5579 matches found
CVE-2026-74665 net: fix skb length accounting after generic XDP frag adjustment
In the Linux kernel, the following vulnerability has been resolved: net: fix skb length accounting after generic XDP frag adjustment Generic XDP exposes non-linear skb fragments through an xdpbuff. If an XDP program adjusts the fragment area, bpfprogrungenericxdp copies xdpfragssize back to...
CVE-2026-74665 net: fix skb length accounting after generic XDP frag adjustment
In the Linux kernel, the following vulnerability has been resolved: net: fix skb length accounting after generic XDP frag adjustment Generic XDP exposes non-linear skb fragments through an xdpbuff. If an XDP program adjusts the fragment area, bpfprogrungenericxdp copies xdpfragssize back to...
CVE-2026-74665
In the Linux kernel, the following vulnerability has been resolved: net: fix skb length accounting after generic XDP frag adjustment Generic XDP exposes non-linear skb fragments through an xdpbuff. If an XDP program adjusts the fragment area, bpfprogrungenericxdp copies xdpfragssize back to...
PT-2026-79670
In the Linux kernel, the following vulnerability has been resolved: net: fix skb length accounting after generic XDP frag adjustment Generic XDP exposes non-linear skb fragments through an xdp buff. If an XDP program adjusts the fragment area, bpf prog run generic xdp copies xdp frags size back t...
CVE-2026-76987
A security flaw has been discovered in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. The impacted element is the function CipAttribute::GetAttrData/CipAttribute::SetAttrData of the file ciptypes.h of the component Generic Attribute Logic. Performing a manipulation results in memory...
CVE-2026-76987
A remote memory-corruption flaw exists in the CipAttribute::GetAttrData/SetAttrData functions of ciptypes.h within liftoff-sr CIPster's Generic Attribute Logic component. No authentication is required to trigger it. A proof-of-concept exploit is publicly available. The fix is commit e745d9d4a8ca3...
GO-2026-6214 vulnerabilities
Vulnerabilities for packages: argo-cd, gptscript, kaniko, snyk-cli, steampipe, nuclei, trivy, bom, src-fingerprint, xeol, flux-notification-controller, scorecard, pulumi-language-dotnet, flux-image-automation-controller, gitea, argo-events, gitlab-runner, act, gomplate, kargo, zot, argo-workflows...
MINI-35G4-6CVW-XR39
Bulletin has no description...
MINI-WRC6-9CMQ-QH8G
Bulletin has no description...
MINI-V7JX-9JWW-WHJ8
Bulletin has no description...
MINI-7RR9-CW2C-2M2P
Bulletin has no description...
MINI-8P5Q-44M3-6W2M
Bulletin has no description...
MINI-W93G-98V6-QF7W
Bulletin has no description...
MINI-P2JQ-2V65-8M8G
Bulletin has no description...
MINI-34M3-H888-Q87W
Bulletin has no description...
MINI-WHWW-GJ7R-VGC3
Bulletin has no description...
MINI-9H3W-VHFV-QH3G
Bulletin has no description...
MINI-8F42-5CJP-JG32
Bulletin has no description...
MINI-FCXP-52VQ-V6WQ
Bulletin has no description...
CVE-2026-73918
Oracle Helidon 4.5.0's Imperative Web Server component has an unauthenticated, network-accessible HTTP vulnerability (CVSS 7.3 High) allowing data read/write and partial DoS; no patch version or exploit details are provided in the documents.