134 matches found
SUSE CVE-2026-98569
In the Linux kernel, the following vulnerability has been resolved: ipgre: Reject enabling collect metadata through changelink ipgrenetlinkparms can enable collectmd on an existing GRE, GRETAP or ERSPAN device. Unlike newlink, changelink does not enforce metadata tunnel uniqueness. Converting a...
DEBIAN-CVE-2026-98569
In the Linux kernel, the following vulnerability has been resolved: ipgre: Reject enabling collect metadata through changelink ipgrenetlinkparms can enable collectmd on an existing GRE, GRETAP or ERSPAN device. Unlike newlink, changelink does not enforce metadata tunnel uniqueness. Converting a...
AZL-109091 CVE-2026-98569 affecting package kernel for versions less than 6.6.159.1-1
In the Linux kernel, the following vulnerability has been resolved: ipgre: Reject enabling collect metadata through changelink ipgrenetlinkparms can enable collectmd on an existing GRE, GRETAP or ERSPAN device. Unlike newlink, changelink does not enforce metadata tunnel uniqueness. Converting a...
CVE-2026-98569
In the Linux kernel, the following vulnerability has been resolved: ipgre: Reject enabling collect metadata through changelink ipgrenetlinkparms can enable collectmd on an existing GRE, GRETAP or ERSPAN device. Unlike newlink, changelink does not enforce metadata tunnel uniqueness. Converting a...
CVE-2026-98569
In the Linux kernel, the following vulnerability has been resolved: ipgre: Reject enabling collect metadata through changelink ipgrenetlinkparms can enable collectmd on an existing GRE, GRETAP or ERSPAN device. Unlike newlink, changelink does not enforce metadata tunnel uniqueness. Converting a...
EUVD-2026-103614
In the Linux kernel, the following vulnerability has been resolved: ipgre: Reject enabling collect metadata through changelink ipgrenetlinkparms can enable collectmd on an existing GRE, GRETAP or ERSPAN device. Unlike newlink, changelink does not enforce metadata tunnel uniqueness. Converting a...
CVE-2026-98569
The Linux kernel contains a vulnerability in the ip_gre component where the ipgre_netlink_parms() function can incorrectly enable collect_md on existing GRE, GRETAP, or ERSPAN devices. Because changelink does not enforce metadata tunnel uniqueness, converting a non-metadata device can overwrite t...
CVE-2026-98569 ip_gre: Reject enabling collect metadata through changelink
In the Linux kernel, the following vulnerability has been resolved: ipgre: Reject enabling collect metadata through changelink ipgrenetlinkparms can enable collectmd on an existing GRE, GRETAP or ERSPAN device. Unlike newlink, changelink does not enforce metadata tunnel uniqueness. Converting a...
CVE-2026-98569 ip_gre: Reject enabling collect metadata through changelink
In the Linux kernel, the following vulnerability has been resolved: ipgre: Reject enabling collect metadata through changelink ipgrenetlinkparms can enable collectmd on an existing GRE, GRETAP or ERSPAN device. Unlike newlink, changelink does not enforce metadata tunnel uniqueness. Converting a...
CVE-2026-98569
In the Linux kernel, the following vulnerability has been resolved: ipgre: Reject enabling collect metadata through changelink ipgrenetlinkparms can enable collectmd on an existing GRE, GRETAP or ERSPAN device. Unlike newlink, changelink does not enforce metadata tunnel uniqueness. Converting a...
PT-2026-116787
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A TOCTOU Time-of-Check to Time-of-Use race condition exists in the vxlan module. This occurs when the vxlan na create function samples LL RESERVED SPACE to size a reply skb and...
PT-2026-116788
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ip gre module where the ipgre netlink parms function allows enabling collect md on existing GRE, GRETAP, or ERSPAN devices via changelink. Because changelink does...
PT-2026-128524
In the Linux kernel, the following vulnerability has been resolved: ip gre: Reject enabling collect metadata through changelink ipgre netlink parms can enable collect md on an existing GRE, GRETAP or ERSPAN device. Unlike newlink, changelink does not enforce metadata tunnel uniqueness. Converting...
PT-2026-128581
In the Linux kernel, the following vulnerability has been resolved: vxlan: use one headroom snapshot for neighbour replies vxlan na create samples LL RESERVED SPACE to size the reply skb and then samples it again to reserve headroom. A concurrent vxlan changelink can update needed headroom betwee...
CVE-2026-98569: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ipgre: Reject enabling collect metadata through changelink ipgrenetlinkparms can enable collectmd on an existing GRE, GRETAP or ERSPAN device. Unlike newlink, changelink does not enforce metadata tunnel uniqueness. Converting a...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.3 contains a security vulnerability. This vulnerability stems from the lack of enforcing tunnel uniqueness for metadata in ipgre’s changelink. This allows the activation of collectmd on existing GRE, GRETAP, or ERSPAN devices. It may replace the metadata reception entri...
Astra Linux – vulnerability in linux-5.15
In the Linux kernel, the following vulnerability has been resolved: vlan: fix memory leak in vlannewlink The blame commit added back a bug I fixed in commit 9bbd917e0bec "vlan: fix memory leak in vlandevsetegresspriority" If a memory allocation fails in vlanchangelink after other allocations...
kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink
A flaw was found in the Linux kernel's VXLAN Virtual Extensible LAN implementation. A local attacker, with CAPNETADMIN network administration capability in one network namespace, could exploit an incorrect privilege check in the rtnl changelink path. This allows the attacker to modify the...
kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink
A flaw was found in the Linux kernel's IP Generic Routing Encapsulation ipgre component. This vulnerability allows a local attacker with network administration capabilities in one network namespace to modify a tunnel residing in a different network namespace where they lack privileges. This is du...
kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink
A flaw was found in the Linux kernel's IP Generic Routing Encapsulation ipgre component. This vulnerability allows a local attacker with network administration capabilities in one network namespace to modify a tunnel residing in a different network namespace where they lack privileges. This is du...