CVE-2026-64563_EXP

CVE-2026-64563EXP Solo per ricerca sperimentale. Il codice di prefetch e nperm richiede il riferimento di memoria impostato da set.gdb non è allegato; non essendo stato ottimizzato, la probabilità di successo è bassa. L'autore ha notato che l'autore della vulnerabilità ha già pubblicato le...

CVE-2021-43267

CVE-2021-43267 Exploit PoC locale per CVE-2021-43267 Linux TIPC Riferimento: https://haxx.in/posts/pwning-tipc/...

CVE-2024-36886

Pesquisa de Vulnerabilidades N-Day Visão Geral Este projeto foca em vulnerabilidades N-Day no kernel Linux, com ênfase na compreensão do seu ciclo de vida, análise do seu impacto e exploração de estratégias de mitigação. Vulnerabilidades N-Day são falhas divulgadas publicamente que permanecem sem...

CVE-2022-0435-Poc

CVE-2022-0435（栈溢出） wget https://releases.ubuntu.com/jammy/ubuntu-22.04.5-live-server-amd64.iso mkdir kernel wget https://kernel.ubuntu.com/mainline/v5.13/amd64/linux-headers-5.13.0-051300-generic5.13.0-051300.202106272333amd64.deb wget...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098696)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098696 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer The reproduction steps: 1...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098741)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098741 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipcconnclose. syzbot reported a null-ptr-deref in tipcconnclose duri...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098770)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098770 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipcmonreinitself. syzbot reported use-after-free of...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098923)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098923 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix use-after-free of the discoverer in tipcdiscrcv bearerdisable frees b-disc with...

The vulnerabilities of the functions tipc_topsrv_accept() and tipc_topsrv_stop() in the net/tipc/topsrv.c module, which are part of the TIPC protocol implementation in Linux kernel, allow a attacker to cause a service failure.

The vulnerability of the functions tipctopsrvaccept and tipctopsrvstop in the net/tipc/topsrv.c module, which is part of the TIPC protocol implementation in Linux operating systems, relates to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the tipc_group_proto_rcv() function in the net/tipc/group.c module of the TIPC protocol implementation in Linux’s operating system allows a hacker to cause a service failure.

The vulnerability of the tipcgroupprotorcv function in the net/tipc/group.c module of the TIPC protocol implementation in Linux’s operating system is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-74609

A flaw was found in the Linux kernel's TIPC Transparent Inter-Process Communication protocol implementation. A race condition exists in the tipcnodelinkdown function where a link pointer is cached without proper locking. This allows another process to free the link object while the cached pointer...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: tipc: Force a dst refcount before doing decryption As stated in commit 3bc07321ccc2 “xfrm: Force a dst refcount before entering the xfrm type handlers”: “Crypto requests might return asynchronously. In this case, we leave the rcu...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: In net:tIPC, there is a fix for the refcount warning in tipcaeadencrypt. The syzbot report identified a refcount warning 1 caused by calling getnet on a network namespace that is being destroyed refcount=0. This occurs when a TIP...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: tipc: skblinearize the head skb when reassembling msgs It’s not a good idea to append the frag skb to a skb’s fraglist if the fraglist already contains skbs from elsewhere. For example, this frag skb was created by pskbcopy, wher...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: tipc: Wait and exit until all work queues are completed On some hosts, a crash could occur simply by repeating these commands several times: bash modprobe tipc tipc bearer enable media udp name UDP1 localip 127.0.0.1 rmmod tipc T...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: tipc: Fixed a use-after-free in the kernel socket during the cleanupbearer function. syzkaller reported a use-after-free of the UDP kernel socket in cleanupbearer. This issue occurred without any reproduction steps. 01 When...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/tipc: fixed the slab-use-after-free issue in tipcaeadencryptdone+0x4bd/0x510 net/tipc/crypto.c:840. Syzbot reported a slab-use-after-free with the following call trace:...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: tipc: The issue in tipcnlcompatnametabledumpheader regarding the check of the msg-req TLV length was fixed. This is a follow-up to commit 974cb0e3e7c9 “tipc: fixing uninit-value in tipcnlcompatnametabledump", where a type cast fr...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: tipc: Changed the nlapolicy for bearer-related names to NLANULSTRING. The syzbot reported the following uninit-value access issues 1: ===================================================== BUG: KMSAN: uninit-value in strlen in...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: tipc: The process of creating a BC link has been moved back to tipcnodecreate. Shuang Li reported a NULL pointer dereference crash: - Bug: NULL pointer dereference in the kernel; address: 0000000000000068 - RIP: 0010:...