Lucene search
+L

11 matches found

Cvelist
Cvelist
•added 2026/06/24 4:29 p.m.•66 views

CVE-2026-53006 ipv6: fix possible UAF in icmpv6_rcv()

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6rcv Caching saddr and daddr before pskbpull is problematic since skb-head can change. Remove these temporary variables: - We only access &ipv6hdrskb-saddr and &ipv6hdrskb-daddr when netdbgratelimit...

9.8CVSS0.00394EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2026/05/22 12:00 a.m.•20 views

Linux Distros Unpatched Vulnerability : CVE-2026-43501

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: reserve maclen headroom when recompressed SRH grows ipv6rplsrhrcv decompresses a...

9.8CVSS6AI score0.0099EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/05/21 3:20 p.m.•34 views

CVE-2026-43501

A flaw was found in the Linux kernel. A local attacker can exploit an out-of-bounds write vulnerability when the kernel recomputes an IPv6 Source Routing Header SRH. This issue occurs because insufficient headroom is reserved during the recompression process, leading to memory corruption...

9.8CVSS6.2AI score0.0099EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2026/05/21 1:16 p.m.•24 views

UBUNTU-CVE-2026-43501

In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: reserve maclen headroom when recompressed SRH grows ipv6rplsrhrcv decompresses an RFC 6554 Source Routing Header, swaps the next segment into ipv6hdr-daddr, recompresses, then pulls the old header and pushes the new on...

9.8CVSS6.1AI score0.0099EPSS
SaveExploits0References40
EUVD
EUVD
•added 2026/05/06 12:30 p.m.•25 views

EUVD-2026-27698

In the Linux kernel, the following vulnerability has been resolved: xfrm6: fix uninitialized saddr in xfrm6getsaddr xfrm6getsaddr does not check the return value of ipv6devgetsaddr. When ipv6devgetsaddr fails to find a suitable source address returns -EADDRNOTAVAIL, saddr-in6 is left uninitialize...

6.7AI score0.00375EPSS
SaveExploits0References9
CVE
CVE
•added 2026/05/06 11:27 a.m.•52 views

CVE-2026-43139

The CVE-2026-43139 entry concerns the Linux kernel xfrm6 subsystem. The issue arises in xfrm6_get_saddr() which does not check the return value of ipv6_dev_get_saddr(); when ipv6_dev_get_saddr() fails with -EADDRNOTAVAIL, saddr->in6 remains uninitialized and xfrm6_get_saddr() incorrectly retur...

8.6CVSS6.7AI score0.00375EPSS
SaveExploits0References8Affected Software1
Amazon
Amazon
•added 2025/09/29 12:00 a.m.•17 views

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: iavf: Fix reset error handling CVE-2022-50053 In the Linux kernel, the following vulnerability has been resolved: netsched: Flush gsoskb list too during -change CVE-2025-37992 In the Linux kernel, the following...

7.8CVSS6.1AI score0.00481EPSS
SaveExploits0
osv_cve
osv_cve
•added 2025/04/16 10:20 a.m.•16 views

CVE-2025-22021 netfilter: socket: Lookup orig tuple for IPv6 SNAT

In the Linux kernel, the following vulnerability has been resolved: netfilter: socket: Lookup orig tuple for IPv6 SNAT nfsklookupslowv4 does the conntrack lookup for IPv4 packets to restore the original 5-tuple in case of SNAT, to be able to find the right socket if any. Then socketmatch can...

10CVSS6.1AI score
SaveExploits0References14
osv_ubuntu
osv_ubuntu
•added 2021/12/25 2:15 a.m.•13 views

UBUNTU-CVE-2021-45485

In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/outputcore.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses...

7.5CVSS6.7AI score0.03615EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2016/02/03 12:00 a.m.•83 views

RHEL 7 : kernel (RHSA-2016:0103)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0103 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. It was found that the x86 ISA Instruction Set...

10CVSS6.6AI score0.03442EPSS
SaveExploits17References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/04/14 12:00 a.m.•7 views

CVE-2010-0812: Undefined Security Weakness

Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to bypass intended IPv4 source-address restrictions via a mismatched IPv6 source address in a tunneled ISATAP packet, aka "ISATAP IPv6 Source Address Spoofing...

6.4CVSS5.8AI score0.17452EPSS
SaveExploits1References2
Rows per page
Query Builder