143 matches found
CVE-2026-46300
🛡️ CVE-2026-46300 - Fragnesia A Clean & Deadly Page-Cache Attack Variant of the "Dirty Frag" family 📌 Overview CVE-2026-46300 Fragnesia is a high-severity logic flaw in the Linux kernel's socket buffer handling skbtrycoalesce within the XFRM/ESP-in-TCP subsystem espintcp ULP. An unprivileged local...
CVE-2026-46300_Fragnesia
🧨 Fragnesia — CVE-2026-46300 Linux Kernel LPE Audit & Exploit Toolkit · Page-Cache / XFRM ESP-in-TCP espintcp Regression Interactive audit → LPE prerequisite detection → Automated exploit execution after confirmation ⚠️ Ethical & Legal Warning This tool is intended solely for legitimate and...
kernel: Kernel: Race condition in espintcp can lead to denial of service
A flaw was found in the Linux kernel's espintcp component. A local attacker with low privileges could exploit a race condition in the espintcpclose function. This could allow the espintcptxwork worker to access freed memory, potentially leading to a system crash and resulting in a Denial of Servi...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
kernel: Kernel: Race condition in espintcp can lead to denial of service
A flaw was found in the Linux kernel's espintcp component. A local attacker with low privileges could exploit a race condition in the espintcpclose function. This could allow the espintcptxwork worker to access freed memory, potentially leading to a system crash and resulting in a Denial of Servi...
RHEL 9 : kernel (RHSA-2026:97435)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:97435 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: Denial of Servi...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: net: xfrm: reject unrepresentable espintcp transport headers ESP-in-TCP can send xfrm packets whose transport header offset becomes invalid after the stream parser trims the TCP envelope. The plain transport header reset truncate...
SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:4937-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4937-1 advisory. The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues: The following security issues were fixed: -...
SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:4934-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4934-1 advisory. The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues: The following security issues were fixed: -...
SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:4936-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4936-1 advisory. The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: -...
SUSE CVE-2026-99056
In the Linux kernel, the following vulnerability has been resolved: strparser: make sure strprecv isn't running before tearing down the parser The comment above strpdone claims that if strp is stopped, strprecv will no longer be called. That's only true if the caller has a mechanism eg locking to...
CVE-2026-99056
In the Linux kernel, the following vulnerability has been resolved: strparser: make sure strprecv isn't running before tearing down the parser The comment above strpdone claims that if strp is stopped, strprecv will no longer be called. That's only true if the caller has a mechanism eg locking to...
AZL-110939 CVE-2026-99056 affecting package kernel for versions less than 6.6.161.1-1
In the Linux kernel, the following vulnerability has been resolved: strparser: make sure strprecv isn't running before tearing down the parser The comment above strpdone claims that if strp is stopped, strprecv will no longer be called. That's only true if the caller has a mechanism eg locking to...
DEBIAN-CVE-2026-99056
In the Linux kernel, the following vulnerability has been resolved: strparser: make sure strprecv isn't running before tearing down the parser The comment above strpdone claims that if strp is stopped, strprecv will no longer be called. That's only true if the caller has a mechanism eg locking to...
CVE-2026-99056
In the Linux kernel, the following vulnerability has been resolved: strparser: make sure strprecv isn't running before tearing down the parser The comment above strpdone claims that if strp is stopped, strprecv will no longer be called. That's only true if the caller has a mechanism eg locking to...
UBUNTU-CVE-2026-99056
In the Linux kernel, the following vulnerability has been resolved: strparser: make sure strprecv isn't running before tearing down the parser The comment above strpdone claims that if strp is stopped, strprecv will no longer be called. That's only true if the caller has a mechanism eg locking to...
CVE-2026-99056
The Linux kernel contains a race condition in the strparser component, specifically involving the teardown of the parser. The issue arises because strp_recv calls may still be in-flight when strp_done() is invoked, leading to a potential Use-After-Free (UAF) . This condition primarily affects esp...
EUVD-2026-108851
In the Linux kernel, the following vulnerability has been resolved: strparser: make sure strprecv isn't running before tearing down the parser The comment above strpdone claims that if strp is stopped, strprecv will no longer be called. That's only true if the caller has a mechanism eg locking to...
CVE-2026-99056 strparser: make sure __strp_recv isn't running before tearing down the parser
In the Linux kernel, the following vulnerability has been resolved: strparser: make sure strprecv isn't running before tearing down the parser The comment above strpdone claims that if strp is stopped, strprecv will no longer be called. That's only true if the caller has a mechanism eg locking to...
CVE-2026-99056 strparser: make sure __strp_recv isn't running before tearing down the parser
In the Linux kernel, the following vulnerability has been resolved: strparser: make sure strprecv isn't running before tearing down the parser The comment above strpdone claims that if strp is stopped, strprecv will no longer be called. That's only true if the caller has a mechanism eg locking to...