Exploit for CVE-2026-99999

CVE-2026-99999 PwnEscape PoC Linux kernel IPv4 csumstart...

Exploit for CVE-2026-99999

CVE-2026-99999 kernel check Tools to find out whether a Linux...

kernel: Fix of 31 CVEs

ipv4: validate checksumstart before completing checksum CVE-2026-99999 - fbdev: serialize mode sysfs access with lockfbinfo CVE-2026-80785 - powerpc/rtas: avoid device tree lookups in rtasosterm CVE-2022-50870 - svcrdma: Reject connection when transport allocation fails CVE-2026-89531 -...

Exploit for CVE-2026-99999

cve-2026-99999-audit !CVEhttps://img.shields.io/badge/CVE-...

CVE-2026-80793

A flaw was found in the Linux kernel's IPv4 fragmentation handling. When processing IPv4 packets, if the Maximum Transmission Unit MTU is set to an unusually small value, the kernel's fragmentation logic can enter an infinite loop. This loop causes the system to continuously allocate and transmit...

CVE-2026-98432

A flaw was found in the Linux kernel's IPv4 networking subsystem. A race condition occurs during concurrent processing of retransmitted Transmission Control Protocol TCP connection requests or socket migrations, allowing socket options to be freed while still in use. A remote attacker could explo...

CVE-2026-99999

A flaw was found in the Linux kernel. A local attacker or untrusted guest virtual machine can exploit this vulnerability by transmitting network packets containing malformed checksum metadata into the IPv4 networking subsystem. This failure to validate checksum metadata can corrupt memory during...

Unbreakable Enterprise kernel security update

5.15.0-325.221.6.4 - ipv4: free inetopt and ireqopt after an RCU grace period Eric Dumazet Orabug: 40167661 CVE-2026-98432 - ipv4: validate checksumstart before completing checksum Michael S. Tsirkin Orabug: 40167656 CVE-2026-99999 - netfilter: nfnetlinkqueue: unbreak SCTP traffic Antonio Ojea...

Unbreakable Enterprise kernel security update

6.12.0-207.111.5.4 - ipv4: free inetopt and ireqopt after an RCU grace period Eric Dumazet Orabug: 40167669 CVE-2026-98432 - ipv4: validate checksumstart before completing checksum Michael S. Tsirkin Orabug: 40167684 CVE-2026-99999...

Unbreakable Enterprise kernel security update

5.4.17-2136.360.3.1 - ipv4: free inetopt and ireqopt after an RCU grace period Eric Dumazet Orabug: 40167664 CVE-2026-98432 - ipv4: validate checksumstart before completing checksum Michael S. Tsirkin Orabug: 40167666 CVE-2026-99999 - netfilter: nfnetlinkqueue: unbreak SCTP traffic Antonio Ojea...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2026-500397)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500397 advisory. - ipv4: free inetopt and ireqopt after an RCU grace period Eric Dumazet Orabug: 40167664 CVE-2026-98432 - ipv4: validate checksumstart before...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500398)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500398 advisory. - ipv4: free inetopt and ireqopt after an RCU grace period Eric Dumazet Orabug: 40167661 CVE-2026-98432 - ipv4: validate checksumstart before...

SUSE CVE-2026-99999

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network header and cause a bunch of mischief. This was discovered and report...

CVE-2026-111171

Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 contains a server-side request forgery vulnerability because checkipblocked does not unwrap IPv4-mapped IPv6 addresses in CCIP Read URL validation. Malicious contracts can return OffchainLookup URLs with IPv4-mapped IPv6 hosts or AAAA record...

EUVD-2026-102298

Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 contains a server-side request forgery vulnerability because checkipblocked does not unwrap IPv4-mapped IPv6 addresses in CCIP Read URL validation. Malicious contracts can return OffchainLookup URLs with IPv4-mapped IPv6 hosts or AAAA record...

CVE-2026-111171

The Web3.py library versions 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 are vulnerable to a Server-Side Request Forgery (SSRF) vulnerability. The root cause is that the _check_ip_blocked() function fails to unwrap IPv4-mapped IPv6 addresses during CCIP Read URL validation . An attacker can u...

CVE-2026-111171 Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 CCIP-Read SSRF Bypass

Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 contains a server-side request forgery vulnerability because checkipblocked does not unwrap IPv4-mapped IPv6 addresses in CCIP Read URL validation. Malicious contracts can return OffchainLookup URLs with IPv4-mapped IPv6 hosts or AAAA record...

CVE-2026-111171 Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 CCIP-Read SSRF Bypass

Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 contains a server-side request forgery vulnerability because checkipblocked does not unwrap IPv4-mapped IPv6 addresses in CCIP Read URL validation. Malicious contracts can return OffchainLookup URLs with IPv4-mapped IPv6 hosts or AAAA record...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ipv4: IGMP: The multicast group is removed from the hash table when the device is destroyed. When a device is destroyed under RTNL, the ipmcDestroydev function iterates through the multicast list and calls ipmaput on each member...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: netfilter: nftct: sanitize layer 3 and 4 protocol numbers in custom expectations - Disallow families other than NFPROTOIPV4,IPV6,INET. - Disallow layer 4 protocols without ports, as the destination port is a mandatory attribut...