CVE-2026-45859 netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinkqueue: do shared-unconfirmed check before segmentation Ulrich reports a regression with nfqueue: If an application did not set the 'FGSO' capability flag and a gso packet with an unconfirmed nfconn entry is...

CVE-2026-45859

The CVE-2026-45859 entry describes a Linux kernel netfilter nfnetlink_queue issue where a shared-unconfirmed nf_conn entry is not checked before segmentation, causing UDP packets to be dropped instead of queued when F_GSO is not set and a GSO packet arrives. The regression arose due to the check ...

CVE-2026-45844

In the Linux kernel, the following vulnerability has been resolved: netfilter: arptables: fix IEEE1394 ARP payload parsing Weiming Shi says: "arppacketmatch unconditionally parses the ARP payload assuming two hardware addresses are present source and target. However, IPv4-over-IEEE1394 ARP RFC 27...

AZL-88577 CVE-2026-45844 affecting package kernel for versions less than 6.6.141.1-1

In the Linux kernel, the following vulnerability has been resolved: netfilter: arptables: fix IEEE1394 ARP payload parsing Weiming Shi says: "arppacketmatch unconditionally parses the ARP payload assuming two hardware addresses are present source and target. However, IPv4-over-IEEE1394 ARP RFC 27...

CVE-2026-45843

In the Linux kernel, the following vulnerability has been resolved: slip: bound decode reads against the compressed packet length slhcuncompress parses a VJ-compressed TCP header by advancing a pointer through the packet via decode and pull16. Neither helper bounds-checks against isize, and decod...

CVE-2026-45844 netfilter: arp_tables: fix IEEE1394 ARP payload parsing

In the Linux kernel, the following vulnerability has been resolved: netfilter: arptables: fix IEEE1394 ARP payload parsing Weiming Shi says: "arppacketmatch unconditionally parses the ARP payload assuming two hardware addresses are present source and target. However, IPv4-over-IEEE1394 ARP RFC 27...

CVE-2026-45844 netfilter: arp_tables: fix IEEE1394 ARP payload parsing

In the Linux kernel, the following vulnerability has been resolved: netfilter: arptables: fix IEEE1394 ARP payload parsing Weiming Shi says: "arppacketmatch unconditionally parses the ARP payload assuming two hardware addresses are present source and target. However, IPv4-over-IEEE1394 ARP RFC 27...

CVE-2026-45844

In the Linux kernel, the following vulnerability has been resolved: netfilter: arptables: fix IEEE1394 ARP payload parsing Weiming Shi says: "arppacketmatch unconditionally parses the ARP payload assuming two hardware addresses are present source and target. However, IPv4-over-IEEE1394 ARP RFC 27...

EUVD-2026-32170

In the Linux kernel, the following vulnerability has been resolved: netfilter: arptables: fix IEEE1394 ARP payload parsing Weiming Shi says: "arppacketmatch unconditionally parses the ARP payload assuming two hardware addresses are present source and target. However, IPv4-over-IEEE1394 ARP RFC 27...

CVE-2026-45844

Summary: CVE-2026-45844 affects the Linux kernel netfilter arp_tables on IEEE1394 (FireWire) interfaces. The vulnerability arises because arp_packet_match() unconditionally parses the ARP payload assuming both source and target hardware addresses exist, while IPv4-over-IEEE1394 ARP omits the targ...

EUVD-2026-32169

In the Linux kernel, the following vulnerability has been resolved: slip: bound decode reads against the compressed packet length slhcuncompress parses a VJ-compressed TCP header by advancing a pointer through the packet via decode and pull16. Neither helper bounds-checks against isize, and decod...

CVE-2026-45843 slip: bound decode() reads against the compressed packet length

In the Linux kernel, the following vulnerability has been resolved: slip: bound decode reads against the compressed packet length slhcuncompress parses a VJ-compressed TCP header by advancing a pointer through the packet via decode and pull16. Neither helper bounds-checks against isize, and decod...

CVE-2026-45843

CVE-2026-45843 affects the Linux kernel’s SLIP/VJ-compressed TCP header handling (slip and slhc_uncompress). The vulnerability stems from decode() and pull16() not enforcing bounds against the packet end, and decode() masking its return value to 0xFFFF, causing potential over-reads when a compres...

CVE-2026-45838

In the Linux kernel, the following vulnerability has been resolved: bpf: fix end-of-list detection in cgroupstoragegetnextkey listnextentry never returns NULL -- when the current element is the last entry it wraps to the list head via containerof. The subsequent NULL check is therefore dead code...

org.yamcs:distribution (4.10.9), org.yamcs:packet-viewer (4.10.9) +4 more potentially affected by CVE-2026-44632 via org.yamcs:yamcs-core (4.10.9)

org.yamcs:yamcs-core MAVEN version 4.10.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:distribution 4.10.9 - org.yamcs:packet-viewer 4.10.9 - org.yamcs:simulation 4.10.9 - org.yamcs:yamcs-artemis...

org.yamcs:distribution (4.10.7), org.yamcs:packet-viewer (4.10.7) +4 more potentially affected by CVE-2026-44596 via org.yamcs:yamcs-core (4.10.7)

org.yamcs:yamcs-core MAVEN version 4.10.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:distribution 4.10.7 - org.yamcs:packet-viewer 4.10.7 - org.yamcs:simulation 4.10.7 - org.yamcs:yamcs-artemis...

org.yamcs:distribution (4.10.5), org.yamcs:packet-viewer (4.10.5) +4 more potentially affected by CVE-2026-44596 via org.yamcs:yamcs-core (4.10.5)

org.yamcs:yamcs-core MAVEN version 4.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:distribution 4.10.5 - org.yamcs:packet-viewer 4.10.5 - org.yamcs:simulation 4.10.5 - org.yamcs:yamcs-artemis...

org.yamcs:distribution (4.10.6), org.yamcs:packet-viewer (4.10.6) +4 more potentially affected by CVE-2026-44595 via org.yamcs:yamcs-core (4.10.6)

org.yamcs:yamcs-core MAVEN version 4.10.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:distribution 4.10.6 - org.yamcs:packet-viewer 4.10.6 - org.yamcs:simulation 4.10.6 - org.yamcs:yamcs-artemis...

PT-2026-43677

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The slhc uncompress function parses VJ-compressed TCP headers by advancing a pointer through the packet using decode and pull16. These helper functions do not perform bounds-checks again...

PT-2026-43671

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the arena vm close function during a fork operation. The arena vm open function increments the vml-mmap count but fails to register the child Virtual...