Lucene search
+L

20 matches found

AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.5 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ixgbevf: Fixed compatibility issues with the mailbox API by negotiating supported features. There was backward compatibility regarding the mailbox API. Various drivers from different operating systems that support 10G adapters...

7.8CVSS6AI score0.00142EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/22 4:16 p.m.15 views

CVE-2026-74702

In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: reject feature changes after endpoint vhostscsisetupvqcmds runs from VHOSTSCSISETENDPOINT and allocates each command's protection scatterlist array protsgl according to the acknowledged VIRTIOSCSIFT10PI bit. The comma...

8.8CVSS0.00127EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/22 3:33 p.m.12 views

CVE-2026-74702 vhost-scsi: reject feature changes after endpoint

In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: reject feature changes after endpoint vhostscsisetupvqcmds runs from VHOSTSCSISETENDPOINT and allocates each command's protection scatterlist array protsgl according to the acknowledged VIRTIOSCSIFT10PI bit. The comma...

8.8CVSS5.7AI score
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/22 3:33 p.m.26 views

CVE-2026-74702 vhost-scsi: reject feature changes after endpoint

In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: reject feature changes after endpoint vhostscsisetupvqcmds runs from VHOSTSCSISETENDPOINT and allocates each command's protection scatterlist array protsgl according to the acknowledged VIRTIOSCSIFT10PI bit. The comma...

8.8CVSS0.00127EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/22 3:33 p.m.27 views

CVE-2026-74702

CVE-2026-74702 affects the vhost-scsi component of the Linux kernel. The root cause is that vhost_scsi_setup_vq_cmds() allocates the protection scatterlist array (prot_sgl) based on the VIRTIO_SCSI_F_T10_PI feature bit at endpoint setup, but command pools are not rebuilt when VHOST_SET_FEATURES l...

8.8CVSS5.6AI score0.00127EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/22 3:33 p.m.9 views

EUVD-2026-64389

In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: reject feature changes after endpoint vhostscsisetupvqcmds runs from VHOSTSCSISETENDPOINT and allocates each command's protection scatterlist array protsgl according to the acknowledged VIRTIOSCSIFT10PI bit. The comma...

5.6AI score0.00127EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/22 12:00 a.m.13 views

PT-2026-79707

In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: reject feature changes after endpoint vhost scsi setup vq cmds runs from VHOST SCSI SET ENDPOINT and allocates each command's protection scatterlist array prot sgl according to the acknowledged VIRTIO SCSI F T10 PI bi...

5.4AI score0.00127EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/22 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-74702

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vhost-scsi: reject feature changes after endpoint vhostscsisetupvqcmds runs from VHOSTSCSISETENDPOINT and allocates each command's protection scatterlist array...

8.8CVSS5.4AI score0.00127EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/05/06 5:46 p.m.12 views

CVE-2026-43094

A flaw was found in the Linux kernel's ixgbevf driver. When running on Hyper-V virtual machines, a missing operation in the driver's Hyper-V operations table can lead to a null pointer dereference during feature negotiation. This vulnerability allows a local user to trigger a system crash,...

5.5CVSS5.8AI score0.00123EPSS
SaveExploits0References4
Microsoft CVE
Microsoft CVE
added 2025/10/31 8:09 a.m.15 views

ixgbevf: fix mailbox API compatibility by negotiating supported features

...

7.8CVSS7AI score0.00142EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2025/10/31 12:24 a.m.8 views

SUSE CVE-2025-40104

In the Linux kernel, the following vulnerability has been resolved: ixgbevf: fix mailbox API compatibility by negotiating supported features There was backward compatibility in the terms of mailbox API. Various drivers from various OSes supporting 10G adapters from Intel portfolio could easily...

6.5AI score0.00142EPSS
SaveExploits0References10
EUVD
EUVD
added 2025/10/30 12:31 p.m.6 views

EUVD-2025-36974

In the Linux kernel, the following vulnerability has been resolved: ixgbevf: fix mailbox API compatibility by negotiating supported features There was backward compatibility in the terms of mailbox API. Various drivers from various OSes supporting 10G adapters from Intel portfolio could easily...

6AI score0.00142EPSS
SaveExploits0References6
NVD
NVD
added 2025/10/30 10:15 a.m.20 views

CVE-2025-40104

In the Linux kernel, the following vulnerability has been resolved: ixgbevf: fix mailbox API compatibility by negotiating supported features There was backward compatibility in the terms of mailbox API. Various drivers from various OSes supporting 10G adapters from Intel portfolio could easily...

7.8CVSS0.00142EPSS
SaveExploits0References5
OSV
OSV
added 2025/10/30 10:15 a.m.26 views

UBUNTU-CVE-2025-40104

In the Linux kernel, the following vulnerability has been resolved: ixgbevf: fix mailbox API compatibility by negotiating supported features There was backward compatibility in the terms of mailbox API. Various drivers from various OSes supporting 10G adapters from Intel portfolio could easily...

7.8CVSS5.8AI score0.00142EPSS
SaveExploits0References23
CVE
CVE
added 2025/10/30 9:48 a.m.57 views

CVE-2025-40104

CVE-2025-40104 concerns Linux kernel ixgbevf mailbox API compatibility. The issue stems from API versioning changes (notably API 1.4–1.6) that broke backward compatibility in mailbox feature negotiation across Intel 10G PF/VF drivers. IPSec offload support introduced in ixgbevf (IPsec code added ...

7.8CVSS6.1AI score0.00142EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/10/30 12:00 a.m.6 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly negotiating supported features, which could lead to API compatibility issues...

5.9AI score0.00142EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/10/09 12:00 a.m.10 views

PT-2025-44394

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel’s ixgbevf driver had an issue with mailbox API compatibility. The driver experienced discrepancies due to the introduction of features specific to certain drivers like...

4.4CVSS5.8AI score0.00142EPSS
SaveExploits0
Citrix
Citrix
added 2025/04/08 12:00 a.m.15 views

SSH Prefix Truncation Vulnerability (Terrapin attack) on Citrix Applayering

SSH Prefix Truncation Vulnerability Terrapin attack on Citrix App Layering . Note: The Terrapin attack can reduce the security of SSH by using a downgrade attack via man-in-the-middle interception. The attack works by prefix truncation; the injection and deletion of messages during feature...

7.3AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/16 9:44 p.m.57 views

Security Bulletin: Samba as used in IBM QRadar SIEM is vulnerable to multiple CVE's. (CVE-2016-2110, CVE-2016-2112, CVE-2016-2115)

Summary Samba is susceptible to multiple vulnerabilities as used in IBM QRadar SIEM. Vulnerability Details CVE-ID: CVE-2016-2110 Description: Samba could allow a remote attacker to bypass security restrictions, caused by the failure to protect the feature negotiation of NTLMSSP from a downgrade. ...

5.9CVSS0.8AI score0.10232EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2016/04/14 12:00 a.m.49 views

DSA-3548-2 samba - regression update

Bulletin has no description...

6.8AI score
SaveExploits0
Rows per page
Query Builder