Lucene search
+L

1370 matches found

Positive Technologies
Positive Technologies
•added 2026/06/08 12:00 a.m.•22 views

PT-2026-52322

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the openvswitch component where the allocation of the reply skb socket buffer may occur either before or after locking the ovs mutex. If the allocation happens after...

9.8CVSS5.5AI score0.0013EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/06/06 12:00 a.m.•36 views

EulerOS Virtualization 2.12.1 : kernel (EulerOS-SA-2026-2077)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : netfilter: ctnetlink: remove refcounting in expectation dumpersCVE-2025-39764 nvme: nvme-fc: Ensure -ioerrwork is cancelled in...

9.8CVSS6AI score0.0079EPSS
SaveExploits3References103
Tenable Nessus
Tenable Nessus
•added 2026/06/06 12:00 a.m.•32 views

EulerOS Virtualization 2.12.0 : kernel (EulerOS-SA-2026-2102)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : netfilter: ctnetlink: remove refcounting in expectation dumpersCVE-2025-39764 nvme: nvme-fc: Ensure -ioerrwork is cancelled in...

9.8CVSS6AI score0.0079EPSS
SaveExploits3References103
CBLMariner
CBLMariner
•added 2026/06/05 12:59 p.m.•21 views

CVE-2026-34956 affecting package openvswitch for versions less than 3.3.0-3

CVE-2026-34956 affecting package openvswitch for versions less than 3.3.0-3. A patched version of the package is available...

5.9CVSS5.4AI score0.00635EPSS
SaveExploits0
OSV
OSV
•added 2026/06/04 12:10 p.m.•10 views

SUSE-SU-2026:22068-1 Security update for openvswitch

This update for openvswitch fixes the following issue - CVE-2026-34956: Invalid memory access in conntrack FTP alg bsc1261273...

5.9CVSS5.2AI score0.00635EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/05/29 1:15 a.m.•19 views

SUSE CVE-2026-46165

In the Linux kernel, the following vulnerability has been resolved: openvswitch: vport: fix self-deadlock on release of tunnel ports vports are used concurrently and protected by RCU, so netdevput must happen after the RCU grace period. So, either in an RCU call or after the synchronizenet. The...

5.5CVSS5.7AI score0.00125EPSS
SaveExploits0References18
RedhatCVE
RedhatCVE
•added 2026/05/28 9:11 p.m.•22 views

CVE-2026-46165

A flaw was found in the Linux kernel's openvswitch vport component. This vulnerability arises during the release of tunnel ports, where a self-deadlock can occur. This prevents the vport from being properly freed and its references released, leading to a system deadlock during device removal. Suc...

5.5CVSS5.6AI score0.00125EPSS
SaveExploits0References4
NVD
NVD
•added 2026/05/28 10:16 a.m.•22 views

CVE-2026-46165

In the Linux kernel, the following vulnerability has been resolved: openvswitch: vport: fix self-deadlock on release of tunnel ports vports are used concurrently and protected by RCU, so netdevput must happen after the RCU grace period. So, either in an RCU call or after the synchronizenet. The...

5.5CVSS0.00125EPSS
SaveExploits0References6
OSV
OSV
•added 2026/05/28 10:16 a.m.•15 views

UBUNTU-CVE-2026-46165

In the Linux kernel, the following vulnerability has been resolved: openvswitch: vport: fix self-deadlock on release of tunnel ports vports are used concurrently and protected by RCU, so netdevput must happen after the RCU grace period. So, either in an RCU call or after the synchronizenet. The...

5.5CVSS5.8AI score0.00125EPSS
SaveExploits0References19
UbuntuCve
UbuntuCve
•added 2026/05/28 10:16 a.m.•15 views

CVE-2026-46165

In the Linux kernel, the following vulnerability has been resolved: openvswitch: vport: fix self-deadlock on release of tunnel ports vports are used concurrently and protected by RCU, so netdevput must happen after the RCU grace period. So, either in an RCU call or after the synchronizenet. The...

5.5CVSS5.7AI score0.00125EPSS
SaveExploits0References18
Cvelist
Cvelist
•added 2026/05/28 9:36 a.m.•42 views

CVE-2026-46165 openvswitch: vport: fix self-deadlock on release of tunnel ports

In the Linux kernel, the following vulnerability has been resolved: openvswitch: vport: fix self-deadlock on release of tunnel ports vports are used concurrently and protected by RCU, so netdevput must happen after the RCU grace period. So, either in an RCU call or after the synchronizenet. The...

0.00125EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/05/28 9:36 a.m.•22 views

EUVD-2026-32792

In the Linux kernel, the following vulnerability has been resolved: openvswitch: vport: fix self-deadlock on release of tunnel ports vports are used concurrently and protected by RCU, so netdevput must happen after the RCU grace period. So, either in an RCU call or after the synchronizenet. The...

5.7AI score0.00125EPSS
SaveExploits0References5
CVE
CVE
•added 2026/05/28 9:36 a.m.•57 views

CVE-2026-46165

CVE-2026-46165 affects the Linux kernel openvswitch vport code, where a self-deadlock could occur on tunnel port release due to improper ordering between RCU callbacks and RTNL/normally synchronized code paths. The root cause: vports are protected by RCU and must have netdev_put() after the RCU g...

5.5CVSS5.7AI score0.00125EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2026/05/28 9:36 a.m.•13 views

CVE-2026-46165 openvswitch: vport: fix self-deadlock on release of tunnel ports

In the Linux kernel, the following vulnerability has been resolved: openvswitch: vport: fix self-deadlock on release of tunnel ports vports are used concurrently and protected by RCU, so netdevput must happen after the RCU grace period. So, either in an RCU call or after the synchronizenet. The...

6AI score
SaveExploits0References9
attackerkb
attackerkb
•added 2026/05/28 9:36 a.m.•17 views

CVE-2026-46165

In the Linux kernel, the following vulnerability has been resolved: openvswitch: vport: fix self-deadlock on release of tunnel ports vports are used concurrently and protected by RCU, so netdevput must happen after the RCU grace period. So, either in an RCU call or after the synchronizenet. The...

5.8AI score0.00125EPSS
SaveExploits0References7Affected Software1
CNNVD
CNNVD
•added 2026/05/28 12:00 a.m.•17 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a deadlock issue when releasing tunnel ports in openvswitch vports. This issue may cause referenc...

5.7AI score0.00125EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/28 12:00 a.m.•0 views

CVE-2026-46165: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: openvswitch: vport: fix self-deadlock on release of tunnel ports vports are used concurrently and protected by RCU, so netdevput must happen after the RCU grace period. So, either in an RCU call or after the synchronizenet. The...

5.5CVSS5.9AI score0.00125EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2026/05/27 12:57 p.m.•24 views

SUSE CVE-2026-45840

In the Linux kernel, the following vulnerability has been resolved: openvswitch: cap upcall PID array size and pre-size vport replies The vport netlink reply helpers allocate a fixed-size skb with nlmsgnewNLMSGDEFAULTSIZE, ... but serialize the full upcall PID array via ovsvportgetupcallportids...

6.5CVSS5.9AI score0.00162EPSS
SaveExploits0References17
NVD
NVD
•added 2026/05/27 11:16 a.m.•25 views

CVE-2026-45840

In the Linux kernel, the following vulnerability has been resolved: openvswitch: cap upcall PID array size and pre-size vport replies The vport netlink reply helpers allocate a fixed-size skb with nlmsgnewNLMSGDEFAULTSIZE, ... but serialize the full upcall PID array via ovsvportgetupcallportids...

5.5CVSS0.00162EPSS
SaveExploits0References8
OSV
OSV
•added 2026/05/27 11:16 a.m.•36 views

AZL-88709 CVE-2026-45840 affecting package kernel for versions less than 6.6.141.1-1

In the Linux kernel, the following vulnerability has been resolved: openvswitch: cap upcall PID array size and pre-size vport replies The vport netlink reply helpers allocate a fixed-size skb with nlmsgnewNLMSGDEFAULTSIZE, ... but serialize the full upcall PID array via ovsvportgetupcallportids...

5.5CVSS5.9AI score0.00162EPSS
SaveExploits0References1
Rows per page
Query Builder