Lucene search
+L

1268 matches found

RedHat Linux
RedHat Linux
added 2026/09/02 2:26 p.m.6 views

kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle

A flaw was found in the Linux kernel's networking scheduler. A race condition, which is a problem that occurs when multiple operations try to access the same resource at the same time, exists when network filter operations are run concurrently. This can lead to a Use-After-Free UAF vulnerability,...

7.8CVSS6.2AI score0.00241EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2026/09/02 2:24 p.m.5 views

kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle

A flaw was found in the Linux kernel's networking scheduler. A race condition, which is a problem that occurs when multiple operations try to access the same resource at the same time, exists when network filter operations are run concurrently. This can lead to a Use-After-Free UAF vulnerability,...

7.8CVSS6.2AI score0.00241EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2026/09/02 2:15 p.m.4 views

kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle

A flaw was found in the Linux kernel's networking scheduler. A race condition, which is a problem that occurs when multiple operations try to access the same resource at the same time, exists when network filter operations are run concurrently. This can lead to a Use-After-Free UAF vulnerability,...

7.8CVSS6.2AI score0.00241EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2026/09/02 2:09 p.m.4 views

kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle

A flaw was found in the Linux kernel's networking scheduler. A race condition, which is a problem that occurs when multiple operations try to access the same resource at the same time, exists when network filter operations are run concurrently. This can lead to a Use-After-Free UAF vulnerability,...

7.8CVSS6.2AI score0.00241EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2026/09/02 2:01 p.m.5 views

kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle

A flaw was found in the Linux kernel's networking scheduler. A race condition, which is a problem that occurs when multiple operations try to access the same resource at the same time, exists when network filter operations are run concurrently. This can lead to a Use-After-Free UAF vulnerability,...

7.8CVSS6.2AI score0.00241EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2026/09/02 2:01 p.m.3 views

Important: Red Hat Security Advisory: kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, kpatch-patch-5_14_0-284_158_1, and kpatch-patch-5_14_0-284_172_1 security update

An update for multiple packages is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

9.4CVSS6.5AI score0.00356EPSS
SaveExploits1References4
Kitploit
Kitploit
added 2026/08/31 11:48 p.m.7 views

CVE-2026-68138

CVE-2026-68138 — Linux kernel net/sched qdisc rate-table UAF tracking site Source for the CVE-2026-68138 patch-status tracker: a single-page site recording which distributions have shipped a fix for the net/sched qdisc rate-table use-after-free / double-free in the Linux kernel. Where the facts...

7.8CVSS7.1AI score0.00283EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/08/31 4:47 a.m.4 views

cve-2026-46331-audit

cve-2026-46331-audit Read-only audit script for CVE-2026-46331 a.k.a. pedit COW — a partial copy-on-write bug in the Linux kernel's net/sched actpedit action that lets a local unprivileged user corrupt page cache memory and escalate to root. root@kitploit: | | | \ | | / / \ \ / / | | | | | | | | ...

7.8CVSS6.4AI score0.00583EPSS
SaveExploits13References3
Kitploit
Kitploit
added 2026/08/31 3:40 a.m.4 views

CVE-2026-46331

PACKETEDITMEME - CVE-2026-46331 net/sched actpedit partial-COW page-cache corruption culprit 899ee91156e5, present v5.18 .. fixed v7.1-rc7. packeteditmeme.c turns it into unprivileged local root: a userns CAPNETADMIN child overwrites the cached ELF metadata of a setuid-root binary with...

7.8CVSS6.4AI score0.00583EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/08/31 3:30 a.m.2 views

CVE-2026-46331

🚨 CVE-2026-46331 - Linux Kernel COW Bug Linux Kernel net/sched Partial Copy-on-Write COW Page Cache Corruption -orange?style=for-the-badge A Linux kernel vulnerability caused by incorrect Copy-on-Write COW handling in the traffic control tc packet editing subsystem. 📖 Overview CVE-2026-46331 is a...

7.8CVSS6.4AI score0.00583EPSS
SaveExploits13
Tenable Nessus
Tenable Nessus
added 2026/08/31 12:00 a.m.6 views

SUSE SLES15 Security Update : kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP6) (SUSE-SU-2026:3819-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3819-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.125 fixes various security issues: The following security issues were fixed: -...

9.8CVSS6.5AI score0.00536EPSS
SaveExploits8References13
Kitploit
Kitploit
added 2026/08/30 10:51 p.m.4 views

packet_edit_meme

PACKETEDITMEME - aka CVE-2026-46331 net/sched actpedit partial-COW page-cache corruption culprit 899ee91156e5, present v5.18 .. fixed v7.1-rc7. packeteditmeme.c turns it into unprivileged local root: a userns CAPNETADMIN child overwrites the cached ELF entry of setuid-root /bin/su with...

7.8CVSS6.4AI score0.00583EPSS
SaveExploits13
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.9 views

CVE-2026-80630

In the Linux kernel, the following vulnerability has been resolved: net/sched: schfqcodel: Do not call qdisctreereducebacklog during peek before restoring qlen Whenever fqcodel drops packets during peek, it calls qdisctreereducebacklog. An issue arises because it calls qdisctreereducebacklog befo...

9.8CVSS5.9AI score0.00521EPSS
SaveExploits0References10
EUVD
EUVD
added 2026/08/27 6:31 a.m.6 views

EUVD-2026-66569

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: skip hash tables in u32bindclass u32walk enumerates both struct tcuhnode and struct tcuknode through the walker callback. u32bindclass unconditionally casts the passed fh to tcuknode and accesses &n-res, so whe...

7.8CVSS5.4AI score0.00138EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2026/08/27 12:21 a.m.4 views

SUSE CVE-2026-74739

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: skip hash tables in u32bindclass u32walk enumerates both struct tcuhnode and struct tcuknode through the walker callback. u32bindclass unconditionally casts the passed fh to tcuknode and accesses &n-res, so whe...

7.8CVSS5.8AI score0.00138EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/26 3:16 p.m.10 views

AZL-97767 CVE-2026-74736 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsbpf: reject dev-bound programs bound to a different device clsbpfprogfromefd obtained a SCHEDCLS program via bpfproggettypedev but never verified that a device-bound offloaded program's bound netdev matches the TC...

7.8CVSS5.8AI score0.00138EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/26 3:16 p.m.6 views

AZL-97740 CVE-2026-74739 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: skip hash tables in u32bindclass u32walk enumerates both struct tcuhnode and struct tcuknode through the walker callback. u32bindclass unconditionally casts the passed fh to tcuknode and accesses &n-res, so whe...

7.8CVSS5.8AI score0.00138EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/08/26 3:16 p.m.8 views

CVE-2026-74740

In the Linux kernel, the following vulnerability has been resolved: net/sched: actapi: fix TOCTOU NULL deref on a-gotochain tcfactionexec handles TCACTGOTOCHAIN by first checking rcuaccesspointera-gotochain and then calling tcfactiongotochainexec, which does a second, independent...

5.5AI score0.00175EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/26 3:16 p.m.6 views

UBUNTU-CVE-2026-74740

In the Linux kernel, the following vulnerability has been resolved: net/sched: actapi: fix TOCTOU NULL deref on a-gotochain tcfactionexec handles TCACTGOTOCHAIN by first checking rcuaccesspointera-gotochain and then calling tcfactiongotochainexec, which does a second, independent...

5.8AI score0.00175EPSS
SaveExploits0References7
CVE
CVE
added 2026/08/26 2:36 p.m.15 views

CVE-2026-74740

CVE-2026-74740 is a TOCTOU (time-of-check-time-of-use) NULL pointer dereference in the Linux kernel's net/sched: act_api subsystem. When handling TC_ACT_GOTO_CHAIN, tcf_action_exec() performs an initial rcu_access_pointer(a->goto_chain) check, then calls tcf_action_goto_chain_exec() which perf...

5.3AI score0.00175EPSS
SaveExploits0References5
Rows per page
Query Builder