Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/06/08 11:01 p.m.•41 views

Netty: Unix-socket fd receive leaks descriptors when peer sends two at once

nettyunixsocketrecvFd sets msgcontrol to char controlCMSGSPACEsizeofint line 940 — 24 bytes on 64-bit Linux. A peer-sent SCMRIGHTS cmsg carrying two ints has cmsglen = CMSGLEN8 = 24, which fits exactly with no MSGCTRUNC, so the kernel installs both fds in the receiving process. The subsequent che...

4CVSS6.9AI score0.00193EPSS
SaveExploits0References5Affected Software2
Rows per page
Query Builder