488367 matches found
kernel: net/packet: avoid fanout hook re-registration after unregister
A flaw was found in the Linux kernel's net/packet subsystem. A race condition can occur during the re-registration of a fanout hook after a network device has been unregistered. This issue arises when the packetsetring function attempts to re-add a fanout hook based on a stale state, potentially...
kernel: mptcp: options: reset DSS fields in case of unexpected size
A flaw was found in the Linux kernel's Multipath TCP mptcp implementation. A remote attacker could send specially crafted Data Sink Selection DSS options with an unexpected size. This could lead to data inconsistency or the access of uninitialized data, potentially resulting in information...
kernel: usb: usbfs: fix use-after-free of usb_device in usbdev_release()
A flaw was found in the Linux kernel's USB subsystem usbfs. An unprivileged local attacker with read/write access to a /dev/bus/usb node could exploit a use-after-free vulnerability. This occurs because the usbdevice structure is prematurely freed before all pending operations are completed...
kernel: net/iucv: filter frames in afiucv_hs_rcv() by ingress device
A flaw was found in the Linux kernel's AFIUCV Advanced Program-to-Program Communication over IUCV network protocol implementation. The afiucvhsrcv function, responsible for receiving frames, does not properly filter incoming frames based on the ingress network device. This oversight allows a loca...
kernel: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()
A flaw was found in the Linux kernel's SELinux module. When handling Stream Control Transmission Protocol SCTP connections, a specific function attempts to access a network socket that may not exist. This can lead to a system crash, resulting in a Denial of Service DoS for affected systems...
Important: Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update
An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
kernel: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()
A flaw was found in the Linux kernel. A race condition exists between the cgroupwritebackumount and inodeswitchwbs functions when a container exits. This race can lead to a kernel panic, resulting in a denial of service. This vulnerability could be triggered by a local user by exiting a container...
kernel: net/sched: serialize qdisc_rtab_list against concurrent get/put
A flaw was found in the Linux kernel's networking scheduler component. A race condition exists in the handling of rate tables qdiscrtablist due to a lack of proper locking during concurrent operations. A local attacker could exploit this by sending specially crafted network filter requests, leadi...
kernel: net/packet: avoid fanout hook re-registration after unregister
A flaw was found in the Linux kernel's net/packet subsystem. A race condition can occur during the re-registration of a fanout hook after a network device has been unregistered. This issue arises when the packetsetring function attempts to re-add a fanout hook based on a stale state, potentially...
kernel: ipvs: reload ip header after head reallocation
A flaw was found in the Linux kernel's IP Virtual Server IPVS module. When processing network packets, a buffer reallocation can leave an IP header pointer referencing freed memory. An attacker could exploit this use-after-free condition to cause a Denial of Service DoS by crashing the system or...
kernel: mptcp: options: reset DSS fields in case of unexpected size
A flaw was found in the Linux kernel's Multipath TCP mptcp implementation. A remote attacker could send specially crafted Data Sink Selection DSS options with an unexpected size. This could lead to data inconsistency or the access of uninitialized data, potentially resulting in information...
kernel: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions
A flaw was found in the Linux kernel's Server Message Block SMB client. When a file with the setuid or setgid bit is written to on certain Common Internet File System CIFS mounts specifically those using 'cifsacl', 'modefromsid' options, or SMB3.1.1 POSIX extensions, the kernel fails to properly...
kernel: tcp: restrict SO_ATTACH_FILTER to priv users
A flaw was found in the Linux kernel's handling of TCP sockets. An unprivileged application can exploit this vulnerability by attaching a Berkeley Packet Filter BPF using the SOATTACHFILTER option. This allows the application to conduct a side-channel attack, leading to the leakage of sensitive T...
kernel: net: gro: fix double aggregation of flush-marked skbs
A flaw was found in the Linux kernel's Generic Receive Offload GRO networking subsystem. An attacker could exploit this by sending specially crafted network packets that cause a double aggregation of flush-marked socket buffers skbs. This issue arises from a missing flush check, which allows...
kernel: usb: usbfs: fix use-after-free of usb_device in usbdev_release()
A flaw was found in the Linux kernel's USB subsystem usbfs. An unprivileged local attacker with read/write access to a /dev/bus/usb node could exploit a use-after-free vulnerability. This occurs because the usbdevice structure is prematurely freed before all pending operations are completed...
IonStack-S22-cve-2026-43499
IonStack-S22-cve-2026-43499 MERGED WITH ORIGINAL REPO: Find it here https://github.com/CamsShaft/IonStack-S22 Full root in the kernel domain with selinux permissive on my SM-S901W S22 5.10.168-android12-9-27760517-abS901WVLS4DWL3. NOTES: I'm not going into great detail or lengths in this one sinc...
OPENSUSE-SU-2026:22167-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-31731: thermal: core: Address thermal zone removal races with resume bsc1264042. - CVE-2026-46028: crypto: algifaead - snapshot IV for async AEAD requests...
kernel security, bug fix, and enhancement update
An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...
RLSA-2026:88477 Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: calipso: Don't call calipso functions for AFINET sk. CVE-2025-38147 kernel: ipv4: raw: reject IPHDRINCL packets with ihl 5 CVE-2026-64114 kernel: net/smc: reject CHID-0 ACCEPT that matche...
kernel security, bug fix, and enhancement update
An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...