7 matches found
CVE-2026-64114 ipv4: raw: reject IP_HDRINCL packets with ihl < 5
In the Linux kernel, the following vulnerability has been resolved: ipv4: raw: reject IPHDRINCL packets with ihl ihl 4; err = -EINVAL; if iphlen length goto errorfree; if iphlen = sizeofiph / fix up saddr, totlen, id, csum, transportheader / It does not, however, reject ihl = sizeofiph" branch is...
CVE-2026-64114
In the Linux kernel, the following vulnerability has been resolved: ipv4: raw: reject IPHDRINCL packets with ihl ihl 4; err = -EINVAL; if iphlen length goto errorfree; if iphlen = sizeofiph / fix up saddr, totlen, id, csum, transportheader / It does not, however, reject ihl = sizeofiph" branch is...
CVE-2026-64114
CVE-2026-64114 affects the Linux kernel’s IPv4 raw path. In raw_send_hdrinc(), the code validates that the caller-supplied IPv4 header fits the message length, but it does not reject headers with ihl < 5 per RFC 791. As a result, locally constructed packets with an invalid Internet Header Leng...
CVE-2026-64114
In the Linux kernel, the following vulnerability has been resolved: ipv4: raw: reject IPHDRINCL packets with ihl ihl 4; err = -EINVAL; if iphlen length goto errorfree; if iphlen = sizeofiph / fix up saddr, totlen, id, csum, transportheader / It does not, however, reject ihl = sizeofiph" branch is...
PT-2026-61431
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IPv4 raw socket implementation where the raw send hdrinc function fails to reject packets with an Internet Header Length ihl value of less than 5. According to RFC...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001984)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001984 advisory. The skbflowdissect function in net/core/flowdissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denial of service infinite loop via a sma...
DEBIAN-CVE-2016-6835
The vmxnettxpktparseheaders function in hw/net/vmxnettxpkt.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service buffer over-read by leveraging failure to check IP header length...