656 matches found
CVE-2025-39913
CVE-2025-39913 - Linux Kernel eBPF SOCKMAP UAF Author: Byte Reaper My platform :https://www.bytrep.com/ Description This repository contains a technical proof-of-concept for CVE-2025-39913, a vulnerability in the Linux kernel's tcpbpfsendverdict function. When bpfmsgcorkbytes fails to allocate...
CVE-2026-98925
A flaw was found in the Linux kernel's BPF Berkeley Packet Filter sockmap subsystem. This flaw allows a local attacker to cause a Denial of Service DoS when redirecting network traffic back to the originating socket. The kernel improperly double-counts sequence numbers for received TCP Transmissi...
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2025-68358: btrfs: fix racy bitfield write in btrfsclearspaceinfofull bsc1255531. CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit bsc1264267...
SUSE CVE-2026-98925
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix self-redirect copiedseq double-counting When a BPF streamverdict program redirects an skb back to the same socket self-redirect with BPFFINGRESS, skpsockverdictapply calls tcpeatskb which advances tcpsk-copiedse...
Linux Distros Unpatched Vulnerability : CVE-2026-98925
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf, sockmap: Fix self-redirect copiedseq double-counting When a BPF streamverdict program redirects an skb back to the same socket self-redirect with...
DEBIAN-CVE-2026-98925
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix self-redirect copiedseq double-counting When a BPF streamverdict program redirects an skb back to the same socket self-redirect with BPFFINGRESS, skpsockverdictapply calls tcpeatskb which advances tcpsk-copiedse...
AZL-110995 CVE-2026-98925 affecting package kernel for versions less than 6.6.159.1-1
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix self-redirect copiedseq double-counting When a BPF streamverdict program redirects an skb back to the same socket self-redirect with BPFFINGRESS, skpsockverdictapply calls tcpeatskb which advances tcpsk-copiedse...
CVE-2026-98925
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix self-redirect copiedseq double-counting When a BPF streamverdict program redirects an skb back to the same socket self-redirect with BPFFINGRESS, skpsockverdictapply calls tcpeatskb which advances tcpsk-copiedse...
CVE-2026-98925
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix self-redirect copiedseq double-counting When a BPF streamverdict program redirects an skb back to the same socket self-redirect with BPFFINGRESS, skpsockverdictapply calls tcpeatskb which advances tcpsk-copiedse...
UBUNTU-CVE-2026-98925
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix self-redirect copiedseq double-counting When a BPF streamverdict program redirects an skb back to the same socket self-redirect with BPFFINGRESS, skpsockverdictapply calls tcpeatskb which advances tcpsk-copiedse...
CVE-2026-98925
The Linux kernel contains a vulnerability in bpf, sockmap where a BPF stream_verdict program performing a self-redirect (with BPF_F_INGRESS ) causes double-counting of tcp_sk->copied_seq. When sk_psock_verdict_apply() calls tcp_eat_skb(), it advances the sequence counter; however, the same pac...
CVE-2026-98925 bpf, sockmap: Fix self-redirect copied_seq double-counting
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix self-redirect copiedseq double-counting When a BPF streamverdict program redirects an skb back to the same socket self-redirect with BPFFINGRESS, skpsockverdictapply calls tcpeatskb which advances tcpsk-copiedse...
EUVD-2026-108891
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix self-redirect copiedseq double-counting When a BPF streamverdict program redirects an skb back to the same socket self-redirect with BPFFINGRESS, skpsockverdictapply calls tcpeatskb which advances tcpsk-copiedse...
CVE-2026-98925 bpf, sockmap: Fix self-redirect copied_seq double-counting
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix self-redirect copiedseq double-counting When a BPF streamverdict program redirects an skb back to the same socket self-redirect with BPFFINGRESS, skpsockverdictapply calls tcpeatskb which advances tcpsk-copiedse...
CVE-2026-98925
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix self-redirect copiedseq double-counting When a BPF streamverdict program redirects an skb back to the same socket self-redirect with BPFFINGRESS, skpsockverdictapply calls tcpeatskb which advances tcpsk-copiedse...
PT-2026-121897
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF sockmap component where a BPF stream verdict program performing a self-redirect with BPF F INGRESS causes the copied seq variable to be double-counted. This...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143059)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143059 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix skredir use-after-free in send verdict skpsockmsgverdict takes a socket referen...
Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53184)
"In the Linux kernel, the following vulnerability has been resolved: udp: clear skb-dev before running a sockmap verdict On the UDP receive path skb-dev is repurposed as devscratch the truesize/state cache set by udpsetdevscratch, through the union struct netdevice dev; unsigned long devscratch; ...
Linux Distros Unpatched Vulnerability : CVE-2026-98588
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf, sockmap: Reject maxentries INTMAX in sockmapalloc sockmapalloc only rejects maxentries == 0 and otherwise allows any u32 value. sockmapfree then walks the...
SUSE CVE-2026-98588
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Reject maxentries INTMAX in sockmapalloc sockmapalloc only rejects maxentries == 0 and otherwise allows any u32 value. sockmapfree then walks the sks array with a signed int iterator: int i; for i = 0; i...