1058 matches found
CVE-2026-80838
A flaw was found in the Linux kernel's Virtual Extensible LAN VXLAN component. During certain network operations, specifically a filtered bulk flush, the system can incorrectly handle remote entries. This can lead to a memory corruption vulnerability where a read-copy update RCU reader attempts t...
Amazon Linux 2 : docker (ALASECS-2026-148)
The version of docker installed on the remote host is prior to 25.0.18-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-148 advisory. The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers...
Important: docker
Issue Overview: The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory. A crafted archive can create or overwrite files outside the intended destination. CVE-2026-171...
Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142715)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142715 advisory. In the Linux kernel, the following vulnerability has been resolved: vxlan: use neighhasnapshot in routeshortcircuit The neighbour hardware address n-ha can be update...
Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142486)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142486 advisory. In the Linux kernel, the following vulnerability has been resolved: vxlan: use pskbnetworkmaypull in routeshortcircuit routeshortcircuit currently calls...
Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142533)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142533 advisory. In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix potential null-ptr-deref in vxlangropreparereceive. udptunnelsockrelease could set...
CVE-2026-98568
A flaw was found in the Linux kernel's VXLAN Virtual Extensible LAN networking module. A race condition can occur when link properties are modified while neighbour advertisement reply packets are being processed, leading to inconsistent buffer size calculations. A local attacker could exploit thi...
Siemens SIMATIC S7-1500 TM MFP NULL Pointer Dereference (CVE-2025-21790)
In the Linux kernel, the following vulnerability has been resolved: vxlan: check vxlanvnigroupinit return value vxlaninit must check vxlanvnigroupinit success otherwise a crash happens later, spotted by syzbot. Oops: general protection fault, probably for non-canonical address 0xdffffc000000002c:...
Siemens SIMATIC S7-1500 TM MFP Use of Uninitialized Resource (CVE-2025-21716)
In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix uninit-value in vxlanvnifilterdump KMSAN reported an uninit-value access in vxlanvnifilterdump 1. If the length of the netlink message payload is less than sizeofstruct tunnelmsg, vxlanvnifilterdump accesses bytes beyo...
UBUNTU-CVE-2026-98568
In the Linux kernel, the following vulnerability has been resolved: vxlan: use one headroom snapshot for neighbour replies vxlannacreate samples LLRESERVEDSPACE to size the reply skb and then samples it again to reserve headroom. A concurrent vxlanchangelink can update neededheadroom between the...
SUSE CVE-2026-98568
In the Linux kernel, the following vulnerability has been resolved: vxlan: use one headroom snapshot for neighbour replies vxlannacreate samples LLRESERVEDSPACE to size the reply skb and then samples it again to reserve headroom. A concurrent vxlanchangelink can update neededheadroom between the...
CVE-2026-98568
In the Linux kernel, the following vulnerability has been resolved: vxlan: use one headroom snapshot for neighbour replies vxlannacreate samples LLRESERVEDSPACE to size the reply skb and then samples it again to reserve headroom. A concurrent vxlanchangelink can update neededheadroom between the...
AZL-109263 CVE-2026-98568 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: vxlan: use one headroom snapshot for neighbour replies vxlannacreate samples LLRESERVEDSPACE to size the reply skb and then samples it again to reserve headroom. A concurrent vxlanchangelink can update neededheadroom between the...
DEBIAN-CVE-2026-98568
In the Linux kernel, the following vulnerability has been resolved: vxlan: use one headroom snapshot for neighbour replies vxlannacreate samples LLRESERVEDSPACE to size the reply skb and then samples it again to reserve headroom. A concurrent vxlanchangelink can update neededheadroom between the...
CVE-2026-98568
In the Linux kernel, the following vulnerability has been resolved: vxlan: use one headroom snapshot for neighbour replies vxlannacreate samples LLRESERVEDSPACE to size the reply skb and then samples it again to reserve headroom. A concurrent vxlanchangelink can update neededheadroom between the...
CVE-2026-98568 vxlan: use one headroom snapshot for neighbour replies
In the Linux kernel, the following vulnerability has been resolved: vxlan: use one headroom snapshot for neighbour replies vxlannacreate samples LLRESERVEDSPACE to size the reply skb and then samples it again to reserve headroom. A concurrent vxlanchangelink can update neededheadroom between the...
CVE-2026-98568 vxlan: use one headroom snapshot for neighbour replies
In the Linux kernel, the following vulnerability has been resolved: vxlan: use one headroom snapshot for neighbour replies vxlannacreate samples LLRESERVEDSPACE to size the reply skb and then samples it again to reserve headroom. A concurrent vxlanchangelink can update neededheadroom between the...
EUVD-2026-103613
In the Linux kernel, the following vulnerability has been resolved: vxlan: use one headroom snapshot for neighbour replies vxlannacreate samples LLRESERVEDSPACE to size the reply skb and then samples it again to reserve headroom. A concurrent vxlanchangelink can update neededheadroom between the...
CVE-2026-98568
The Linux kernel contains a Time-of-Check to Time-of-Use (TOCTOU) race condition within the vxlan component. Specifically, the vxlan_na_create() function samples LL_RESERVED_SPACE() twice: once to size the reply skb and again to reserve headroom. A concurrent call to vxlan_changelink() can update...
CVE-2026-98568
In the Linux kernel, the following vulnerability has been resolved: vxlan: use one headroom snapshot for neighbour replies vxlannacreate samples LLRESERVEDSPACE to size the reply skb and then samples it again to reserve headroom. A concurrent vxlanchangelink can update neededheadroom between the...