129464 matches found
xfrm: espintcp: do not reuse an in-progress partial send
...
RDMA/srp: bound SRP_RSP sense copy by the received length
...
bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb
...
ppp: require CAP_NET_ADMIN in target netns for unattached ioctls
...
sctp: fix uninit-value in __sctp_rcv_asconf_lookup()
...
net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr
...
nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers
...
Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error
...
sctp: stream: fully roll back denied add-stream state
...
Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER
...
udp: clear skb->dev before running a sockmap verdict
...
sctp: purge outqueue on stale COOKIE-ECHO handling
...
libslirp TCP URG OOB Read Information Leak
...
tcp: restrict SO_ATTACH_FILTER to priv users
...
nexthop: fix IPv6 route referencing IPv4 nexthop
...
RLSA-2026:30129 Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: rxrpc: fix RESPONSE authenticator parser OOB read CVE-2026-31636 kernel: ipv6: icmp: clear skb2-cb in ip6errgenicmpv6unreach CVE-2026-43038 kernel: tcp: fix potential race in...
CVE-2026-53228
A flaw was found in the Linux kernel's Simple Internet Transition SIT tunnel driver for IPv6. When processing network traffic with Generic Segmentation Offload GSO enabled, the driver may use a stale pointer to the inner IPv6 header after the socket buffer skb head has been reallocated. This can...
[SECURITY] Fedora 44 Update: nginx-1.30.3-1.fc44
Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 and IMAP protocols, with a strong focus on high concurrency, performance and low memory usage...
PT-2026-53225
Name of the Vulnerable Software and Affected Versions mcp Python SDK versions prior to 1.27.2 Description Principal confusion exists in the HTTP transports of the mcp Python SDK. Specifically, the SSE and Streamable HTTP stateful mode routed sessions fail to verify if the principal matches the...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the StorageInterface.parentTraversalGuard function. An attacker can access arbitrary files on the host filesystem by submitting a specially crafted kestra:// URI containing URL-encoded directory traversal...