14 matches found
AZL-101697 CVE-2026-89948 affecting package kernel for versions less than 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: fix freeing of claims on meshif deletion When the mesh interface is getting deleted, then batadvbladelbackboneclaims via batadvblapurgebackbonegw could make sure that all claims gets removed. But this function is...
SUSE CVE-2026-64043
In the Linux kernel, the following vulnerability has been resolved: ovpn: fix race between deleting interface and adding new peer While deleting an existing ovpn interface, there is a very narrow window where adding a new peer via netlink may cause the netdevice to hang and prevent its...
Linux Distros Unpatched Vulnerability : CVE-2026-64043
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ovpn: fix race between deleting interface and adding new peer While deleting an existing ovp...
CVE-2026-64043
A race condition in the Linux kernel 's ovpn component allows a netdevice to hang during unregistration. This occurs when a CMD_PEER_NEW netlink message adds a new peer while the device is being deleted in ovpn_dellink(), as the kernel incorrectly assumes all peers were already released. The fix ...
PT-2026-61360
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the ovpn module during the deletion of an interface. A narrow window occurs during the ovpn dellink process where a CMD PEER NEW message sent via netlink to ad...
LXC security vulnerabilities
LXC is an open-source low-level Linux container runtime that has been extensively tested. LXC has a security vulnerability, which stems from a logical flaw in the deletion path of the findline function within the setuid helper program lxc-user-nic. This flaw allows non-privileged users to delete...
PT-2026-36995
Name of the Vulnerable Software and Affected Versions lxc versions prior to 7.0.0 Description A logic flaw in the find line function of the lxc-user-nic setuid helper allows an unprivileged user to delete OVS-attached network interfaces belonging to other users. When scanning the NIC database to...
AZL-69602 CVE-2025-22111 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. SIOCBRDELIF is passed to devioctl first and later forwarded to brioctlcall, which causes unnecessary RTNL dance and the splat below 0 under RTNL pressure. Let's say Thread A...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the ieee802154ifremove function not properly checking the list of local interfaces when deleting a network...
kernel: ionic: fix use after netif_napi_del()
A vulnerability was found in the Linux kernel's Ionic driver in the ionicqcqenable function, where the issue arises when the driver fails to reset the .poll pointer to NULL after a queue is unregistered via netifnapidel, leading to a use-after-free scenario when attempting to enable a previously...
PT-2021-29689
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.13.3 Description The issue is related to the mwifiex module, where the link is not properly brought down before deleting the interface. This is an automated ID intended to aid in discovery of potential securit...
PT-2021-25694
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.13.3 Description: The issue is related to the mwifiex module, where the link is not properly brought down before deleting the interface. This is an automated ID intended to aid in discovery of potential...
LXC Virtualization Access Confidential Data
The vulnerability of the LXC virtualization system relates to an error in providing access to users when requesting the deletion of a network interface. Exploiting this vulnerability allows an attacker to gain access to confidential data...
PT-2018-3455 · Linux Containers +3 · Lxc +3
Name of the Vulnerable Software and Affected Versions: LXC versions 2.0.9 and above LXC versions 3.0.0 and above, prior to 3.0.2 Description: The issue is related to the lxc-user-nic when deleting a network interface, which unconditionally opens a user-provided path. This can be used by an...