11506 matches found
CVE-2026-80875 ipvs: use parsed transport offset in TCP state lookup
In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in TCP state lookup TCP state handling reparses the skb to find the TCP header. For IPv6 it uses sizeofstruct ipv6hdr, while the surrounding IPVS code already parsed the packet with ipvsfilliphsk...
EUVD-2026-71505
In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in TCP state lookup TCP state handling reparses the skb to find the TCP header. For IPv6 it uses sizeofstruct ipv6hdr, while the surrounding IPVS code already parsed the packet with ipvsfilliphsk...
CVE-2026-80875
In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in TCP state lookup TCP state handling reparses the skb to find the TCP header. For IPv6 it uses sizeofstruct ipv6hdr, while the surrounding IPVS code already parsed the packet with ipvsfilliphsk...
CVE-2026-80760
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: reject HCICMDSYNC paramslen above 255 mgmthcicmdsync checks that the message length agrees with paramslen but puts no upper bound on it. paramslen is le16 while the parameter length in the HCI command header is a...
CVE-2026-75429
PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability in the /friend/process endpoint of the Server-Worker transport layer...
EUVD-2026-71289
In the Linux kernel, the following vulnerability has been resolved: batman-adv: reject unrepresentable multicast TVLV offsets The network and transport header fields in struct skbuff are 16-bit offsets from skb-head, and U16MAX is reserved as the unset transport header value. batadvtvlvcallhandle...
CVE-2026-80839
CVE-2026-80839 affects the batman-adv module in the Linux kernel . The root cause is that batadv_tvlv_call_handler() sets the 16-bit network and transport header offsets from a received multicast TVLV without validating whether the TVLV end offset is representable. When it exceeds the field's ran...
CVE-2026-80791
In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: zero the AUTHRECEIVE response buffer nvmetexecuteauthreceive allocates the response buffer with kmalloc sized by the host-supplied AUTHRECEIVE allocation length, but the DH-HMAC-CHAP builders write only a fixed-size...
CVE-2026-80760
CVE-2026-80760 affects the Linux kernel Bluetooth MGMT subsystem. The function mgmt_hci_cmd_sync() validates that the message length matches params_len but fails to enforce an upper bound. Since params_len is a 16-bit value while the HCI command header plen field is 8-bit (max 255), a value of 25...
CVE-2026-80760 Bluetooth: MGMT: reject HCI_CMD_SYNC params_len above 255
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: reject HCICMDSYNC paramslen above 255 mgmthcicmdsync checks that the message length agrees with paramslen but puts no upper bound on it. paramslen is le16 while the parameter length in the HCI command header is a...
Malicious Package
Overview cz-conventional-changelog-scorpius-cygnus-transport is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...
EUVD-2026-71453
PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability in the /friend/process endpoint of the Server-Worker transport layer...
PT-2026-85794
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IPVS IP Virtual Server component where TCP state handling incorrectly reparses the socket buffer skb to locate the TCP header. For IPv6, the system uses a fixed si...
PT-2026-85717
In the Linux kernel, the following vulnerability has been resolved: batman-adv: reject unrepresentable multicast TVLV offsets The network and transport header fields in struct sk buff are 16-bit offsets from skb-head, and U16 MAX is reserved as the unset transport header value. batadv tvlv call...
PT-2026-86196
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tap get user xdp function when processing VLAN-tagged frames. The skb set network header function is called prematurely, advancing the network header past the VLAN...
PT-2026-91796
In the Linux kernel, the following vulnerability has been resolved: net: tap: fix wrong transport header when sending VLAN-tagged frame In tap get user xdp, when processing a VLAN-tagged frame e.g. ETH P 8021Q, skb set network header is called first to advance network header past the VLAN tag to...
PT-2026-85601
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: reject HCI CMD SYNC params len above 255 mgmt hci cmd sync checks that the message length agrees with params len but puts no upper bound on it. params len is le16 while the parameter length in the HCI command...
CVE-2026-75429
PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability in the /friend/process endpoint of the Server-Worker transport layer...
CVE-2026-75430
PowerJob Worker version 5.1.2 and likely earlier versions exposes the /worker/deployContainer HTTP endpoint without authentication on the default transport port. This allows a remote attacker to execute arbitrary code...