CVE-2026-74290

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsflow: Dont expose folded kernel pointers The flow classifier falls back to addrfold for fields that are missing from packet headers. In map mode, userspace controls mask, xor, rshift, addend and divisor, and can...

CVE-2026-74290

The CVE-2026-74290 issue affects the Linux kernel’s net/sched cls_flow flow classifier. The vulnerability arises because, in map mode, userspace can manipulate mask, xor, rshift, addend and divisor and observe the resulting classid via statistics, enabling a tc classifier in a user/network namesp...

CVE-2026-74290 net/sched: cls_flow: Dont expose folded kernel pointers

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsflow: Dont expose folded kernel pointers The flow classifier falls back to addrfold for fields that are missing from packet headers. In map mode, userspace controls mask, xor, rshift, addend and divisor, and can...

EUVD-2026-59397

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Avoid displaying the kernel pointer While dumping the info on MR using the rdma tool, we dump the mrhwq which is a kernel pointer. There is no need to expose this value for end user. So avoid it...

PT-2026-72726

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls flow: Dont expose folded kernel pointers The flow classifier falls back to addr fold for fields that are missing from packet headers. In map mode, userspace controls mask, xor, rshift, addend and divisor, and can...

EUVD-2021-24663

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2021-38205

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drivers/net/ethernet/xilinx/xilinxemaclite.c in the Linux kernel before 5.13.3 makes it easier for attackers to defeat an ASLR protection mechanism because it...

An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler it is possible to extract arbitrary heap data relative to the start of the text including pointers and sensitive strings. The fixed versions are 3.0.7 3.1.5 3.2.4 and 3.3.1.

...