124 matches found
kernel: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction
A flaw was found in the Linux kernel's Transmission Control Protocol TCP networking stack. This vulnerability arises from a stale per-CPU variable that can retain a previously used Initial Sequence Number ISN when certain packets are dropped. A remote attacker could exploit this by sending...
CVE-2026-19735: Use of Insufficiently Random Values
The RFC 6528 initial-sequence-number implementation in subsys/net/ip/tcp.c derived every TCP ISN from SHA-256uniquekey || four-tuple plus a uptime-derived offset, where uniquekey is a 128-bit secret filled once by syscsrandget. The return value of that call was discarded and the once guard was...
PT-2026-110222
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An issue exists in the RFC 6528 initial-sequence-number ISN implementation within subsys/net/ip/tcp.c. The system derives the TCP ISN using a 128-bit secret uniq...
CVE-2026-88778 TCP Initial Sequence Number (ISN) prediction
Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23...
CVE-2026-88778
Citrix NetScaler ADC and NetScaler Gateway are vulnerable to a TCP Initial Sequence Number (ISN) prediction flaw. The issue affects appliances with TCP-based virtual servers (such as HTTP, SSL, or TCP) where Enhanced ISN Generation is disabled. This vulnerability allows for predictable sequence n...
CVE-2026-88778 TCP Initial Sequence Number (ISN) prediction
Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100760)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100760 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: restrict IPOPTSSRR and IPOPTLSRR options This patch restricts setting Loose Source and Reco...
CVE-2026-64024 tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction
In the Linux kernel, the following vulnerability has been resolved: tcp: fix stale per-CPU tcptwisn leak enabling ISN prediction Blamed commit moved the TIMEWAIT-derived ISN from the skb control block to a per-CPU variable, assuming the value would always be consumed by tcpconnrequest for the sam...
CVE-2026-64024
In the Linux kernel, the following vulnerability has been resolved: tcp: fix stale per-CPU tcptwisn leak enabling ISN prediction Blamed commit moved the TIMEWAIT-derived ISN from the skb control block to a per-CPU variable, assuming the value would always be consumed by tcpconnrequest for the sam...
CVE-2026-64024: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: tcp: fix stale per-CPU tcptwisn leak enabling ISN prediction Blamed commit moved the TIMEWAIT-derived ISN from the skb control block to a per-CPU variable, assuming the value would always be consumed by tcpconnrequest for the sam...
AZL-90642 CVE-2026-53249 affecting package kernel for versions less than 6.6.143.1-1
In the Linux kernel, the following vulnerability has been resolved: ipv4: restrict IPOPTSSRR and IPOPTLSRR options This patch restricts setting Loose Source and Record Route LSRR and Strict Source and Record Route SSRR IP options to users with CAPNETRAW capability. This prevents unprivileged...
MAL-2025-98515 Malicious code in wibowo-wajit17-pore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c77145762cbe64ad10c19daa85589596245859d6b4d38caddc97de63a62f2cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2020-20142
Malware in sbrugna...
EUVD-2020-20137
Malware in sbrugna...
EUVD-2020-20139
Malware in sbrugna...
EUVD-2020-23344
Malware in sbrugna...
EUVD-2018-19088
Malware in sbrugna...
EUVD-2015-3994
Malware in sbrugna...