and Policing PSFP, the driver fails to properly unwind allocated resources and correct reference counts if a setup step fails. A privileged local user could...

CVE-2026-98906

A flaw was found in the Linux kernel's LAN966x network driver. When an attempt to reconfigure the Maximum Transmission Unit MTU fails, the driver does not properly restore its receive buffer settings. This inconsistency causes subsequent packet processing routines to assume larger buffer sizes th...

CVE-2026-99081

A flaw was found in the Linux kernel's Broadcom NetXtreme-E bnxten network driver, which can lead to a Denial of Service DoS. When transmitting small network packets that require padding, the driver fails to update the Direct Memory Access DMA mapping length to account for the padded size. As a...

CVE-2026-98895

A flaw was found in the Linux kernel's mlx5 network driver. When destroying a hardware steering table configured with a default miss table, the driver fails to remove the entry from the associated miss table tracking list, leaving behind an invalid pointer. A local privileged user could exploit...

CVE-2026-98791

A flaw was found in the Linux kernel's Mellanox network driver mlx5e. A local user can exploit this vulnerability to cause a denial of service DoS through a system crash. During the teardown of an AFXDP eXpress Data Path transmit queue, outstanding descriptors requesting a transmit timestamp are...

CVE-2026-98492

A flaw was found in the Linux kernel's Cadence MACB network driver. During network buffer allocation, the driver's error-handling routines fail to properly release allocated Direct Memory Access DMA memory buffers when a failure occurs. A local user could trigger these error conditions during...

CVE-2026-98498

A flaw was found in the Linux kernel's mlx5 network driver. When handling shared connection tracking counters, the driver fails to properly release an entry's reference count if the associated counter is in the process of being released. This reference count leak prevents the reverse entry from...

CVE-2026-98494

A flaw was found in the Linux kernel's atl1 network driver. During a PCIe link or hardware reset, the network adapter can return an out-of-range status value that the driver fails to validate properly. This condition can trap the driver in an infinite loop, resulting in a kernel soft lockup and...

CVE-2026-98497

A flaw was found in the Linux kernel's mlx5 network driver. When configuring IPv6 IPsec Internet Protocol Security rules with differing source and destination prefix lengths, the driver inadvertently swaps the source and destination address masks installed into hardware flow tables. This incorrec...

CVE-2026-98489

A flaw was found in the Linux kernel's atl1c network driver. When an interface experiences a link reset or link flapping, the hardware can return an out-of-range descriptor value that the driver fails to validate. An adjacent entity capable of triggering network link state changes can exploit thi...