CVE-2026-14696

Zephyr RTOS Ethernet bridging contains an RX packet leak in eth_bridge_input_process() (subsys/net/l2/ethernet/bridge/bridge_input.c). When Ethernet bridging is enabled (CONFIG_NET_ETHERNET_BRIDGE), frames delivered to the local stack via eth_bridge_handle_locally() return NET_OK without actually...

EUVD-2026-68728

When Ethernet bridging is enabled CONFIGNETETHERNETBRIDGE, ethbridgeinputprocess in subsys/net/l2/ethernet/bridge/bridgeinput.c decides how each frame received on a bridge member interface is handled. For frames that must also be delivered to the local stack, the code called ethbridgehandlelocall...

CVE-2026-14696 Ethernet bridge RX packet leak enables denial of service via RX buffer-pool exhaustion

When Ethernet bridging is enabled CONFIGNETETHERNETBRIDGE, ethbridgeinputprocess in subsys/net/l2/ethernet/bridge/bridgeinput.c decides how each frame received on a bridge member interface is handled. For frames that must also be delivered to the local stack, the code called ethbridgehandlelocall...

CVE-2026-14696 Ethernet bridge RX packet leak enables denial of service via RX buffer-pool exhaustion

When Ethernet bridging is enabled CONFIGNETETHERNETBRIDGE, ethbridgeinputprocess in subsys/net/l2/ethernet/bridge/bridgeinput.c decides how each frame received on a bridge member interface is handled. For frames that must also be delivered to the local stack, the code called ethbridgehandlelocall...

CVE-2026-14366

The Silicon Labs SiWx917 WiFi driver's transmit callback siwx91xsend in drivers/wifi/siwx91x/siwx91xwifi.c frees a network packet it does not own. In the Zephyr TX path the netpkt is owned by the L2/networking stack; the driver only borrows it to copy the frame bytes into a local netbuf. Before t...

EUVD-2026-68658

The Silicon Labs SiWx917 WiFi driver's transmit callback siwx91xsend in drivers/wifi/siwx91x/siwx91xwifi.c frees a network packet it does not own. In the Zephyr TX path the netpkt is owned by the L2/networking stack; the driver only borrows it to copy the frame bytes into a local netbuf. Before t...

CVE-2026-14366 SiWx91x WiFi driver double-unref / use-after-free of caller-owned TX net_pkt

The Silicon Labs SiWx917 WiFi driver's transmit callback siwx91xsend in drivers/wifi/siwx91x/siwx91xwifi.c frees a network packet it does not own. In the Zephyr TX path the netpkt is owned by the L2/networking stack; the driver only borrows it to copy the frame bytes into a local netbuf. Before t...

CVE-2026-14366

CVE-2026-14366 affects the Silicon Labs SiWx917 WiFi driver in the Zephyr RTOS. The transmit callback siwx91x_send() in drivers/wifi/siwx91x/siwx91x_wifi.c calls net_pkt_unref() on a packet owned by the caller (ethernet_send() in subsys/net/l2/ethernet/ethernet.c), causing a use-after-free and do...

USN-8705-1 zfs-linux vulnerability

It was discovered that OpenZFS incorrectly handled authorization checks for certain ioctl operations on Linux. A local attacker could possibly use this issue to perform pool-administrative operations or access privileged information, resulting in an authorization bypass...

USN-8705-1: OpenZFS vulnerability

It was discovered that OpenZFS incorrectly handled authorization checks for certain ioctl operations on Linux. A local attacker could possibly use this issue to perform pool-administrative operations or access privileged information, resulting in an authorization bypass...

CVE-2026-64607

A flaw was found in Apache HttpComponents Client, specifically in its classic input/output I/O model. When processing a response message with an invalid or unsupported Content-Encoding header, the client fails to properly release the underlying network connection. This connection leak can lead to...

PT-2026-83959

When Ethernet bridging is enabled CONFIG NET ETHERNET BRIDGE, eth bridge input process in subsys/net/l2/ethernet/bridge/bridge input.c decides how each frame received on a bridge member interface is handled. For frames that must also be delivered to the local stack, the code called eth bridge...

PT-2026-83897

Name of the Vulnerable Software and Affected Versions Silicon Labs SiWx917 WiFi driver affected versions not specified Description The transmit callback function siwx91x send in the WiFi driver incorrectly releases a network packet owned by the L2 networking stack. This occurs when the CONFIG WIF...

PT-2026-83972

net ipv6 send ns in subsys/net/ip/ipv6 nbr.c allocates a transmit net pkt for a Neighbor Solicitation. When it is called with a data packet pending on an unresolved neighbor and that neighbor's pending queue is already non-empty an NS is already outstanding, the function appends the data packet a...

MAL-2026-15570 Malicious code in node-net-pool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c6bb87249429b2a3f3791589075bf872a433bd47a33b152f6809ccf94b1328 package.json declares a postinstall hook node index.js that runs automatically on npm install. The shipped index.js contains no networking or...

Malicious code in node-net-pool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c6bb87249429b2a3f3791589075bf872a433bd47a33b152f6809ccf94b1328 package.json declares a postinstall hook node index.js that runs automatically on npm install. The shipped index.js contains no networking or...

Windows-Non-Paged-Pool-Overflow-Exploitation

Índice Índice Introdução Introdução a Named Pipes Exploração Espalhamento do pool não paginado Divulgação de memória/Leitura arbitrária Controle completo sobre os dados de transbordo Controle limitado sobre os dados de transbordo Escrita arbitrária Liberação arbitrária de objetos...

SUSE CVE-2026-72059

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: destroy DMA pool on CLDMA late init failure t7xxcldmalateinit creates mdctrl-gpddmapool before initializing the TX and RX rings. If any ring initialization fails, the error path frees the already initialized ring...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wayland (UTSA-2025-002252)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002252 advisory. An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is maintained as an int; on...

CVE-2026-78684

A flaw was found in vLLM. Unauthenticated attackers can exploit this vulnerability by activating the DeepStream backend during a request. This allows them to initialize the process-wide GPU decode pool and submit video that bypasses resource controls, leading to a partial denial of service for...