704 matches found
CVE-2025-6563
MikroTik Hotspot Login Page Reflected XSS Vulnerability Advisory Overview A reflected Cross-Site Scripting XSS vulnerability was discovered in the MikroTik RouterOS Hotspot login page. The vulnerability is triggered via the dst URL parameter, which improperly sanitizes input, allowing malicious...
Important: kernel6.12
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ACPI: platform: Use acpibusgetprimarydevice CVE-2026-100072 In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpfrefcount field as unique CVE-2026-100074 In the Linux kernel, the...
Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-3402)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3402 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: platform: Use acpibusgetprimarydevice CVE-2026-100072 In the Linux kernel, the following vulnerability has been...
PT-2026-122020
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ice driver where the ice eswitch release repr function uses metadata dst free to release the representor's metadata dst. This causes the underlying memory to be...
Linux Distros Unpatched Vulnerability : CVE-2026-98596
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix dst leak for uncached routes. ip6routeoutputflags, ip6rtputflags, and ip6dstcheck...
SUSE CVE-2026-98596
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix dst leak for uncached routes. ip6routeoutputflags, ip6rtputflags, and ip6dstcheck detect an uncached route by listempty&rt-dst.rtuncached, which replaced the static DSTNOCACHE flag check in commit a4c2fd7f7891 "net:...
DEBIAN-CVE-2026-98596
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix dst leak for uncached routes. ip6routeoutputflags, ip6rtputflags, and ip6dstcheck detect an uncached route by listempty&rt-dst.rtuncached, which replaced the static DSTNOCACHE flag check in commit a4c2fd7f7891 "net:...
CVE-2026-98596
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix dst leak for uncached routes. ip6routeoutputflags, ip6rtputflags, and ip6dstcheck detect an uncached route by listempty&rt-dst.rtuncached, which replaced the static DSTNOCACHE flag check in commit a4c2fd7f7891 "net:...
UBUNTU-CVE-2026-98596
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix dst leak for uncached routes. ip6routeoutputflags, ip6rtputflags, and ip6dstcheck detect an uncached route by listempty&rt-dst.rtuncached, which replaced the static DSTNOCACHE flag check in commit a4c2fd7f7891 "net:...
CVE-2026-98596
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix dst leak for uncached routes. ip6routeoutputflags, ip6rtputflags, and ip6dstcheck detect an uncached route by listempty&rt-dst.rtuncached, which replaced the static DSTNOCACHE flag check in commit a4c2fd7f7891 "net:...
CVE-2026-98596 ipv6: Fix dst leak for uncached routes.
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix dst leak for uncached routes. ip6routeoutputflags, ip6rtputflags, and ip6dstcheck detect an uncached route by listempty&rt-dst.rtuncached, which replaced the static DSTNOCACHE flag check in commit a4c2fd7f7891 "net:...
CVE-2026-98596
The Linux kernel contains a vulnerability where a race condition occurs during the unregistration of a device. Specifically, when rt6_uncached_list_flush_dev() unlinks uncached routes using list_del_init(), a concurrent execution can cause list_empty() to evaluate as true prematurely. This leads ...
EUVD-2026-103641
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix dst leak for uncached routes. ip6routeoutputflags, ip6rtputflags, and ip6dstcheck detect an uncached route by listempty&rt-dst.rtuncached, which replaced the static DSTNOCACHE flag check in commit a4c2fd7f7891 "net:...
CVE-2026-98596 ipv6: Fix dst leak for uncached routes.
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix dst leak for uncached routes. ip6routeoutputflags, ip6rtputflags, and ip6dstcheck detect an uncached route by listempty&rt-dst.rtuncached, which replaced the static DSTNOCACHE flag check in commit a4c2fd7f7891 "net:...
CLSA-2024-1725876080 kernel: Fix of 45 CVEs
dmaengine: idxd: Fix possible Use-After-Free in irqprocessworklist CVE-2024-40956 - userfaultfd: fix a race between writeprotect and exitmmap CVE-2021-47461 - netfilter: nftables: use timestamp to check for set element timeout CVE-2024-27397 - x86/sev: Harden VC instruction emulation somewhat...
PT-2026-116750
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.3.0-rc3 Description An issue exists in the IPv6 segment routing implementation where the SEG6 ATTR DST attribute in seg6 genl policy is defined using NLA BINARY. This configuration only enforces a maximum paylo...
PT-2026-116815
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IPv6 implementation where a race condition occurs during the unlinking of uncached routes when a device is unregistered. The functions ip6 route output flags, ip6 ...
CVE-2026-98596: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix dst leak for uncached routes. ip6routeoutputflags, ip6rtputflags, and ip6dstcheck detect an uncached route by listempty&rt-dst.rtuncached, which replaced the static DSTNOCACHE flag check in commit a4c2fd7f7891 "net:...
PT-2026-128507
In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: enforce exact attribute length for SEG6 ATTR DST In seg6 genl policy, SEG6 ATTR DST is defined with .type = NLA BINARY and .len = sizeofstruct in6 addr. For NLA BINARY, .len only enforces the maximum payload length and...
CVE-2026-17488
IBM i versions 7.3, 7.4, 7.5, and 7.6 (program 5770-999 ) are vulnerable to an improper authentication flaw (CWE-287) within the System Service Tools (SST) / Dedicated Service Tools (DST) . This vulnerability could allow a remote authenticated attacker to bypass security restrictions. Remediation...