1298 matches found
The vulnerability of the sk_diag_dump_name() function in the net/unix/diag.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the skdiagdumpname function in the net/unix/diag.c module, which is part of the Linux kernel’s networking functions, stems from the lack of protection for service data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
EulerOS Virtualization 2.13.0 : haveged (EulerOS-SA-2026-3214)
According to the versions of the haveged packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In src/havegecmd.c, the sockethandler function performs a credential check on the abstract UNIX socket \0/sys/entropy/haveged...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: AppArmor: A race condition in Unix socket mediation has been fixed when peerpath is used. Just holding a reference to peersk is not sufficient to ensure access to the peersk path. Accessing the path outside of the state lock can...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: afunix: Clearing stale u-oobskb. Syzkaller began reporting a deadlock of unixgclock after the commit 4090fa373f0. However, this only reveals the bug that had been present since the commit 314001f0bf92 “afunix: Adding OOB support”...
Astra Linux – Vulnerability in avahi
A flaw was discovered in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not handled correctly in the clientwork function, allowing a local attacker to trigger an infinite loop. The most significant threat from this...
CVE-2026-74698
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix BQL reset on SQ re-activation mlx5equeuestart deactivates and re-activates all channels but closes only the queue being restarted. mlx5eactivatetxqsq then unconditionally calls netdevtxresetqueue, zeroing the BQL...
CVE-2026-74596
In the Linux kernel, the following vulnerability has been resolved: fs,fsverity: remove check for fsverity being enabled in setattrprepare The check that fs-verity is available in the kernel is not necessary here. Filesystems could have fsverity files even without fs-verity enabled. In that case,...
CVE-2026-74667
In the Linux kernel, the following vulnerability has been resolved: net/packet: reset the MAC header on the packet-socket transmit path packetparseheaders resets the MAC header only for a SOCKRAW frame whose socket did not bind a protocol. A protocol-bound SOCKRAW socket, any SOCKDGRAM frame, and...
CVE-2026-74615
In the Linux kernel, the following vulnerability has been resolved: vxlan: do not arm the ageing timer on a device that is down vxlanchangelink arms vxlan-agetimer whenever the requested ageing interval differs from the configured one: if conf.ageinterval != vxlan-cfg.ageinterval...
CVE-2026-64728
A permissions issue was addressed with improved validation. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Maliciously crafted web content may violate iframe sandboxing policy...
GO-2026-6189 vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2021-37136 vulnerabilities
Vulnerabilities for packages: druid...
CVE-2021-37137 vulnerabilities
Vulnerabilities for packages: druid...
GHSA-QX7J-JV8M-FPPR vulnerabilities
Vulnerabilities for packages: druid, conductor-fips, logstash-fips, nuxeo, conductor, zipkin, cassandra-reaper, thingsboard, logstash...
GHSA-6G32-PXV4-2WFJ vulnerabilities
Vulnerabilities for packages: druid, conductor-fips, logstash-fips, nuxeo, conductor, traccar, zipkin, cassandra-reaper, thingsboard, traccar-fips, logstash...
GHSA-QX7J-JV8M-FPPR vulnerabilities
Vulnerabilities for packages: zipkin, thingsboard, druid, logstash, cassandra-reaper...
CVE-2026-72462
A flaw was found in the Linux kernel's AppArmor security module. A race condition exists in the Unix socket mediation when handling the peerpath. This allows for a race with unixreleasesock due to accessing the peer socket path outside of the necessary state lock. This could potentially lead to...
Linux Distros Unpatched Vulnerability : CVE-2026-72462
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - apparmor: fix race in unix socket mediation when peerpath is used The holding a reference to the peersk is not enough to ensure access to the peer sk path...