monty v0.0.22

Monty A minimal, secure Python interpreter written in Rust for use by AI. Experimental - This project is still in development, and not ready for prime time. A minimal, secure Python interpreter written in Rust for use by AI. Monty avoids the cost, latency, complexity and general faff of using a...

CVE-2026-31912: Improper Validation of Specified Index, Position, or Offset in Input

libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instruction nor executing a jump instruction with an offset that translates to a pointer outside of the buffer. In particular uncommon use cases a crafted filter program can cause the...

CVE-2026-6554: Loop with Unreachable Exit Condition

libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. In particular uncommon use cases a crafted filter program can cause the interpreter to loop infinitely...

PT-2026-86446

Name of the Vulnerable Software and Affected Versions libpcap affected versions not specified Description The BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to enable looping through backward jumps. However, the interpreter does not restrict the number of loop...

PT-2026-86444

Name of the Vulnerable Software and Affected Versions libpcap affected versions not specified Description The BPF interpreter fails to detect when the end of the filter program buffer is reached due to a missing return instruction, or when a jump instruction uses an offset that points outside the...

PT-2026-86445

Name of the Vulnerable Software and Affected Versions libpcap affected versions not specified Description The BPF interpreter fails to verify if the immediate value is zero when processing 'div k' and 'mod k' ALU instructions. This allows a specially crafted filter program to trigger a division b...

Linux Distros Unpatched Vulnerability : CVE-2026-31912

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instruction nor executing a jump instruction with ...

PT-2026-86443

Name of the Vulnerable Software and Affected Versions libpcap affected versions not specified Description The BPF interpreter calls the abort function when it encounters a BPF instruction containing an invalid opcode. This behavior allows a crafted filter program to terminate the operating system...

CVE-2026-6244: Divide By Zero

libpcap BPF interpreter for the 'div k' and 'mod k' ALU instructions does not check whether the immediate value is zero. In particular uncommon use cases a crafted filter program can cause a division by zero...

CVE-2026-31911: Reachable Assertion

libpcap BPF interpreter calls abort if it encounters a BPF instruction that has an invalid opcode. In particular uncommon use cases a crafted filter program can terminate the OS process...

Linux Distros Unpatched Vulnerability : CVE-2026-0799

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpc...

Linux Distros Unpatched Vulnerability : CVE-2026-31911

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libpcap BPF interpreter calls abort if it encounters a BPF instruction that has an invalid opcode. In particular uncommon use cases a crafted filter program can...

CVE-2026-0799: Improper Validation of Array Index

In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to tr...

Linux Distros Unpatched Vulnerability : CVE-2026-6244

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libpcap BPF interpreter for the 'div k' and 'mod k' ALU instructions does not check whether the immediate value is zero. In particular uncommon use cases a...

Linux Distros Unpatched Vulnerability : CVE-2026-6554

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the...

The vulnerability of the bpf_jit_prog_releaseother() function in the kernel/bpf/core.c module, which supports the BPF interpreter for Linux kernels, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the bpfjitprogreleaseother function in the kernel/bpf/core.c module, which supports the BPF interpreter for Linux kernels, relates to the dereferencing of a pointer whose validity has expired. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the bpf_tracing_prog_attach() function in the kernel/bpf/syscall.c module, which supports the BPF interpreter for Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bpftracingprogattach function in the kernel/bpf/syscall.c module, which supports the BPF interpreter for Linux kernels, is related to incorrect code generation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the bpf_fd_array_map_clear() function in the kernel/bpf/arraymap.c module, which supports the BPF interpreter in Linux kernels, allows a hacker to trigger a service failure.

The vulnerability of the bpffdarraymapclear function in the kernel/bpf/arraymap.c module, which supports BPF interpreter in Linux kernels, is related to synchronization errors. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the btf_check_dtor_kfuncs() function in the kernel/bpf/btf.c module, which supports the BPF interpreter for Linux kernels, allows a attacker to cause a service failure.

The vulnerability of the btfcheckdtorkfuncs function in the kernel/bpf/btf.c module, which supports the BPF interpreter for Linux kernels, is related to improper security checks for standard elements. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the insn_array_map_direct_value_addr() function in the kernel/bpf/bpf_insn_array.c module, which is part of the BPF interpreter support for the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the insnarraymapdirectvalueaddr function in the kernel/bpf/bpfinsnarray.c module, which is part of the BPF interpreter for Linux kernel, involves a pointer overflow that causes the pointer to go beyond the allocated memory range. Exploiting this vulnerability could allow an...