CVE-2026-98233

The Linux kernel contains a vulnerability in net/packet where the tpacket_rcv() function fails to release a claimed V1 or V2 ring slot if the virtio-net header conversion fails. This error path leaves the ownership bit set, which can cause an issue where an unsupported UDP GSO packet renders the ...

EUVD-2026-93161

In the Linux kernel, the following vulnerability has been resolved: net/packet: clear RX owner on VNET header error Commit 61fad6816fc1 "net/packet: tpacketrcv: avoid a producer race condition" added rxownermap and made tpacketrcv claim a V1 or V2 ring slot before converting the virtio-net header...

CVE-2026-98233 net/packet: clear RX owner on VNET header error

In the Linux kernel, the following vulnerability has been resolved: net/packet: clear RX owner on VNET header error Commit 61fad6816fc1 "net/packet: tpacketrcv: avoid a producer race condition" added rxownermap and made tpacketrcv claim a V1 or V2 ring slot before converting the virtio-net header...

CVE-2026-98233

In the Linux kernel, the following vulnerability has been resolved: net/packet: clear RX owner on VNET header error Commit 61fad6816fc1 "net/packet: tpacketrcv: avoid a producer race condition" added rxownermap and made tpacketrcv claim a V1 or V2 ring slot before converting the virtio-net header...

CLEANSTART-2026-ZF54924 incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs

CVE-2026-46597 affects multiple packages. An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs. See references for individual vulnerability details...

CVE-2026-104037

A vulnerability exists in SSSD where a local attacker can trigger a denial of service (DoS) . By sending a specially crafted request with an invalid packet length to the autofs responder UNIX socket , the attacker can cause an integer underflow and an out-of-bounds memory read . This flaw leads t...

CVE-2026-102165: Stack-based Buffer Overflow

On affected Arista Wi-Fi access points, an unauthenticated attacker with network access to the capture service can send a crafted packet to cause the service to crash or potentially achieve remote code execution. This exploit requires an uncommonly used non-default streaming mode...

CVE-2026-98233: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/packet: clear RX owner on VNET header error Commit 61fad6816fc1 "net/packet: tpacketrcv: avoid a producer race condition" added rxownermap and made tpacketrcv claim a V1 or V2 ring slot before converting the virtio-net header...

PT-2026-106606

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: ring the doorbell if a burst ends in a drop fbnic tx map skips the doorbell write, and the completion request, for every packet handed to it with xmit more set, counting on the packet which ends the burst to publish...

Wireshark 1.8.x < 1.8.13 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.8.13. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.8.13 advisory. - Buffer overflow in the mpegread function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x befo...

SUSE SLES15 Security Update : valkey (SUSE-SU-2026:4491-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4491-1 advisory. This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for...

PT-2026-106562

In the Linux kernel, the following vulnerability has been resolved: net/packet: clear RX owner on VNET header error Commit 61fad6816fc1 "net/packet: tpacket rcv: avoid a producer race condition" added rx owner map and made tpacket rcv claim a V1 or V2 ring slot before converting the virtio-net...

PT-2026-107283

In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data...

PT-2026-107151

On affected Arista Wi-Fi access points, an unauthenticated attacker with network access to the capture service can send a crafted packet to cause the service to crash or potentially achieve remote code execution. This exploit requires an uncommonly used non-default streaming mode...

Wireshark 1.12.x < 1.12.12 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.12.12. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.12.12 advisory. - epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 1.12.x before 1.12.12 mishandles...

SUSE SLES16 Security Update : valkey (SUSE-SU-2026:23986-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:23986-1 advisory. This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for...

CVE-2026-98306: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: seg6: set IPSKBL3SLAVE from IP6SKBL3SLAVE on IPIP decapsulation When an SRv6 packet arrives on an interface enslaved to a VRF, vrfip6rcv sets IP6SKBL3SLAVE in IP6CB, but decapandvalidate has never set IPSKBL3SLAVE in IPCB. The bi...

Wireshark 1.8.x < 1.8.12 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.8.12. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.8.12 advisory. - Multiple buffer overflows in the createntlmsspv2key function in epan/dissectors/packet-ntlmssp.c in t...

Wireshark 1.4.x < 1.4.14 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.4.14. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.4.14 advisory. - epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.4.x before 1.4.14, 1.6.x before 1.6....

Wireshark 1.6.x < 1.6.15 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.6.15. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.6.15 advisory. - The dissectberchoice function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark...