EUVD-2026-67476

In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: acquire ARP hw source only after skb realloc The pskbmaypull called by batadvgetvid could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an...

CVE-2026-80600 batman-adv: dat: acquire ARP hw source only after skb realloc

In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: acquire ARP hw source only after skb realloc The pskbmaypull called by batadvgetvid could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an...

CVE-2026-80600

CVE-2026-80600 affects the batman-adv module of the Linux kernel, specifically in the DAT (Distributed ARP Table) subsystem. The root cause is a use-after-free : when pskb_may_pull() is called by batadv_get_vid(), it may reallocate the buffer behind the skb, leaving variables that pointed to the ...

CVE-2026-80600 batman-adv: dat: acquire ARP hw source only after skb realloc

In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: acquire ARP hw source only after skb realloc The pskbmaypull called by batadvgetvid could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an...

CVE-2026-80601 batman-adv: gw: acquire ethernet header only after skb realloc

In the Linux kernel, the following vulnerability has been resolved: batman-adv: gw: acquire ethernet header only after skb realloc The pskbmaypull called by batadvgetvid could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an...

PT-2026-82901

In the Linux kernel, the following vulnerability has been resolved: batman-adv: gw: acquire ethernet header only after skb realloc The pskb may pull called by batadv get vid could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid ...

PT-2026-82981

In the Linux kernel, the following vulnerability has been resolved: vxlan: re-fetch eth header after route shortcircuit Before route shortcircuit, the eth header pointer is cached from eth hdrskb. Inside route shortcircuit, pskb may pull can be called, which may reallocate skb-head. In this case,...

PT-2026-82900

In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: acquire ARP hw source only after skb realloc The pskb may pull called by batadv get vid could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid a...

CVE-2026-80681: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: vxlan: re-fetch eth header after routeshortcircuit Before routeshortcircuit, the eth header pointer is cached from ethhdrskb. Inside routeshortcircuit, pskbmaypull can be called, which may reallocate skb-head. In this case,...

Linux Distros Unpatched Vulnerability : CVE-2026-80681

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: re-fetch eth header after routeshortcircuit Before routeshortcircuit, the eth header pointer is cached from ethhdrskb. Inside routeshortcircuit,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098740)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098740 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix use-after-free when processing MLD queries When processing an MLD query, a point...

The vulnerabilities of the functions lkkbd_connect() and lkkbd_disconnect() in the drivers/input/keyboard/lkkbd.c module of the Linux kernel keyboard driver allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions lkkbdconnect and lkkbddisconnect in the driver/input/keyboard/lkkbd.c module of the Linux kernel’s keyboard driver is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an...

The vulnerabilities in the functions gserial_disconnect() and gserial_resume() of the driver module drivers/usb/gadget/function/u_serial.c of the Linux operating system’s USB device drivers allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions gserialdisconnect and gserialresume in the driver module drivers/usb/gadget/function/userial.c of the Linux operating system’s USB device drivers is related to the pointer reallocation due to concurrent access to resources race condition. Exploiting this...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: arm64/sme: Set the new vector length before reallocating it. As part of fixing the allocation of the buffer for SVE states when changing the SME vector length, we introduced an immediate reallocation of the SVE state. This...

SUSE CVE-2026-74705

In the Linux kernel, the following vulnerability has been resolved: udp: fix potential use-after-free in tunnel segmentation skbudptunnelsegment gets the UDP header before ensuring the tunnel header is in the skb head. If the pull reallocates skb-head, the saved UDP header pointer is no longer...

CVE-2026-74705

In the Linux kernel, the following vulnerability has been resolved: udp: fix potential use-after-free in tunnel segmentation skbudptunnelsegment gets the UDP header before ensuring the tunnel header is in the skb head. If the pull reallocates skb-head, the saved UDP header pointer is no longer...

CVE-2026-74664

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reallocate update replies for mismatched IDs ovsflowcmdnew preallocates the optional reply skb before it takes ovsmutex and before it knows which existing flow will be updated. That is normally fine because the...

UBUNTU-CVE-2026-74705

In the Linux kernel, the following vulnerability has been resolved: udp: fix potential use-after-free in tunnel segmentation skbudptunnelsegment gets the UDP header before ensuring the tunnel header is in the skb head. If the pull reallocates skb-head, the saved UDP header pointer is no longer...

CVE-2026-74705

In the Linux kernel, the following vulnerability has been resolved: udp: fix potential use-after-free in tunnel segmentation skbudptunnelsegment gets the UDP header before ensuring the tunnel header is in the skb head. If the pull reallocates skb-head, the saved UDP header pointer is no longer...

CVE-2026-74705 udp: fix potential use-after-free in tunnel segmentation

In the Linux kernel, the following vulnerability has been resolved: udp: fix potential use-after-free in tunnel segmentation skbudptunnelsegment gets the UDP header before ensuring the tunnel header is in the skb head. If the pull reallocates skb-head, the saved UDP header pointer is no longer...