Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: net: vxlan: Prevent NULL dereferencing in vxlanxmitone. Neither sock4 nor sock6 pointers are guaranteed to be non-NULL in vxlanxmitone, especially if the iface is disabled. This can lead to the following NULL dereferences: -...

EUVD-2006-3199

Malware in sbrugna...

EUVD-2004-0370

Malware in sbrugna...

EUVD-2007-1586

Malware in sbrugna...

EUVD-2003-0249

Malware in sbrugna...

EUVD-2016-7096

Malware in sbrugna...

EUVD-2022-55072

Malicious code in bioql PyPI...

AZL-64526 CVE-2025-38147 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: calipso: Don't call calipso functions for AFINET sk. syzkaller reported a null-ptr-deref in txoptget. 0 The offset 0x70 was of struct ipv6txoptions in struct ipv6pinfo, so struct ipv6pinfo was NULL there. However, this never...

CVE-2025-38147 calipso: Don't call calipso functions for AF_INET sk.

In the Linux kernel, the following vulnerability has been resolved: calipso: Don't call calipso functions for AFINET sk. syzkaller reported a null-ptr-deref in txoptget. 0 The offset 0x70 was of struct ipv6txoptions in struct ipv6pinfo, so struct ipv6pinfo was NULL there. However, this never...

Linux Distros Unpatched Vulnerability : CVE-2024-26679

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Red Hat Enterprise Linux - kernel: inet: read sk-skfamily once in inetrecverror Ubuntu Linux - In the Linux kernel, the following vulnerability has been resolve...

CVE-2024-56644 net/ipv6: release expired exception dst cached in socket

In the Linux kernel, the following vulnerability has been resolved: net/ipv6: release expired exception dst cached in socket Dst objects get leaked in ip6negativeadvice when this function is executed for an expired IPv6 route located in the exception table. There are several conditions that must ...

CVE-2021-47515 seg6: fix the iif in the IPv6 socket control block

In the Linux kernel, the following vulnerability has been resolved: seg6: fix the iif in the IPv6 socket control block When an IPv4 packet is received, the iprcvcore... sets the receiving interface index into the IPv4 socket control block v5.16-rc4, net/ipv4/ipinput.c line 510: IPCBskb-iif =...

kernel: seg6: fix the iif in the IPv6 socket control block

A vulnerability was found in the Linux kernel's seg6 implementation in the seg6dosrhencap function, where the issue arises when an IPv4 packet is encapsulated within an IPv6 segment routing header, causing the receiving interface index to be cleared, leading to potential NULL pointer dereferences...

SUSE CVE-2013-2232

The ip6skdstcheck function in net/ipv6/ip6output.c in the Linux kernel before 3.10 allows local users to cause a denial of service system crash by using an AFINET6 socket for a connection to an IPv4 interface...

PT-2021-26925

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.165 Description The issue is related to the IPv6 socket control block. It was introduced in version v5.0 and fixed in version v5.4.165. The actual impact and attack plausibility have not yet been proven...

PT-2021-26871

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.258 Description The issue is related to the IPv6 socket control block. It was introduced in version v4.14.98 and fixed in version v4.14.258. The actual impact and attack plausibility have not yet been prove...

PT-2021-27059

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.8 Description The issue is related to the IPv6 socket control block. It was introduced in version v5.0 and fixed in version v5.15.8. The actual impact and attack plausibility have not yet been proven...

PT-2021-26895

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.221 Description The issue is related to the IPv6 socket control block. It was introduced in version v4.19.20 and fixed in version v4.19.221. The actual impact and attack plausibility have not yet been prove...

PT-2021-26976

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.85 Description The issue is related to the IPv6 socket control block. It was introduced in version v5.0 and fixed in Linux Kernel version v5.10.85. The actual impact and attack plausibility have not yet bee...

FreeBSD ip6_setpktopt Use-After-Free Privilege Escalation Exploit

This Metasploit module exploits a race and use-after-free vulnerability in the FreeBSD kernel IPv6 socket handling. A missing synchronization lock in the IPV62292PKTOPTIONS option handling in setsockopt permits racing ip6setpktopt access to a freed ip6pktopts struct. This exploit overwrites the...