ipxe

iPXE network bootloader iPXE is the leading open source network boot firmware. It provides a full PXE implementation enhanced with additional features such as: boot from a web server via HTTP or HTTPS, boot from an iSCSI, FCoE, or AoE SAN, control the boot process with a script, create interactiv...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

RLSA-2026:99133 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: sctp: avoid authenable sysctl UAF during netns teardown CVE-2026-68162 kernel: sctp: keep chunk-transport in step with the list it is queued on CVE-2026-74588 kernel: sctp: clear...

advisories

LinnemanLabs Research and Advisories Security research, advisories, and proof-of-concept code from LinnemanLabs. Advisories and Research Links to write-ups, disclosures, and reproducible PoCs. Project| Findings / Techniques| CVEs| Result| Write-up| PoC ---|---|---|---|---|--- bluez| ?| ?| LPE to...

RLSA-2026:98100 Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: Revert "net/smc: Introduce TCP ULP support" CVE-2026-46330 kernel: Linux kernel: PPP over L2TP Use-After-Free vulnerability...

kernel-rt security update

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...

kernel: kernel: Denial of Service via unvalidated task in iSCSI management responses

A flaw was found in the Linux kernel's SCSI iSCSI implementation libiscsi. A remote, connected iSCSI target can cause a Denial of Service DoS by sending a crafted management response that references an uninitialized or free task slot. Because the kernel fails to verify that the task is active...

kernel: kernel: Denial of Service via unvalidated task in iSCSI management responses

A flaw was found in the Linux kernel's SCSI iSCSI implementation libiscsi. A remote, connected iSCSI target can cause a Denial of Service DoS by sending a crafted management response that references an uninitialized or free task slot. Because the kernel fails to verify that the task is active...

kernel: kernel: Denial of service via unvalidated task tag in iSCSI Reject PDU

A flaw was found in the Linux kernel's SCSI subsystem within the libiscsi module. A malicious or compromised iSCSI storage target can trigger a denial of service DoS or data integrity issues by sending a crafted Reject Protocol Data Unit PDU containing an unvalidated Initiator Task Tag ITT. Becau...

RockyLinux 8 : kernel-rt (RLSA-2026:98100)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:98100 advisory. kernel: Revert net/smc: Introduce TCP ULP support CVE-2026-46330 kernel: Linux kernel: PPP over L2TP Use-After-Free vulnerability CVE-2026-68398 kernel:...

RockyLinux 8 : kernel (RLSA-2026:98099)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:98099 advisory. kernel: Revert net/smc: Introduce TCP ULP support CVE-2026-46330 kernel: Linux kernel: PPP over L2TP Use-After-Free vulnerability CVE-2026-68398 kernel:...

kernel: kernel: Denial of Service via unvalidated task in iSCSI management responses

A flaw was found in the Linux kernel's SCSI iSCSI implementation libiscsi. A remote, connected iSCSI target can cause a Denial of Service DoS by sending a crafted management response that references an uninitialized or free task slot. Because the kernel fails to verify that the task is active...

kernel: kernel: Denial of Service via unvalidated task in iSCSI management responses

A flaw was found in the Linux kernel's SCSI iSCSI implementation libiscsi. A remote, connected iSCSI target can cause a Denial of Service DoS by sending a crafted management response that references an uninitialized or free task slot. Because the kernel fails to verify that the task is active...

kernel: kernel: Denial of service via unvalidated task tag in iSCSI Reject PDU

A flaw was found in the Linux kernel's SCSI subsystem within the libiscsi module. A malicious or compromised iSCSI storage target can trigger a denial of service DoS or data integrity issues by sending a crafted Reject Protocol Data Unit PDU containing an unvalidated Initiator Task Tag ITT. Becau...

kernel: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE

A flaw was found in the Linux kernel's iSCSI target core. This use-after-free vulnerability occurs in the corescsi3emulateproregisterandmove function. When processing iSCSI TransportIDs, a memory buffer is prematurely unmapped while still being referenced, particularly when the parameter list spa...

kernel: scsi: target: iscsi: Reserve a terminator byte for the login payload

A flaw was found in the Linux kernel's iSCSI target component. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted login payload to an iSCSI portal configured for Challenge-Handshake Authentication Protocol CHAP. This can lead to an out-of-bounds read,...

kernel: kernel: Denial of Service via unvalidated task in iSCSI management responses

A flaw was found in the Linux kernel's SCSI iSCSI implementation libiscsi. A remote, connected iSCSI target can cause a Denial of Service DoS by sending a crafted management response that references an uninitialized or free task slot. Because the kernel fails to verify that the task is active...

kernel: kernel: Denial of Service via unvalidated task in iSCSI management responses

A flaw was found in the Linux kernel's SCSI iSCSI implementation libiscsi. A remote, connected iSCSI target can cause a Denial of Service DoS by sending a crafted management response that references an uninitialized or free task slot. Because the kernel fails to verify that the task is active...

kernel: scsi: target: iscsi: Reserve a terminator byte for the login payload

A flaw was found in the Linux kernel's iSCSI target component. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted login payload to an iSCSI portal configured for Challenge-Handshake Authentication Protocol CHAP. This can lead to an out-of-bounds read,...

kernel: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE

A flaw was found in the Linux kernel's iSCSI target core. This use-after-free vulnerability occurs in the corescsi3emulateproregisterandmove function. When processing iSCSI TransportIDs, a memory buffer is prematurely unmapped while still being referenced, particularly when the parameter list spa...