CVE-2026-68285 LoongArch: BPF: Fix memory leak in bpf_jit_free()

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Fix memory leak in bpfjitfree When bpfintjitcompile is called for subprograms, it returns early during the first pass !prog-isfunc || extrapass is false, keeping ctx-offset alive for the subsequent extra pass. If...

CVE-2026-68129 gve: fix Rx queue stall on alloc failure

In the Linux kernel, the following vulnerability has been resolved: gve: fix Rx queue stall on alloc failure When the system is under extreme memory pressure, page allocations can fail during the Rx buffer refill loop. If the number of buffers posted to hardware falls below a critical low thresho...

CVE-2026-68127 ila: reload IPv6 header after pskb_may_pull in checksum adjust

In the Linux kernel, the following vulnerability has been resolved: ila: reload IPv6 header after pskbmaypull in checksum adjust ilacsumadjusttransport caches ip6h = ipv6hdrskb before calling pskbmaypull. On a non-linear skb whose transport header sits in a page fragment, pskbmaypull can call...

CVE-2026-68127

CVE-2026-68127 describes a Linux kernel flaw in the Identifier-Locator Addressing (ILA) subsystem where a slab-use-after-free can occur during IPv6 packet processing if a transport-header-based path is used. Specifically, ila_csum_adjust_transport() caches ip6h before pskb_may_pull(), and non-lin...

CVE-2026-68123 openvswitch: fix GSO userspace truncation underflow

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix GSO userspace truncation underflow OVSACTIONATTRTRUNC currently stores a delta from the original skb length in OVSCBskb-cutlen. When a later userspace action segments a GSO skb, queuegsopackets reuses that delta...

CVE-2026-68120

CVE-2026-68120 affects the Linux kernel rtase driver. The vulnerability stems from hardware packet parsing that may trigger a TX hang when processing incomplete IPv4/IPv6/TCP/UDP headers or certain UDP packets with insufficient transport data, causing a Denial of Service. The kernel release notes...

CVE-2026-68120 rtase: Workaround for TX hang caused by hardware packet parsing

In the Linux kernel, the following vulnerability has been resolved: rtase: Workaround for TX hang caused by hardware packet parsing The hardware performs packet parsing before packet transmission. Parsing incomplete IPv4, IPv6, TCP, or UDP headers may trigger a TX hang because the hardware parser...

EUVD-2026-55501

In the Linux kernel, the following vulnerability has been resolved: rtase: Workaround for TX hang caused by hardware packet parsing The hardware performs packet parsing before packet transmission. Parsing incomplete IPv4, IPv6, TCP, or UDP headers may trigger a TX hang because the hardware parser...

PT-2026-69687

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drop monitor component where size calculations for 64-bit attributes are incorrect. The functions net dm packet report fill and net dm hw packet report fill use nl...

Linux Distros Unpatched Vulnerability : CVE-2026-68129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gve: fix Rx queue stall on alloc failure When the system is under extreme memory pressure, page allocations can fail during the Rx buffer refill loop. If the...

CVE-2026-68120: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: rtase: Workaround for TX hang caused by hardware packet parsing The hardware performs packet parsing before packet transmission. Parsing incomplete IPv4, IPv6, TCP, or UDP headers may trigger a TX hang because the hardware parser...

Linux net/packet/af_packet.c DoS

The vulnerability in the net/packet/afpacket.c component of the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

Photon OS 5.0: Wireshark PHSA-2026-5.0-92-0862

An update of the wireshark package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0862. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2026-68338: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/packet: avoid fanout hook re-registration after unregister packetsetring temporarily detaches a socket from packet delivery while reconfiguring its ring. It records the previous running state, clears po-num, unregisters the...

PT-2026-69738

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the net/packet component during the execution of the packet set ring function. When reconfiguring a ring, the function temporarily detaches a socket from packe...

PT-2026-69527

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the Linux kernel when processing remote IPv6 packets routed through a configured ILA csum-adjust-transport route or receive-side mapping. The functi...

PoC2Rule

PoC2Rule Agent Automatically convert PoC Proof of Concept f...

Exploit for Deserialization of Untrusted Data in Jetbrains Teamcity

teamcity-CVE-2026-63077-pcap teamcity teamcity-CVE-2026-63077...

Debian dsa-6420 : pdns-backend-bind - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6420 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6420-1 [email protected] https://www.debian.org/security/...

FreeBSD : DNSDist, PowerDNS, PowerDNS Recursor -- vulnerability (7e45952f-9268-11f1-ab2f-3c7c3fba4204)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 7e45952f-9268-11f1-ab2f-3c7c3fba4204 advisory. CVE-2026-52682: A crafted DNS packet can cause increased memory and CPU consumption. Tenable has...