3574 matches found
CVE-2026-98250
A flaw was found in the Linux kernel's Network File System daemon nfsd. When configuring file exports through the Netlink interface, nfsd attempts to initialize parallel NFS pNFS layouts without verifying that pNFS is enabled for the export. A privileged local user managing NFS exports could...
CVE-2023-1829
CVE-2023-1829 L'exploitation est testée sur le code source officiel Ubuntu22.04 5.15.0-25.25 Installation des dépendances pour certaines fonctions de filtre netlink sudo apt install libnftnl-dev libmnl-dev Étape de compilation : make Références...
cve-2017-11176
cve-2017-11176 Informations publiques La fonction mqnotify du noyau Linux jusqu'à la version 4.11.9 ne définit pas le pointeur sock à NULL lors de l'entrée dans la logique de réessai. Lors de la fermeture d'un socket Netlink par un espace utilisateur, cela permet aux attaquants de provoquer un dé...
CVE-2017-11176
CVE-2017-11176 Preuve de concept pour CVE-2017-11176 pour l'exécution de code. Vulnérabilité La fonction mqnotify dans le noyau Linux jusqu'à la version 4.11.9 ne définit pas le pointeur sock à NULL lors de l'entrée dans la logique de nouvelle tentative. Lors de la fermeture d'un socket Netlink...
CVE-2026-98317
A flaw was found in the Linux kernel. A local user with network configuration privileges can cause a Denial of Service DoS by supplying out-of-range neighbor probe interval values via Netlink or sysctl. Because the kernel fails to properly validate these boundary values, an integer overflow occur...
CVE-2026-96515
CVE-2026-96515 : exécution de commandes root authentifiée dans Netlink HG323RW Un utilisateur web limité authentifié peut téléverser un script shell via le gestionnaire d'import de diagnostic du Netlink HG323RW et faire exécuter ce script par le processus BOA en UID 0. Une authentification et des...
CVE-2022-1015
Mon POC pour CVE-2022-1015 Compiler : gcc -o exploit exploit.c helpers.c -lmnl -lnftnl -lpthread -no-pie...
Linux Distros Unpatched Vulnerability : CVE-2026-98250
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: nfsd: fix handling of NFSEXPPNFS in the netlink codepath The rework of how block layouts wer...
DEBIAN-CVE-2026-98301
In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: move switchdev call outside rcu This is a follow-up of one of sashiko's pre-existing bug reports. brmstsetstate calls switchdevportattrset for nonzero MSTIs while holding rcureadlock which invokes the blocking...
CVE-2026-98301
In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: move switchdev call outside rcu This is a follow-up of one of sashiko's pre-existing bug reports. brmstsetstate calls switchdevportattrset for nonzero MSTIs while holding rcureadlock which invokes the blocking...
DEBIAN-CVE-2026-98284
In the Linux kernel, the following vulnerability has been resolved: netlink: do not free nlk-groups while lockless readers can use it netlinkreallocgroups uses krealloc under netlinktablegrab. Whenever NLGRPSZgroups lands in a different kmalloc bucket, the old bitmap is freed immediately. Two...
AZL-106371 CVE-2026-98284 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: netlink: do not free nlk-groups while lockless readers can use it netlinkreallocgroups uses krealloc under netlinktablegrab. Whenever NLGRPSZgroups lands in a different kmalloc bucket, the old bitmap is freed immediately. Two...
CVE-2026-98284
In the Linux kernel, the following vulnerability has been resolved: netlink: do not free nlk-groups while lockless readers can use it netlinkreallocgroups uses krealloc under netlinktablegrab. Whenever NLGRPSZgroups lands in a different kmalloc bucket, the old bitmap is freed immediately. Two...
DEBIAN-CVE-2026-98250
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix handling of NFSEXPPNFS in the netlink codepath The rework of how block layouts were checked moved the check for NFSEXPPNFS out of nfsd4setuplayouttype and into the callers. That patch didn't account for the new call in...
CVE-2026-98250
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix handling of NFSEXPPNFS in the netlink codepath The rework of how block layouts were checked moved the check for NFSEXPPNFS out of nfsd4setuplayouttype and into the callers. That patch didn't account for the new call in...
CVE-2026-98284
In the Linux kernel, the following vulnerability has been resolved: netlink: do not free nlk-groups while lockless readers can use it netlinkreallocgroups uses krealloc under netlinktablegrab. Whenever NLGRPSZgroups lands in a different kmalloc bucket, the old bitmap is freed immediately. Two...
CVE-2026-98301
In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: move switchdev call outside rcu This is a follow-up of one of sashiko's pre-existing bug reports. brmstsetstate calls switchdevportattrset for nonzero MSTIs while holding rcureadlock which invokes the blocking...
UBUNTU-CVE-2026-98250
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix handling of NFSEXPPNFS in the netlink codepath The rework of how block layouts were checked moved the check for NFSEXPPNFS out of nfsd4setuplayouttype and into the callers. That patch didn't account for the new call in...
CVE-2026-98250
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix handling of NFSEXPPNFS in the netlink codepath The rework of how block layouts were checked moved the check for NFSEXPPNFS out of nfsd4setuplayouttype and into the callers. That patch didn't account for the new call in...
CVE-2026-98301 net: bridge: mst: move switchdev call outside rcu
In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: move switchdev call outside rcu This is a follow-up of one of sashiko's pre-existing bug reports. brmstsetstate calls switchdevportattrset for nonzero MSTIs while holding rcureadlock which invokes the blocking...