735 matches found
CVE-2026-72493
A flaw was found in the Linux kernel's networking subsystem. A race condition, specifically a Time-of-check to time-of-use TOCTOU vulnerability, exists during network device unregistration. This allows network packets to be processed after a device has been unregistered, leading to a use-after-fr...
CVE-2026-72322
A flaw was found in the Linux kernel's IPv6 multicast mcast component. A race condition exists during the teardown of a network device and the processing of incoming Multicast Listener Discovery MLD queries. This can lead to a Use-After-Free UAF vulnerability, where memory is accessed after it ha...
EUVD-2026-60538
Tenda W20E V16.01.0.62782 /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access...
CVE-2021-43716
creationtimestamp| type| source ---|---|--- 2026-08-15 08:00:08+00:00| seen| Telegram/KZva-AqPLSqOM7FFaN2xmlp5RH1as8bfWVHnuu2lh7A0hs 2026-08-15 08:00:08+00:00| seen| Telegram/fgLB1C36paZjghRukCyLhva12xDXyeSFjJghnq0Trmh6Q 2026-08-16 00:00:14+00:00| published-proof-of-concept|...
CVE-2026-72125 can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER
In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix use-after-free race with concurrent NETDEVUNREGISTER isotprelease looked up the bound network device via devgetbyindex using the stored ifindex. During device unregistration the device is unlisted from the ifindex...
CVE-2026-72125 can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER
In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix use-after-free race with concurrent NETDEVUNREGISTER isotprelease looked up the bound network device via devgetbyindex using the stored ifindex. During device unregistration the device is unlisted from the ifindex...
GO-2025-4097 vulnerabilities
Vulnerabilities for packages: k3s, kubernetes, podman, sriov-network-device-plugin, nvidia-container-toolkit, node-feature-discovery, grafana-alloy, buildah, falco-no-driver...
GO-2026-5761 vulnerabilities
Vulnerabilities for packages: podman, sriov-network-device-plugin, nvidia-container-toolkit, k8s-device-plugin, node-feature-discovery, cadvisor, buildah...
CVE-2026-68321
CVE-2026-68321 affects the Linux kernel driver net: txgbe, addressing a FDIR filter leak that occurs on device removal. The issue arises when perfect FDIR filters are added while the interface is down and remain on the software list for later restore; unregister_netdev() only calls ndo_stop if th...
EUVD-2026-55505
In the Linux kernel, the following vulnerability has been resolved: mctp: serial: handle zero-length frames to prevent rx buffer overflow The MCTP serial receive state machine reads a frame length byte in mctpserialpushheader case 2 and validates it upper-bound-only: if c MCTPSERIALFRAMEMTU...
Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: In net: liquidio, there is an issue where the netdev pointer must be initialized before queue setup is performed. In setupnicdevices, the netdev is allocated using allocetherdevmq. However, the pointer to this structure is stored...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fixed the “scheduling while atomic” issue in IPsec MAC address queries. A bug involving “scheduling while atomic” was addressed in mlx5eipsecinitmacs, by replacing mlx5querymacaddress with etheraddrcopy to retrieve the...
Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: serial: caif: Fix use-after-free in caifSerial ldiscClose There is a use-after-free bug in caifSerial where handletx may access ser-tty after tty has been freed. The race condition occurs between ldiscClose and packet transmissio...
SUSE CVE-2026-64580
In the Linux kernel, the following vulnerability has been resolved: xfrm6: clear dst.dev on error to avoid double netdevput in xfrm6filldst On the error path where in6devgetdev returns NULL, xfrm6filldst releases the device reference with netdevput but leaves xdst-u.dst.dev set. dstdestroy later...
CVE-2026-20308
A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to perform a denial of service DoS attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could...
EUVD-2026-53274
In the Linux kernel, the following vulnerability has been resolved: xfrm6: clear dst.dev on error to avoid double netdevput in xfrm6filldst On the error path where in6devgetdev returns NULL, xfrm6filldst releases the device reference with netdevput but leaves xdst-u.dst.dev set. dstdestroy later...
kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns
A flaw was found in the Linux kernel's rtnetlink component. An unprivileged local user, leveraging a user namespace, can exploit a missing CAPNETADMIN capability check in the rtnlnewlink function. This allows the user to create paired network devices in arbitrary network namespaces, including the...
CVE-2026-56852 affecting package sriov-network-device-plugin for versions less than 3.7.0-7
CVE-2026-56852 affecting package sriov-network-device-plugin for versions less than 3.7.0-7. A patched version of the package is available...
SUSE CVE-2026-64538
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix null-ptr-deref in fib6nhmtuchange. fib6nhmtuchange re-fetches idev via in6devgetarg-dev and dereferences idev-cnf.mtu6 without a NULL check. addrconfifdown clears dev-ip6ptr with RCUINITPOINTER after rt6disableip has...
SUSE CVE-2026-63859
In the Linux kernel, the following vulnerability has been resolved: net: airoha: Add missing bits in airohaqdmacleanuptxqueue Similar to airohaqdmacleanuprxqueue, reset DMA TX descriptors in airohaqdmacleanuptxqueue routine. Moreover, reset TXDMAIDX to TXCPUIDX to notify the NIC the QDMA TX ring ...