CVE-2026-68337

The CVE affects the Linux kernel BPF redirect helpers (bpf_redirect* and skb_do_redirect) and the bpf_net_context flow. The issue arose when a BPF program ran via tc BPF paths and accessed current->bpf_net_context unconditionally, leading to NULL dereferences. Specifically, redirects via tc qd...

EUVD-2026-55438

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject redirect helpers without a bpfnetcontext The bpfredirect helpers and skbdoredirect obtain the per-task bpfredirectinfo via bpfnetctxgetri, which dereferences the current-bpfnetcontext unconditionally. That context is...

CVE-2026-10655

The asynchronous SNTP client in Zephyr subsys/net/lib/sntp/sntp.c, sntpcloseasync closed the UDP socket file descriptor directly from the calling thread immediately after detaching it from the network socket service, without synchronizing with the socket-service poll thread. The socket service...

CVE-2026-10655

The asynchronous SNTP client in Zephyr subsys/net/lib/sntp/sntp.c, sntpcloseasync closed the UDP socket file descriptor directly from the calling thread immediately after detaching it from the network socket service, without synchronizing with the socket-service poll thread. The socket service...

CVE-2026-10655 Use-after-free race in SNTP async client when closing the socket while the socket service is still polling it

The asynchronous SNTP client in Zephyr subsys/net/lib/sntp/sntp.c, sntpcloseasync closed the UDP socket file descriptor directly from the calling thread immediately after detaching it from the network socket service, without synchronizing with the socket-service poll thread. The socket service...

CVE-2026-10655

Concrete details found: Zephyr’s asynchronous SNTP client (sntp_close_async) can race with the socket service poll thread. Closing the UDP socket descriptor from a different thread (SNTP timeout path) may free and reuse net_context while the poll thread holds a poller node, causing a use-after-fr...

net: tls: explicitly disallow disconnect

...

SUSE CVE-2024-50094

In the Linux kernel, the following vulnerability has been resolved: sfc: Don't invoke xdpdoflush from netpoll. Yury reported a crash in the sfc driver originated from netpollsendudp. The netconsole sends a message and then netpoll invokes the driver's NAPI function with a budget of zero. It is...

SUSE CVE-2024-47708

In the Linux kernel, the following vulnerability has been resolved: netkit: Assign missing bpfnetcontext During the introduction of struct bpfnetcontext handling for XDP-redirect, the netkit driver has been missed, which also requires it because NETKITREDIRECT invokes skbdoredirect which is...

CVE-2024-47708 netkit: Assign missing bpf_net_context

In the Linux kernel, the following vulnerability has been resolved: netkit: Assign missing bpfnetcontext During the introduction of struct bpfnetcontext handling for XDP-redirect, the netkit driver has been missed, which also requires it because NETKITREDIRECT invokes skbdoredirect which is...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a missing bpfnetcontext assignment in the netkit driver, which could cause the kernel to crash...