CVE-2023-1829

CVE-2023-1829 该利用已在 Ubuntu22.04 官方源码 5.15.0-25.25 上测试通过 安装一些 netlink 过滤器函数所需的依赖包 root@kitploit: sudo apt install libnftnl-dev libmnl-dev 构建步骤： root@kitploit: make 参考 https://github.com/randorisec/CVE-2022-34918-LPE-PoC/tree/main...

CVE-2026-64531

🔥 CVE-2026-64531 — OVSwrap Linux Kernel Open vSwitch Memory Corruption 🩸 Vulnerability Overview CVE-2026-64531 is a security vulnerability affecting the Linux Kernel Open vSwitch OVS networking subsystem. The flaw exists in the handling of Netlink nested attributes , where oversized action...

CVE-2017-11176

CVE-2017-11176 CVE-2017-11176 的代码执行概念验证。 漏洞 Linux 内核（直至 4.11.9）中的 mqnotify 函数在进入重试逻辑时未将 sock 指针设置为 NULL。在用户空间关闭 Netlink 套接字期间，攻击者可利用此漏洞导致拒绝服务（释放后使用）或可能造成其他未指明的影响。 参考 https://blog.lexfo.fr/cve-2017-11176-linux-kernel-exploitation-part1.html...

cve-2017-11176

cve-2017-11176 Información Pública La función mqnotify en el kernel de Linux hasta 4.11.9 no establece el puntero sock a NULL al entrar en la lógica de reintento. Durante el cierre desde espacio de usuario de un socket Netlink, permite a atacantes causar una denegación de servicio use-after-free ...

Linux Distros Unpatched Vulnerability : CVE-2026-92509

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/core: Fix potential use after free in counterrelease When accessing a counter via the netlink path the only synchronization mechanism for the said counter ...

Linux Distros Unpatched Vulnerability : CVE-2026-92510

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/core: Fix potential use after free in ibdestroysrquser When accessing a SRQ via the netlink path the only synchronization mechanism for the said SRQ is...

Linux Distros Unpatched Vulnerability : CVE-2026-92512

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/core: Fix use after free in ibqueryqp When querying a QP via the netlink flow the only synchronization mechanism for the said QP is rdmarestrackget,...

Linux Distros Unpatched Vulnerability : CVE-2026-92507

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/core: Fix potential use after free in ibdeallocpduser When accessing a PD via the netlink path the only synchronization mechanism for the said PD is...

AZL-102507 CVE-2026-92512 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix use after free in ibqueryqp When querying a QP via the netlink flow the only synchronization mechanism for the said QP is rdmarestrackget, meanwhile during the QP destroy path rdmarestrackdel is called at the end o...

EUVD-2026-82133

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix use after free in ibqueryqp When querying a QP via the netlink flow the only synchronization mechanism for the said QP is rdmarestrackget, meanwhile during the QP destroy path rdmarestrackdel is called at the end o...

CVE-2026-92507

CVE-2026-92507 is a use-after-free vulnerability in the Linux kernel's RDMA/core subsystem, specifically in the ib_dealloc_pd_user() function. When a Protection Domain (PD) is accessed via the netlink path, the only synchronization mechanism is rdma_restrack_get(). The flaw is that rdma_restrack_...

CVE-2026-92507 RDMA/core: Fix potential use after free in ib_dealloc_pd_user()

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ibdeallocpduser When accessing a PD via the netlink path the only synchronization mechanism for the said PD is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of...

EUVD-2026-81706

In the Linux kernel, the following vulnerability has been resolved: netdevsim: update queue NAPI association on queue reset In netdevsim, receive queues struct nsimrq embed their own struct napistruct. When queue reset is performed e.g. via queuereset debugfs, nsimqueuestart swaps in a newly...

GHSA-9F4G-F7VV-F9GH vulnerabilities

Vulnerabilities for packages: strongswan...

CVE-2022-1015

Mi PoC para CVE-2022-1015 Compilar: gcc -o exploit exploit.c helpers.c -lmnl -lnftnl -lpthread -no-pie...

mtechweek_04

mtechweek04 Prueba de penetración basada en Metasploit en una VM de laboratorio Metasploitable2 aislada — explotación remota mediante DistCC CVE-2004-2687, escalada de privilegios mediante udev netlink CVE-2009-1185 y análisis del backdoor vsftpd 2.3.4 CVE-2011-2523, con mitigación de firewall...

CVE-2020-8958

CVE-2020-8958 CVE-2020-8958 : 针对使用 boa 服务器的 NetLink 路由器的经过身份验证的远程代码执行漏洞。 CVSS 评分： 7.2 漏洞类型： OS Command Injection 身份验证： 需要 受影响型号： HG323 描述 Netlink 路由器中的 /boaform/admin/formPing 资源允许远程攻击者通过 targetaddr 参数执行 OS Command Injection。 用法 root@kitploit: usage: CVE-2020-8958.py -h -i URL -u USER -p PASS...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: netlink: Annotate lockless accesses to nlk-maxrecvmsglen. syzbot reported a data race in netlinkrecvmsg. Indeed, netlinkrecvmsg can be executed concurrently, and netlinkdump also requires protection. 1 Bug: KCSAN: Data race in...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: nbd: The function genlunregisterfamily is called first in nbdcleanup. Otherwise, there may be a race between the removal of the module and the handling of the netlink command, which can lead to an oops as shown below: BUG: Kernel...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Added check for filling the poll mod list. In cases where improtocols has a value of 1 and tmprotocols has a value of 0, this combination successfully passes the check. This condition is specified as “!improtocols &&...