950 matches found
CVE-2023-2002
Linux Bluetooth: Unauthorized management command execution CVE-2023-2002 An insufficient permission check has been found in the Bluetooth subsystem of the Linux kernel when handling ioctl system calls of HCI sockets. This causes tasks without the proper CAPNETADMIN capability can easily mark HCI...
dhcpoptinj
DHCP option injector Have you ever wanted to intercept DHCP requests and squeeze in a few extra DHCP options, unbeknownst to the sender? Probably not. However, should the need ever come, dhcpoptinj will hopefully help you. Why There can be many a reason to mangle DHCP requests, although chances a...
ExploitGSM
ExploitGSM Exploit for 6.4 - 6.5 kernels and another exploit for 5.15 - 6.5 Telegram for contact - https://t.me/YuriiCrimson Telegram chat - https://t.me/itcrowdua In winter I found two vulnerabilities in the ngsm driver. After that Jammes wrote to me offering to buy them from me. As you...
kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink
A flaw was found in the Linux kernel's ip6gre and ip6erspan tunnel drivers. The changelink functions in these drivers do not adequately verify administrative capabilities CAPNETADMIN across different network namespaces. This allows a local attacker, who has CAPNETADMIN in one network namespace bu...
kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink
A flaw was found in the Linux kernel's VXLAN Virtual Extensible LAN implementation. A local attacker, with CAPNETADMIN network administration capability in one network namespace, could exploit an incorrect privilege check in the rtnl changelink path. This allows the attacker to modify the...
kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink
A flaw was found in the Linux kernel's ip6gre and ip6erspan tunnel drivers. The changelink functions in these drivers do not adequately verify administrative capabilities CAPNETADMIN across different network namespaces. This allows a local attacker, who has CAPNETADMIN in one network namespace bu...
kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink
A flaw was found in the Linux kernel's VXLAN Virtual Extensible LAN implementation. A local attacker, with CAPNETADMIN network administration capability in one network namespace, could exploit an incorrect privilege check in the rtnl changelink path. This allows the attacker to modify the...
CVE-2026-99281
In the Linux kernel, the following vulnerability has been resolved: tun: Require CAPNETADMIN to attach to an ownerless device Twenty years ago I made creating a tuntap device require CAPNETADMIN in commit ca6bb5d7ab22 "NET: Require CAPNETADMIN to create tuntap devices." The idea was to allow the...
UBUNTU-CVE-2026-99281
In the Linux kernel, the following vulnerability has been resolved: tun: Require CAPNETADMIN to attach to an ownerless device Twenty years ago I made creating a tuntap device require CAPNETADMIN in commit ca6bb5d7ab22 "NET: Require CAPNETADMIN to create tuntap devices." The idea was to allow the...
DEBIAN-CVE-2026-99281
In the Linux kernel, the following vulnerability has been resolved: tun: Require CAPNETADMIN to attach to an ownerless device Twenty years ago I made creating a tuntap device require CAPNETADMIN in commit ca6bb5d7ab22 "NET: Require CAPNETADMIN to create tuntap devices." The idea was to allow the...
CVE-2026-99281
In the Linux kernel, the following vulnerability has been resolved: tun: Require CAPNETADMIN to attach to an ownerless device Twenty years ago I made creating a tuntap device require CAPNETADMIN in commit ca6bb5d7ab22 "NET: Require CAPNETADMIN to create tuntap devices." The idea was to allow the...
CVE-2026-99281 tun: Require CAP_NET_ADMIN to attach to an ownerless device
In the Linux kernel, the following vulnerability has been resolved: tun: Require CAPNETADMIN to attach to an ownerless device Twenty years ago I made creating a tuntap device require CAPNETADMIN in commit ca6bb5d7ab22 "NET: Require CAPNETADMIN to create tuntap devices." The idea was to allow the...
EUVD-2026-119281
In the Linux kernel, the following vulnerability has been resolved: tun: Require CAPNETADMIN to attach to an ownerless device Twenty years ago I made creating a tuntap device require CAPNETADMIN in commit ca6bb5d7ab22 "NET: Require CAPNETADMIN to create tuntap devices." The idea was to allow the...
CVE-2026-99281 tun: Require CAP_NET_ADMIN to attach to an ownerless device
In the Linux kernel, the following vulnerability has been resolved: tun: Require CAPNETADMIN to attach to an ownerless device Twenty years ago I made creating a tuntap device require CAPNETADMIN in commit ca6bb5d7ab22 "NET: Require CAPNETADMIN to create tuntap devices." The idea was to allow the...
CVE-2026-99281
A flaw in the Linux kernel 's TUN/TAP virtual network device driver allows a local unprivileged attacker to attach to persistent network devices that have no assigned owner or group. This occurs because these ownerless devices were essentially world-consumable, allowing any user who could open th...
Linux Distros Unpatched Vulnerability : CVE-2026-99281
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tun: Require CAPNETADMIN to attach to an ownerless device Twenty years ago I made creating a tuntap device require CAPNETADMIN in commit ca6bb5d7ab22 NET: Requi...
Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18
In the Linux kernel, the following vulnerability has been resolved: net/sched: hhf: cap hhflowslimit at change time hhfchange stores TCAHHFHHFLOWSLIMIT without any upper bound. A very high hhflowslimit allows each new “heavy-hitter” flow to bypass the hhflowscurrentcnt check in allocnewhh, thereb...
Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18
In the Linux kernel, the following vulnerability has been resolved: net/sched: fqpie: clamp quantum in change path fqpiechange accepts any quantum value from userspace, including 1. With a crafted size table, qdiscpktlen reaches 2 GiB; thus, setting quantum=1 causes the deficit-refill loop to spi...
Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18
In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: free fibalias with kfreercu on insert error path fibtableinsert publishes newfa into the leaf’s falist via fibinsertalias before calling the fib entry notifiers. When a notifier fails, the error path removes newfa usin...
Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18
In the Linux kernel, the following vulnerability has been resolved: net/sched: sfq: clamp quantum in change path sfqchange accepts any non-negative quantum only rejects intctl-quantum 120 using -EINVAL, which matches fqcodelchange and the initialization clamp. Conditions required to reproduce the...