CVE-2026-19673 Out-of-bounds read and net_buf length underflow in Zephyr Ethernet L2 when parsing a truncated VLAN header

ethernetrecv in subsys/net/l2/ethernet/ethernet.c validates only that the first netbuf of a received frame holds a plain 14-byte struct netethhdr. When the ethertype is 0x8100 and VLAN is enabled on the interface, the same buffer is reinterpreted as the 18-byte struct netethvlanhdr without...

CVE-2026-19673 Out-of-bounds read and net_buf length underflow in Zephyr Ethernet L2 when parsing a truncated VLAN header

ethernetrecv in subsys/net/l2/ethernet/ethernet.c validates only that the first netbuf of a received frame holds a plain 14-byte struct netethhdr. When the ethertype is 0x8100 and VLAN is enabled on the interface, the same buffer is reinterpreted as the 18-byte struct netethvlanhdr without...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-8919-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8919-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-8920-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8920-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

USN-8920-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Ethernet bonding driver; - Network drivers; - F2FS file system; - Network file system NFS server daemon; - Tracing...

USN-8920-1 linux-aws-5.4, linux-aws-fips, linux-azure-fips, linux-ibm, linux-ibm-5.4 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Ethernet bonding driver; - Network drivers; - F2FS file system; - Network file system NFS server daemon; - Tracing...

USN-8919-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Ethernet bonding driver; - Network drivers; - F2FS file system; - Tracing infrastructure; - iouring subsystem; -...

USN-8919-1 linux, linux-aws, linux-azure, linux-azure-5.4, linux-fips, linux-gcp, linux-gcp-5.4, linux-gcp-fips, linux-hwe-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4, linux-xilinx-zynqmp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Ethernet bonding driver; - Network drivers; - F2FS file system; - Tracing infrastructure; - iouring subsystem; -...

CVE-2026-90083

A flaw was found in the Linux kernel. The actife Ingress/Egress Forwarding Engine component, which is designed to operate exclusively with Ethernet network frames, can improperly handle non-Ethernet packets. If a non-Ethernet packet is redirected to an Ethernet device configured with actife, the...

CVE-2026-102075

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...

CVE-2026-102076

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...

CVE-2026-102076

A vulnerability exists in the web service of various APOGEE and TALON products, including MBC , MEC , PXC Compact , PXC Modular , and TC Compact/Modular models. The root cause is the improper validation of user-supplied input within the upload code, categorized as a stack-based buffer overflow (C...

CVE-2026-102075

A vulnerability exists in the web service of various products, including APOGEE MBC , APOGEE MEC , APOGEE PXC Compact , APOGEE PXC Modular , TALON TC Compact , and TALON TC Modular . The root cause is a failure to properly validate user input during multipart handling , which could allow an unaut...

CVE-2026-102074

The FTP service in several APOGEE and TALON products is vulnerable to a stack-based buffer overflow (CWE-121) due to improper validation of user-controllable input length. Affected systems include APOGEE MBC (PPC) , APOGEE MEC (PPC) , APOGEE PXC Compact , APOGEE PXC Modular , TALON TC Compact , a...

CVE-2026-102073

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...

CVE-2026-102076: Stack-based Buffer Overflow

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...

UBUNTU-CVE-2026-98375

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header handleincomingqueue pulls pullto bytes into the head before calling ethtypetrans. pullto is the length of the first RX slot, capped at RXCOPYTHRESHOLD, and that length...

thc-ipv6

THC-IPV6-ATTACK-TOOLKIT c 2005-2022 [email protected] https://github.com/vanhauser-thc/thc-ipv6 Licenciado bajo AGPLv3 ver archivo LICENSE INTRODUCCIÓN Este código fue inspirado cuando entré en contacto con IPv6, aprendí más y más sobre él, y luego no encontré herramientas para jugar léase:...

eero-zero-length-ipv6-options-header-dos

eeroOS: Vulnerabilidad de denegación de servicio en la interfaz Ethernet CVE-2023-5324 ========================================================================= Si los dispositivos eero Pro 5 reciben un paquete IPv6 cuya longitud de carga útil es cero y que contiene una cabecera de extensión de...

CVE-2026-98305

A flaw was found in the Linux kernel's MaxLinear MXL862xx Ethernet switch driver. Improper synchronization during device initialization failure, teardown, or shutdown allows background statistics polling to continue running after port resources have been released. This issue can allow a local use...