Lucene search
+L

884 matches found

Kitploit
Kitploit
added 2026/08/27 1:57 a.m.3 views

CVE-2019-7489

В этом репозитории нет README...

9.8CVSS8.8AI score0.05276EPSS
SaveExploits0
CVE
CVE
added 2026/08/26 2:37 p.m.10 views

CVE-2026-80587

CVE-2026-80587 affects the MPTCP (Multipath TCP) subsystem of the Linux kernel . According to RFC 8684, several MPTCP suboptions are mutually exclusive, but the kernel's input path did not enforce these restrictions the way the output path did via mptcp_write_options. A remote peer (buggy or mali...

5.6AI score
SaveExploits0References5
CVE
CVE
added 2026/08/26 2:37 p.m.11 views

CVE-2026-80588

CVE-2026-80588 affects the Linux kernel mptcp (Multipath TCP) subsystem. After commit 9db5b3cec4ec introduced borrowing of forward memory from subflows, errors in the receive path prior to queueing skbs into the receive queue no longer trigger forward-allocated memory reclaiming. This can cause f...

5.3AI score
SaveExploits0References3
CVE
CVE
added 2026/08/26 2:37 p.m.20 views

CVE-2026-80586

CVE-2026-80586 affects the MPTCP (Multipath TCP) options parser in the Linux kernel. When a remote peer sends a malformed DSS (Data Sequence Number) suboption with an incorrect size , followed by another DSS or MPC + Data, the first suboption is ignored but leaves residual fields written. This ca...

5.4AI score
SaveExploits0References8
CVE
CVE
added 2026/08/26 2:37 p.m.9 views

CVE-2026-80585

CVE-2026-80585 affects the Linux kernel MPTCP (Multipath TCP) fastopen subsystem. The root cause is that mptcp_fastopen_subflow_synack_set_params() set the is_mptfo flag before verifying that SYN data was actually queued in the receive queue. For passive TCP Fast Open SYNs carrying a valid cookie...

5.4AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/24 2:51 p.m.2 views

multi_path

multipath - Exploit für p0 Issue 1558 CVE-2018-4241 @i41nbeer mptcpusrconnectx ist der Handler für den connectx-Systemaufruf für die APMULTIPATH Socket-Familie. Die Logik dieser Funktion behandelt Quell- und Ziel-Sockaddr, die weder AFINET noch AFINET6 sind, nicht korrekt: root@kitploit: // verif...

9.3CVSS7.8AI score0.08121EPSS
SaveExploits4
BDU FSTEC
BDU FSTEC
added 2026/08/14 12:00 a.m.8 views

The vulnerability in the `net/mptcp/pm_kernel.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the net/mptcp/pmkernel.c component of the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS5.7AI score0.00129EPSS
SaveExploits0References15Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/08/13 12:00 a.m.5 views

The vulnerabilities of Linux operating system’s kernel mptcp components, which allow a hacker to cause a service failure

The vulnerability of Linux operating system’s mptcp kernel components is related to memory initialization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.5AI score0.00118EPSS
SaveExploits0References13Affected Software3
Tenable Nessus
Tenable Nessus
added 2026/08/12 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-68170

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: fix stale skb-sk reference on subflow close The backlog list is updated by mptcpdataready under mptcpdatalock. The cleanup of backlog references to a...

9.8CVSS5.5AI score0.00516EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/11 6:45 p.m.6 views

CVE-2026-68170

A flaw was found in the Linux kernel's Multipath TCP MPTCP feature. A timing issue, or race condition, can occur when a subflow is being closed, leading to a situation where the system attempts to use memory that has already been freed. This 'use-after-free' vulnerability arises because concurren...

9.8CVSS5.3AI score0.00516EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/11 3:31 p.m.8 views

CVE-2026-68169

A flaw was found in the Linux kernel's Multipath TCP MPTCP subsystem. A race condition in the mptcppmuserspacegetlocalid function allows a memory address entry to be freed while still being referenced. A local attacker could exploit this use-after-free vulnerability, potentially leading to a syst...

7CVSS5.6AI score0.00206EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/10 1:20 p.m.8 views

UBUNTU-CVE-2026-68170

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix stale skb-sk reference on subflow close The backlog list is updated by mptcpdataready under mptcpdatalock. The cleanup of backlog references to a closing subflow, however, was performed in mptcpclosessk, before...

9.8CVSS5.3AI score0.00516EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/08/10 1:20 p.m.10 views

CVE-2026-68170

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix stale skb-sk reference on subflow close The backlog list is updated by mptcpdataready under mptcpdatalock. The cleanup of backlog references to a closing subflow, however, was performed in mptcpclosessk, before...

9.8CVSS5.4AI score0.00516EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/08/10 1:20 p.m.10 views

CVE-2026-68169

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: userspace: fix use-after-free in getlocalid In mptcppmuserspacegetlocalid, the address entry is looked up under spinlock, but its id is read after dropping the lock. A concurrent deletion can free the entry between the...

5.5AI score0.00206EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/10 1:20 p.m.5 views

UBUNTU-CVE-2026-68169

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: userspace: fix use-after-free in getlocalid In mptcppmuserspacegetlocalid, the address entry is looked up under spinlock, but its id is read after dropping the lock. A concurrent deletion can free the entry between the...

5.4AI score0.00206EPSS
SaveExploits0References7
OSV
OSV
added 2026/08/10 11:59 a.m.15 views

CVE-2026-68170 mptcp: fix stale skb->sk reference on subflow close

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix stale skb-sk reference on subflow close The backlog list is updated by mptcpdataready under mptcpdatalock. The cleanup of backlog references to a closing subflow, however, was performed in mptcpclosessk, before...

9.8CVSS5.4AI score
SaveExploits0References5
CVE
CVE
added 2026/08/10 11:59 a.m.44 views

CVE-2026-68169

The CVE-2026-68169 entry documents a race in Linux kernel mptcp_pm_userspace_get_local_id() where an address entry is looked up under a spinlock but its id is read after the lock is released, allowing a concurrent delete to free the entry and cause a use-after-free. Concrete details show the issu...

5.4AI score0.00206EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/10 11:59 a.m.12 views

CVE-2026-68169 mptcp: pm: userspace: fix use-after-free in get_local_id

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: userspace: fix use-after-free in getlocalid In mptcppmuserspacegetlocalid, the address entry is looked up under spinlock, but its id is read after dropping the lock. A concurrent deletion can free the entry between the...

5.5AI score
SaveExploits0References9
AstraLinux
AstraLinux
added 2026/08/10 7:11 a.m.7 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: mptcp: fixed a race condition in mptcpschedulework syzbot reported a use-after-free in mptcpschedulework 1 The issue arises from mptcpschedulework scheduling a task, then checking the refcount of sk-skrefcnt if the task was...

9.8CVSS6.2AI score0.00454EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/10 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-68169

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: pm: userspace: fix use-after-free in getlocalid In mptcppmuserspacegetlocalid, the address entry is looked up under spinlock, but its id is read after...

5.6AI score0.00206EPSS
SaveExploits0References4
Rows per page
Query Builder