Linux kernel Heap Buffer Overflow DoS

The vulnerability of the tipcupdatenametbl function in the net/tipc/namedistr.c component of the Linux kernel is related to the implementation of incorrect flow control. Exploiting this vulnerability could allow a remote attacker to cause service failures...

Linux net/tipc/socket.c Heap Buffer Overflow DoS

The vulnerability of the tipcskconnprotorcv function in the net/tipc/socket.c component of the Linux operating system is related to the improper implementation of thread management. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Linux netlink Heap Buffer Overflow DoS

The vulnerability of the net/tipc/netlink.c component in the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

ROS-20261012-73-0014

The vulnerability of the tipcskfilterconnect function in the net/tipc/socket.c module of the TIPC protocol implementation in the Linux operating system is related to insufficient validation of input data when dividing by zero. Exploiting this vulnerability could allow an attacker to cause a servi...

Linux net/tipc/bearer ipvlan_hard_header Heap Buffer Overflow

The vulnerability of the ipvlanhardheader function in the net/tipc/bearer.c component of the Linux operating system is related to the pointer being dereferenced after its expiration. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

Exploit for Double Free in Linux Linux_Kernel

CVE-2026-52993 — reproduction Double-free / slab-use-after-fr...

ROS-20260923-73-0010

The vulnerability of the tipcbufAppend function in the net/tipc/msg.c module of the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

TIPC Protocol Heap Buffer Overflow DoS

The vulnerability of the tipcgroupprotorcv function in the net/tipc/group.c module of the TIPC protocol implementation in Linux’s operating system is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-111269

Уязвимость функции ipvlan hard header компонента net/tipc/bearer.c ядра операционной системы Linux связана с разыменованием указателя с истекшим сроком действия. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на конфиденциальность, целостность и...

PT-2026-116278

Уязвимость компонента net/tipc/netlink.c ядра операционной системы Linux связана с реализацией некорректного потока управления. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации...

PT-2026-116276

Уязвимость функции tipc update nametbl компонента net/tipc/name distr.c ядра операционной системы Linux связана с реализацией некорректного потока управления. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

PT-2026-116277

Уязвимость функции tipc sk conn proto rcv компонента net/tipc/socket.c ядра операционной системы Linux связана с реализацией некорректного потока управления. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

Linux TIPC Protocol Heap Buffer Overflow DoS

The vulnerability of the tipcskcreate function in the net/tipc/socket.c module of the TIPC protocol implementation in Linux’s operating system is related to errors during the update of the reference counter. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the tipcconnect function in the net/tipc/socket.c module of the Linux kernel relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986737)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986737 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix use-after-free Read in tipcnamedreinit syzbot found the following issue on:...

RHEL 8 : kpatch-patch-4_18_0-553_16_1, kpatch-patch-4_18_0-553_30_1, kpatch-patch-4_18_0-553_40_1, kpatch-patch-4_18_0-553_53_1, and kpatch-patch-4_18_0-553_72_1 (RHSA-2025:15921)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:15921 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patc...

net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done

...

Linux net/tipc/bearer.c Bearer Name Validation

The vulnerability of the bearernamevalidate function in the net/tipc/bearer.c module of the Linux kernel lies in the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2025-38052: Use After Free

In the Linux kernel, the following vulnerability has been resolved: net/tipc: fix slab-use-after-free Read in tipcaeadencryptdone Syzbot reported a slab-use-after-free with the following call trace: ================================================================== BUG: KASAN: slab-use-after-free...

CVE-2022-49374: Use of Uninitialized Resource

In the Linux kernel, the following vulnerability has been resolved: tipc: check attribute length for bearer name syzbot reported uninit-value: ===================================================== BUG: KMSAN: uninit-value in stringnocheck lib/vsprintf.c:644 inline BUG: KMSAN: uninit-value in...