cve-2022-31898

cve-2022-31898 Exploit POC code for CVE-2022-31898, a command injection for GL-iNet routers with firmware below 3.215 Usage ./cve-2022-31898.py -h usage: cve-2022-31898.py -h -R RHOST -P RPORT -L LHOST -l LPORT -p PWD -t options: -h, --help show this help message and exit -R RHOST, --rhost RHOST...

GL.iNET SSID Key Disclosure

An issue was discovered on GL.iNet devices before 3.216. An API endpoint reveals information about the Wi-Fi configuration, including the SSID and key. id: CVE-2023-31478 info: name: GL.iNET SSID Key Disclosure author: DhiyaneshDK severity: high description: | An issue was discovered on GL.iNet...

Unbreakable Enterprise kernel security update

5.4.17-2136.361.4.2 - net: restore refcount ordering for lockless socket access Hyunwoo Kim Orabug: 40285708 - inet: reject unhashed sockets during established lookups Hyunwoo Kim Orabug: 40285708 CVE-2026-99288 - rcu: Add a hlistnullsunhashedlockless function Paul E. McKenney Orabug: 40285708...

CVE-2026-99288

In the Linux kernel, the following vulnerability has been resolved: inet: reject unhashed sockets during established lookups TCP established ehash lookups are lockless. The socket caches involved use SLABTYPESAFEBYRCU, so memory can be reused before an RCU reader that retained its old address has...

UBUNTU-CVE-2026-99288

In the Linux kernel, the following vulnerability has been resolved: inet: reject unhashed sockets during established lookups TCP established ehash lookups are lockless. The socket caches involved use SLABTYPESAFEBYRCU, so memory can be reused before an RCU reader that retained its old address has...

AZL-113320 CVE-2026-99288 affecting package kernel 6.6.161.1-1

In the Linux kernel, the following vulnerability has been resolved: inet: reject unhashed sockets during established lookups TCP established ehash lookups are lockless. The socket caches involved use SLABTYPESAFEBYRCU, so memory can be reused before an RCU reader that retained its old address has...

CVE-2026-99288

In the Linux kernel, the following vulnerability has been resolved: inet: reject unhashed sockets during established lookups TCP established ehash lookups are lockless. The socket caches involved use SLABTYPESAFEBYRCU, so memory can be reused before an RCU reader that retained its old address has...

CVE-2026-99288 inet: reject unhashed sockets during established lookups

In the Linux kernel, the following vulnerability has been resolved: inet: reject unhashed sockets during established lookups TCP established ehash lookups are lockless. The socket caches involved use SLABTYPESAFEBYRCU, so memory can be reused before an RCU reader that retained its old address has...

CVE-2026-99288: Linux: In the Linux kernel, the following vulnerability has been resolved: inet: reject unhashed sockets during established…

In the Linux kernel, the following vulnerability has been resolved: inet: reject unhashed sockets during established lookups TCP established ehash lookups are lockless. The socket caches involved use SLABTYPESAFEBYRCU, so memory can be reused before an RCU reader that retained its old address has...

Linux Distros Unpatched Vulnerability : CVE-2026-99288

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - inet: reject unhashed sockets during established lookups TCP established ehash lookups are lockless. The socket caches involved use SLABTYPESAFEBYRCU, so memory...

Unbreakable Enterprise kernel security update

5.4.17-2136.361.4.1 - iommu/amd: Force device table to maximum size Suravee Suthikulpanit Orabug: 40172712 CVE-2024-21963 - x86/microcode/AMD: Increase PATCHMAXSIZE for Family 1Ah Saeed Mirzamohammadi Orabug: 40172712 5.4.17-2136.361.4 - vhost-scsi: zero misaligned I/O bounce pages Shubham Antil...

Oracle Linux 8 : kernel (ELSA-2026-87375)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-87375 advisory. - vfio/pci: clear vdev-msiperm after freeing it on init failure Rodolfo Vick RHEL-270905 CVE-2026-89777 - ALSA: seq: close a re-opened queue timer in...

Oracle Linux 10 : kernel (ELSA-2026-88477)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-88477 advisory. - drm/amdgpu: Bound GPIO I2C table entry count from VBIOS Anusha Srivatsa RHEL-278280 CVE-2026-97493 - drm/amdkfd: Add TLB flush after MES queue...

kernel security update

4.18.0-553.177.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

ALSA-2026:87375 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv4: raw: reject IPHDRINCL packets with ihl msiperm after freeing it on init failure CVE-2026-89777 For more details about the security issues, including the impact, a CVSS score,...

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv4: raw: reject IPHDRINCL packets with ihl msiperm after freeing it on init failure CVE-2026-89777 For more details about the security issues, including the impact, a CVSS score,...

PT-2026-128426

In the Linux kernel, the following vulnerability has been resolved: tcp: Skip cond resched in inet csk listen stop under BPF context bpf sock destroy runs from the tcp iterator, under rcu read lock. If the sock is a listener that still has children in its accept queue, tcp abort ends up in inet c...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net: ipv4: fix one memleak in inetdelifa The following warning was received during the fuzzing test: unregisternetdevice: waiting for bond0 to become free. Usage count = 2 This issue can be reproduced as follows: ip link add bond...

Astra Linux – Vulnerability in the supervisor

In Supervisor version 4.0.2, an unauthenticated user can read log files or restart a service. Note: The maintainer confirmed that the affected component, inethttpserver, is not enabled by default. However, if the user enables it and does not set a password, Supervisor will log a warning message...

Astra Linux – Vulnerability in Linux

A race condition in Linux kernel SCTP sockets net/sctp/socket.c before version 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If the sctpdestroysock function is called without using the socknetsk-sctp.addrwqlock lock, an element...