ROS-20260925-73-0036

The vulnerability of the ipv4sysctlexitnet function in the net/ipv4/sysctlnetipv4.c module of the IPv4 protocol implementation in Linux’s kernel relates to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2019-18805: Integer Overflow or Wraparound

An issue was discovered in net/ipv4/sysctlnetipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcpinput.c signed integer overflow in tcpackupdatertt when userspace writes a very large integer to /proc/sys/net/ipv4/tcpminrttwlen, leading to a denial of service or possibly unspecified...