66 matches found
Astra Linux – vulnerability in linux-5.10, linux-5.15, linux-6.1
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: initialize extack before use Fix missing initialization of extack in flow offload...
AZL-104643 CVE-2026-98031 affecting package kernel for versions less than 6.6.158.1-1
In the Linux kernel, the following vulnerability has been resolved: nexthop: Initialize extack in removenhgrpentry removenhgrpentry prints the extack message when a listener fails to replace the reduced nexthop group. However, extack is not initialized and listeners are not required to set a...
CVE-2026-98031
In the Linux kernel, the following vulnerability has been resolved: nexthop: Initialize extack in removenhgrpentry removenhgrpentry prints the extack message when a listener fails to replace the reduced nexthop group. However, extack is not initialized and listeners are not required to set a...
CVE-2026-98031
In the Linux kernel, the following vulnerability has been resolved: nexthop: Initialize extack in removenhgrpentry removenhgrpentry prints the extack message when a listener fails to replace the reduced nexthop group. However, extack is not initialized and listeners are not required to set a...
SUSE CVE-2026-64576
In the Linux kernel, the following vulnerability has been resolved: nexthop: initialize extack in nhresbucketmigrate nhresbucketmigrate passes an uninitialized netlinkextack to callnexthopresbucketnotifiers. When nhnotifierresbucketinfoinit fails e.g. the kzalloc returns -ENOMEM, the error is...
AZL-94461 CVE-2026-64576 affecting package kernel for versions less than 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: nexthop: initialize extack in nhresbucketmigrate nhresbucketmigrate passes an uninitialized netlinkextack to callnexthopresbucketnotifiers. When nhnotifierresbucketinfoinit fails e.g. the kzalloc returns -ENOMEM, the error is...
CVE-2026-64576
In the Linux kernel, the following vulnerability has been resolved: nexthop: initialize extack in nhresbucketmigrate nhresbucketmigrate passes an uninitialized netlinkextack to callnexthopresbucketnotifiers. When nhnotifierresbucketinfoinit fails e.g. the kzalloc returns -ENOMEM, the error is...
UBUNTU-CVE-2026-64576
In the Linux kernel, the following vulnerability has been resolved: nexthop: initialize extack in nhresbucketmigrate nhresbucketmigrate passes an uninitialized netlinkextack to callnexthopresbucketnotifiers. When nhnotifierresbucketinfoinit fails e.g. the kzalloc returns -ENOMEM, the error is...
CVE-2026-64576
In the Linux kernel, the following vulnerability has been resolved: nexthop: initialize extack in nhresbucketmigrate nhresbucketmigrate passes an uninitialized netlinkextack to callnexthopresbucketnotifiers. When nhnotifierresbucketinfoinit fails e.g. the kzalloc returns -ENOMEM, the error is...
CVE-2026-64576
The CVE-2026-64576 issue affects the Linux kernel’s nexthop resolution path (nh_res_bucket_migrate in net/ipv4/nexthop.c), where an uninitialized netlink_ext_ack could be used when allocation fails, leading to a kernel panic. The root cause is the use of an uninitialized extack, which may derefer...
CVE-2026-64576 nexthop: initialize extack in nh_res_bucket_migrate()
In the Linux kernel, the following vulnerability has been resolved: nexthop: initialize extack in nhresbucketmigrate nhresbucketmigrate passes an uninitialized netlinkextack to callnexthopresbucketnotifiers. When nhnotifierresbucketinfoinit fails e.g. the kzalloc returns -ENOMEM, the error is...
CVE-2026-64576
In the Linux kernel, the following vulnerability has been resolved: nexthop: initialize extack in nhresbucketmigrate nhresbucketmigrate passes an uninitialized netlinkextack to callnexthopresbucketnotifiers. When nhnotifierresbucketinfoinit fails e.g. the kzalloc returns -ENOMEM, the error is...
CVE-2026-64576 nexthop: initialize extack in nh_res_bucket_migrate()
In the Linux kernel, the following vulnerability has been resolved: nexthop: initialize extack in nhresbucketmigrate nhresbucketmigrate passes an uninitialized netlinkextack to callnexthopresbucketnotifiers. When nhnotifierresbucketinfoinit fails e.g. the kzalloc returns -ENOMEM, the error is...
PT-2026-68077
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The nh res bucket migrate function passes an uninitialized netlink ext ack to call nexthop res bucket notifiers. If nh notifier res bucket info init fails, such as when kzalloc returns...
Linux Distros Unpatched Vulnerability : CVE-2026-64576
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: nexthop: initialize extack in nhresbucketmigrate nhresbucketmigrate passes an uninitialized...
PT-2026-34400
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter ctnetlink component where manual range and mask validations are used instead of netlink policy annotations. This can lead to undefined behavior when the...
MiracleLinux 9 : kernel-5.14.0-503.16.1.el9_5 (AXSA:2025-9539:03)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-9539:03 advisory. kernel: net/smc: fix illegal rmbdesc access in SMC-D connection dump CVE-2024-26615 kernel: block: initialize integrity buffer to zero before writin...
Astra Linux – vulnerability in linux-6.1, linux-6.12
In the Linux kernel, the following vulnerability has been resolved: can: netlink: canchangelink: fix NULL pointer deref of struct canpriv::dosetmode Andrei Lalaev reported a NULL pointer deref when a CAN device is restarted from Bus Off and the driver does not implement the struct...
Siemens SIMATIC Devices Missing Initialization of a Variable (CVE-2024-45018)
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: initialise extack before use Fix missing initialisation of extack in flow offload. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
