ipdecap

ipdecap Decapsula el tráfico encapsulado dentro de los protocolos GRE, IPIP, 6in4 y ESP ipsec, desde un archivo pcap. También puede eliminar el encabezado IEEE 802.1Q LAN virtual - vlan. Documentación disponible en http://loicpefferkorn.net/ipdecap...

ipeeyoupeewepee

ipeeyoupeewepee Un escáner y suite de ataque para hosts en internet público principalmente routers Cisco que reenvían paquetes no autenticados encapsulados en los protocolos IP-in-IP y GRE. Esta vulnerabilidad, conocida como "Insecure Implementation of Tunneling Protocols", está rastreada bajo...

CVE-2023-42326

pfSense 2.7.0 Exploit de Inyección de Comandos CVE-2023-42326 Este script de Python es una Prueba de Concepto PoC para la vulnerabilidad de inyección de comandos CVE-2023-42326 en pfSense 2.7.0. La vulnerabilidad permite a atacantes autenticados inyectar y ejecutar comandos arbitrarios a través d...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net: iptunnel: ensure that the inner header is pulled in iptunnelrcv The same fixes were applied in the following issues: 8d975c15c0cd “ip6tunnel: ensure that the inner header is pulled in ip6tnlrcv” 1ca1ba465e55 “geneve: ensu...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ip6gre: made ip6greheader more robust. Over the years, syzbot has identified many ways in which the kernel can crash due to issues related to ip6greheader. This involves the ability of team or bonding drivers to dynamically chang...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: ipv6: Ensure a sane device MTU in tunnels Another syzbot report 1 indicates a bug in the ip6gre tunnel device: dev:ip6gretap0. Since the ipv6 mcast code ensures that the dev-mtu is read once and a sanity check is performed on it...

CVE-2026-89562

In the Linux kernel, the following vulnerability has been resolved: ip6gre: fix hardware header length for NBMA tunnels ip6gretnllinkconfigroute accumulates the lower device's hardware header length into dev-hardheaderlen whenever headerops is set. This is incorrect for both users of headerops...

PT-2026-90279

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the ip6 tnl xmit function where the use of skb realloc headroom to expand headroom for outer IPv6 and optional encap headers can lead to a use-after-free scenario. The...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098960)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098960 advisory. In the Linux kernel, the following vulnerability has been resolved: bonding: fix type confusion in bondsetupbyslave kernel BUG at net/core/skbuff.c:2306! Oops: inval...

CVE-2026-74478

A flaw was found in the Linux kernel. A remote attacker, by sending specially crafted packets over GRE or L2TPv3 transports, could trigger a use-after-free vulnerability. This occurs in the vectormmsgrx function when a packet's overlay header fails verification, causing the system to attempt to...

SUSE CVE-2026-74478

In the Linux kernel, the following vulnerability has been resolved: um: vector: fix use-after-free in vectormmsgrx When vectormmsgrx discards a packet whose overlay header fails verifyheader, it frees the skb and continues the loop: if headercheck estats.rxencapserrors++; continue; The normal and...

CVE-2026-74478

In the Linux kernel, the following vulnerability has been resolved: um: vector: fix use-after-free in vectormmsgrx When vectormmsgrx discards a packet whose overlay header fails verifyheader, it frees the skb and continues the loop: if headercheck estats.rxencapserrors++; continue; The normal and...

CVE-2026-74478

In the Linux kernel, the following vulnerability has been resolved: um: vector: fix use-after-free in vectormmsgrx When vectormmsgrx discards a packet whose overlay header fails verifyheader, it frees the skb and continues the loop: if headercheck estats.rxencapserrors++; continue; The normal and...

EUVD-2026-59671

In the Linux kernel, the following vulnerability has been resolved: um: vector: fix use-after-free in vectormmsgrx When vectormmsgrx discards a packet whose overlay header fails verifyheader, it frees the skb and continues the loop: if headercheck estats.rxencapserrors++; continue; The normal and...

CVE-2026-74478

CVE-2026-74478 affects the Linux kernel, specifically the vector_mmsg_rx() path. When a packet is discarded because verify_header() fails, the code previously continued without advancing the slot, leaving a freed skb in the vector and causing a use-after-free in the RX path. The issue can be trig...

CVE-2026-74478 um: vector: fix use-after-free in vector_mmsg_rx()

In the Linux kernel, the following vulnerability has been resolved: um: vector: fix use-after-free in vectormmsgrx When vectormmsgrx discards a packet whose overlay header fails verifyheader, it frees the skb and continues the loop: if headercheck estats.rxencapserrors++; continue; The normal and...

CVE-2026-74478 um: vector: fix use-after-free in vector_mmsg_rx()

In the Linux kernel, the following vulnerability has been resolved: um: vector: fix use-after-free in vectormmsgrx When vectormmsgrx discards a packet whose overlay header fails verifyheader, it frees the skb and continues the loop: if headercheck estats.rxencapserrors++; continue; The normal and...

CVE-2026-74478: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: um: vector: fix use-after-free in vectormmsgrx When vectormmsgrx discards a packet whose overlay header fails verifyheader, it frees the skb and continues the loop: if headercheck estats.rxencapserrors++; continue; The normal and...

Linux Distros Unpatched Vulnerability : CVE-2026-74478

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - um: vector: fix use-after-free in vectormmsgrx When vectormmsgrx discards a packet whose overlay header fails verifyheader, it frees the skb and continues the...

PT-2026-72930

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the vector mmsg rx function. When a packet is discarded because its overlay header fails the verify header check, the system frees the socket buffer skb...