52 matches found
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142752)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142752 advisory. In the Linux kernel, the following vulnerability has been resolved: um: vector: fix use-after-free in vectormmsgrx When vectormmsgrx discards a packet whose overlay...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143066)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143066 advisory. In the Linux kernel, the following vulnerability has been resolved: um: vector: fix use-after-free in vectormmsgrx When vectormmsgrx discards a packet whose overlay...
CVE-2026-74478
A flaw was found in the Linux kernel. A remote attacker, by sending specially crafted packets over GRE or L2TPv3 transports, could trigger a use-after-free vulnerability. This occurs in the vectormmsgrx function when a packet's overlay header fails verification, causing the system to attempt to...
SUSE CVE-2026-74478
In the Linux kernel, the following vulnerability has been resolved: um: vector: fix use-after-free in vectormmsgrx When vectormmsgrx discards a packet whose overlay header fails verifyheader, it frees the skb and continues the loop: if headercheck estats.rxencapserrors++; continue; The normal and...
CVE-2026-74478
In the Linux kernel, the following vulnerability has been resolved: um: vector: fix use-after-free in vectormmsgrx When vectormmsgrx discards a packet whose overlay header fails verifyheader, it frees the skb and continues the loop: if headercheck estats.rxencapserrors++; continue; The normal and...
CVE-2026-74478
In the Linux kernel, the following vulnerability has been resolved: um: vector: fix use-after-free in vectormmsgrx When vectormmsgrx discards a packet whose overlay header fails verifyheader, it frees the skb and continues the loop: if headercheck estats.rxencapserrors++; continue; The normal and...
EUVD-2026-59671
In the Linux kernel, the following vulnerability has been resolved: um: vector: fix use-after-free in vectormmsgrx When vectormmsgrx discards a packet whose overlay header fails verifyheader, it frees the skb and continues the loop: if headercheck estats.rxencapserrors++; continue; The normal and...
CVE-2026-74478
CVE-2026-74478 affects the Linux kernel, specifically the vector_mmsg_rx() path. When a packet is discarded because verify_header() fails, the code previously continued without advancing the slot, leaving a freed skb in the vector and causing a use-after-free in the RX path. The issue can be trig...
CVE-2026-74478 um: vector: fix use-after-free in vector_mmsg_rx()
In the Linux kernel, the following vulnerability has been resolved: um: vector: fix use-after-free in vectormmsgrx When vectormmsgrx discards a packet whose overlay header fails verifyheader, it frees the skb and continues the loop: if headercheck estats.rxencapserrors++; continue; The normal and...
CVE-2026-74478 um: vector: fix use-after-free in vector_mmsg_rx()
In the Linux kernel, the following vulnerability has been resolved: um: vector: fix use-after-free in vectormmsgrx When vectormmsgrx discards a packet whose overlay header fails verifyheader, it frees the skb and continues the loop: if headercheck estats.rxencapserrors++; continue; The normal and...
CVE-2026-74478: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: um: vector: fix use-after-free in vectormmsgrx When vectormmsgrx discards a packet whose overlay header fails verifyheader, it frees the skb and continues the loop: if headercheck estats.rxencapserrors++; continue; The normal and...
Linux Distros Unpatched Vulnerability : CVE-2026-74478
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - um: vector: fix use-after-free in vectormmsgrx When vectormmsgrx discards a packet whose overlay header fails verifyheader, it frees the skb and continues the...
PT-2026-72930
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the vector mmsg rx function. When a packet is discarded because its overlay header fails the verify header check, the system frees the socket buffer skb...
D-Link DWR-M961 command injection vulnerability (CNVD-2026-32360)
The D-Link DWR-M961 is a 4G LTE AC1200 dual-band wireless router launched by D-Link. It supports internet access via SIM cards and wired WAN multi-mode connectivity. The D-Link DWR-M961 has a command injection vulnerability. This vulnerability arises from the fact that the...
CVE-2026-71954
D-Link DWR-M961 devices with hardware version C1 and firmware before 1.1.5_C1_202607071108 are affected by a command injection in the /boafrm/formL2tpv3ConfigSetup interface. A remote attacker can inject arbitrary commands into the tunnelid and sessionid fields, leading to root-level command exec...
EUVD-2026-54806
D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formL2tpv3ConfigSetup interface. A remote attacker can inject arbitrary malicious commands into the tunnelid and sessionid fields, resulting in...
CVE-2026-71954 D-Link DWR-M961 Command Injection via /boafrm/formL2tpv3ConfigSetup
D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formL2tpv3ConfigSetup interface. A remote attacker can inject arbitrary malicious commands into the tunnelid and sessionid fields, resulting in...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002299)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002299 advisory. Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002346)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002346 advisory. Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service...