CVE-2026-115538

Moby's overlay network driver does not restore the iptables rules for encrypted overlay networks after firewalld deletes them. Unlike other Docker Engine networking components, the overlay driver does not handle firewalld reload or start signals over D-Bus. The missing rules cause outgoing VXLAN...

etherleak-checker

Etherleak Vulnerability Checker This Python script helps to detect the Etherleak CVE-2003-0001 vulnerability on a target host by analyzing the padding data in network packets. The script uses Scapy to send various types of requests ICMP, ARP, or TCP and checks if the responses contain any padding...

kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access

A flaw was found in the Linux kernel's mana network driver. In Confidential Virtual Machines VMs, a missing bounds check when processing network events can allow a malicious hardware component or a compromised VM to write data outside of an intended memory region. This out-of-bounds access could...

kernel: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer

A flaw was found in the Linux kernel's mana network driver. This Time-of-Check to Time-of-Use TOCTOU vulnerability allows a hardware component to modify a message identifier hwcmsgid in Direct Memory Access DMA memory after it has been validated but before it is used. This manipulation bypasses...

CVE-2026-115538

Moby's overlay network driver does not restore the iptables rules for encrypted overlay networks after firewalld deletes them. Unlike other Docker Engine networking components, the overlay driver does not handle firewalld reload or start signals over D-Bus. The missing rules cause outgoing VXLAN...

CVE-2026-115538

Moby's overlay network driver does not restore the iptables rules for encrypted overlay networks after firewalld deletes them. Unlike other Docker Engine networking components, the overlay driver does not handle firewalld reload or start signals over D-Bus. The missing rules cause outgoing VXLAN...

CVE-2026-115538

Moby's overlay network driver does not restore the iptables rules for encrypted overlay networks after firewalld deletes them. Unlike other Docker Engine networking components, the overlay driver does not handle firewalld reload or start signals over D-Bus. The missing rules cause outgoing VXLAN...

CVE-2026-108402

Missing release of memory after effective lifetime in Windows Layer-2 Bridge Network Driver allows an unauthorized attacker to deny service over an adjacent network...

CVE-2026-108402

A memory leak exists in the Windows Layer-2 Bridge Network Driver caused by a missing release of memory after its effective lifetime (CWE-401). This vulnerability allows an unauthorized attacker to perform a denial of service (DoS) attack over an adjacent network. While the documents provide tech...

EUVD-2026-121556

Missing release of memory after effective lifetime in Windows Layer-2 Bridge Network Driver allows an unauthorized attacker to deny service over an adjacent network...

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

Missing release of memory after effective lifetime in Windows Layer-2 Bridge Network Driver allows an unauthorized attacker to deny service over an adjacent network...

windows_tcpip_fuzz

windowstcpipfuzz This is my attempt at fuzzing the tcpip.sys driver in windows via using scapy. This is inspired by this vulnerability here: https://doar-e.github.io/blog/2021/04/15/reverse-engineering-tcpipsys-mechanics-of-a-packet-of-the-death-cve-2021-24086/...

CVE-2026-99078

A flaw was found in the Linux kernel's Mellanox network driver mlx5e. When processing high-speed network traffic using XDP eXpress Data Path sockets under low-memory conditions, a failure during receive queue replenishment can cause previously freed memory buffers to be released again through sta...

CVE-2026-98922

A flaw was found in the Linux kernel's IBM EMAC Ethernet Media Access Controller network driver. During device initialization, the driver attempts to attach the physical network interface before network device operations are configured, causing a null pointer dereference. A local user capable of...

CVE-2026-98913

A flaw was found in the Linux kernel's Cavium ThunderX network driver. When initializing a network interface, an error occurring after acquiring a reference to the Precision Time Protocol PTP device fails to properly release that reference. A privileged local attacker could exploit this issue by...

CVE-2026-99029

A flaw was found in the Linux kernel's Sparx5 network driver. When removing offloaded matchall traffic control filters, the driver unlinks filter entries without freeing the allocated memory. A local user with network administration privileges can exploit this flaw by repeatedly adding and deleti...

CVE-2026-99026

A flaw was found in the Linux kernel's team network driver. When a team interface is configured in broadcast mode and lacks transmittable ports, the driver fails to properly free packet buffers during transmission. A local user can exploit this vulnerability by sending network traffic through the...

CVE-2026-99044

A flaw was found in the Linux kernel's ice network driver. During dynamic port cleanup, the driver prematurely frees internal interface memory before removing the port entry, resulting in a use-after-free condition. A local user could exploit this flaw to cause a Denial of Service DoS through a...

CVE-2026-98967

A flaw was found in the Linux kernel's cxgb4 network driver. During connection cleanup or error handling, the driver removes entries from an internal tracking table without disabling software interrupts. If concurrent network traffic triggers an interrupt on the same processor core during this...

CVE-2026-98909

A flaw was found in the Linux kernel's CPSW network driver. When network port registration fails during device initialization, the driver does not properly unregister its devlink management interface. This improper cleanup leaves resources allocated in the kernel, which may allow a local user to...