Lucene search
K

6 matches found

CVE
CVE
added 2026/05/27 12:17 p.m.26 views

CVE-2026-45929

In CVE-2026-45929, Linux kernel ovpn: fix possible use-after-free in ovpn_net_xmit. The vulnerability arises when skb_share_check frees the original skb during skb_list construction, but subsequent operations re-use a now-stale skb pointer (peer lookup, skb_dst_drop, and ovpn_peer_stats_increment...

7.8CVSS5.8AI score0.00157EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.15 views

PT-2026-43796

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ovpn net xmit function. When building the skb list, the skb share check function frees the original skb socket buffer if it is shared. The system the...

7.8CVSS5.8AI score0.00157EPSS
Exploits0References13
EUVD
EUVD
added 2026/04/22 3:31 p.m.5 views

EUVD-2026-24817

In the Linux kernel, the following vulnerability has been resolved: virtionet: Fix UAF on dstops when IFFXMITDSTRELEASE is cleared and napitx is false A UAF issue occurs when the virtionet driver is configured with napitx=N and the device's IFFXMITDSTRELEASE flag is cleared e.g., during the...

5.6AI score0.00129EPSS
Exploits0References9
Microsoft CVE
Microsoft CVE
added 2025/04/09 7:0 a.m.3 views

tcp: drop secpath at the same time as we currently drop dst

...

5.5CVSS6.7AI score0.002EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2017/09/06 8:36 p.m.6 views

kernel: ipv4: Invalid IP options could cause skb->dst drop

A vulnerability was found in the Linux kernel where having malicious IP options present would cause the ipv4pktinfoprepare function to drop/free the dst. This could result in a system crash or possible privilege escalation...

7.5CVSS7.1AI score0.03915EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2017/08/01 2:22 p.m.4 views

kernel: ipv4: Invalid IP options could cause skb->dst drop

A vulnerability was found in the Linux kernel where having malicious IP options present would cause the ipv4pktinfoprepare function to drop/free the dst. This could result in a system crash or possible privilege escalation...

7.5CVSS7.1AI score0.03915EPSS
Exploits0References4
Rows per page
Query Builder