15927 matches found
CVE-2026-80848 xfrm: espintcp: fix UAF during close
In the Linux kernel, the following vulnerability has been resolved: xfrm: espintcp: fix UAF during close ZDI reported and analyzed a race condition during close for espintcp sockets: espintcpclose frees emsg-skb via kfreeskb without holding any socket lock. Concurrently, the xfrmtransreinject wor...
CVE-2026-80848 xfrm: espintcp: fix UAF during close
In the Linux kernel, the following vulnerability has been resolved: xfrm: espintcp: fix UAF during close ZDI reported and analyzed a race condition during close for espintcp sockets: espintcpclose frees emsg-skb via kfreeskb without holding any socket lock. Concurrently, the xfrmtransreinject wor...
CVE-2026-80841
In the Linux kernel, the following vulnerability has been resolved: net/packet: defer vmalloc TXRING free until skbs finish AFPACKET TXRING skbs keep a raw pointer to their ring frame. The skb page references preserve page-backed ring blocks after pgvec is freed, but they do not preserve a vmallo...
CVE-2026-80797
In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: purge fragmented skbs during cleanup pn53xcommonclean purges respq before freeing the common PN533 state, but it leaves fragmentskb untouched. The fragmentation helpers queue transmit fragments there while sending lar...
CVE-2026-80784 mptcp: pm: fix memory leak from alloc-during-teardown race
In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix memory leak from alloc-during-teardown race mptcppmdestroy empties msk-pm.annolist and msk-pm.userspacepmlocaladdrlist under msk-pm.lock during socket teardown, dropping the lock between the two. A concurrent...
GHSA-W6WX-P63H-HR87 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-7JV8-R36R-863G vulnerabilities
Vulnerabilities for packages: chromium...
EUVD-2026-70777
MOOS core-moos through 10.4.0 contains a denial of service vulnerability in MOOSCommServer::ListenLoop where the accept thread performs a blocking receive without timeout during the wire-protocol handshake. An attacker can open a TCP connection to the MOOSDB port and send no data, causing the...
CVE-2026-18567: Time-of-check Time-of-use (TOCTOU) Race Condition
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Unix domain socket path in a world-writable directory...
Linux Distros Unpatched Vulnerability : CVE-2026-80738
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Check skstate before skprotocol in bpftcpsyncookie bpftcpgensyncookie and bpftcpchecksyncookie accept a socket pointer 'sk' with argument type...
PT-2026-85726
Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A race condition exists in the xfrm espintcp sockets during the close process. The espintcp close function frees emsg-skb using kfree skb without holding a socket lock. Simultaneously, t...
PT-2026-86197
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists when processing VLAN-tagged frames where the transport header is incorrectly set. In the packet parse headers function, skb set network header is called to advance the...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libevent (UTSA-2026-106173)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106173 advisory. Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of- bounds write in buffereventsock.c when...
Linux Distros Unpatched Vulnerability : CVE-2026-80849
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/tcp-ao: fix use-after-free of currentkey on reconnect to another peer tcpinboundaohash is called before bhlocksocknested is taken, with only rcureadlock hel...
The vulnerability of the `pn_socket_autobind()` function in the `net/phonet/socket.c` module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.
The vulnerability of the pnsocketautobind function in the net/phonet/socket.c module, which implements networking functions in the Linux kernel, is related to improper release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2026-85690
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Unix domain socket path in a world-writable directory...
Linux Distros Unpatched Vulnerability : CVE-2026-80848
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: espintcp: fix UAF during close ZDI reported and analyzed a race condition during close for espintcp sockets: espintcpclose frees emsg-skb via kfreeskb...
CVE-2026-85443
MOOS core-moos through 10.4.0 has a denial of service vulnerability in MOOSCommServer::ListenLoop(). The accept thread performs a blocking receive without timeout during the wire-protocol handshake. An unauthenticated network attacker can open a TCP connection to the MOOSDB port and send no data,...
