windows_tcpip_fuzz

windowstcpipfuzz Este es mi intento de fuzzing del controlador tcpip.sys en Windows mediante el uso de scapy. Esto está inspirado en esta vulnerabilidad: https://doar-e.github.io/blog/2021/04/15/reverse-engineering-tcpipsys-mechanics-of-a-packet-of-the-death-cve-2021-24086/...

CVE-2026-80992 net: ravb: avoid dereferencing an invalid PTP clock

In the Linux kernel, the following vulnerability has been resolved: net: ravb: avoid dereferencing an invalid PTP clock The PTP clock is unavailable before the first open, so querying its index can dereference a NULL pointer. Registration failures can also leave an error pointer in priv-ptp.clock...

kernel: net: pull headers in qdisc_pkt_len_segs_init()

A flaw was found in the Linux kernel's handling of Generic Segmentation Offload GSO packet headers. This vulnerability occurs when the qdiscpktlensegsinit function does not properly pull headers into the expected memory location, which can lead to incorrect processing by network drivers. A remote...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libvirt (UTSA-2026-106765)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106765 advisory. An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attribut...

etherleak-checker

Comprobador de Vulnerabilidad Etherleak Este script de Python ayuda a detectar la vulnerabilidad Etherleak CVE-2003-0001 en un host objetivo analizando los datos de relleno padding en los paquetes de red. El script utiliza Scapy para enviar varios tipos de solicitudes ICMP, ARP o TCP y comprueba ...

CVE-2026-80617

In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix foechecktime allocation size foechecktime is declared as u16 pointer but was allocated with only ppenumentries bytes instead of ppenumentries sizeofu16. When airohappefoeverifyentry is called with hash =...

CVE-2026-80610

In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix potential divide-by-zero when numvsi is zero For i.MX94 series, all the standalone ENETCs do not support SR-IOV, so pf-caps.numvsi is zero. This leads to a divide-by-zero in enetc4defaultringsallocation when...

The vulnerability in the `drivers/net/ipa/reg/gsi_reg-v5.0.c` module of the Linux kernel’s network device drivers allows a attacker to cause a service failure.

The vulnerability in the drivers/net/ipa/reg/gsireg-v5.0.c module of the Linux kernel’s network device drivers is related to an incorrect check of a specified index, position, or offset in the input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the mvpp2_bm_switch_buffers() function in the drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c file of the Ethernet network adapter driver for the Marvell Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mvpp2bmswitchbuffers function in the drivers/net/ethernet/marvell/mvpp2/mvpp2main.c file of the Ethernet network adapter driver for the Marvell-based Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the cdc_ncm_rx_verify_ndp16() function in the drivers/net/usb/cdc_ncm.c module of the Linux kernel’s network adapter driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cdcncmrxverifyndp16 function in the drivers/net/usb/cdcncm.c module of the Linux kernel’s network adapter driver relates to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the start_xmit() function in the drivers/net/virtio_net.c file of the Linux kernel network device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the startxmit function in the drivers/net/virtionet.c file of the Linux kernel network device driver involves the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the functions ntb_netdev_rx_handler() and ntb_netdev_tx_handler() in the drivers/net/ntb_netdev.c module of the Linux kernel’s network device driver, which allows a hacker to cause a service failure.

The vulnerability of the functions ntbnetdevrxhandler and ntbnetdevtxhandler in the drivers/net/ntbnetdev.c module of the Linux kernel network device driver is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a service failure...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: i40e: Fixed a kernel crash during module removal The driver incorrectly releases the client instance, and subsequent removal of the i40e module leads to a kernel crash. Reproducing the issue: 1. Perform an offline ethtool test...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: i40e: Fixed DMA mapping leaks During the reallocation of RX buffers, new DMA mappings are created for those buffers. Reproduction steps: While doing the following: Do For i=0; i=8160; i=i+32 Do ethtool -G enp130s0f0 rx $i tx $...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: i40e: fixed the validation of VF state in the get resources function. The state I40EVFSTATEACTIVE is not the only state in which a VF is actually active. Therefore, it should not be used to determine whether a VF is allowed to...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: brwifimac – fixed a potential memory leak in brwifinetdevstartxmit. The function brwifinetdevstartxmit returns NETDEVTXOK without freeing the skb variable, especially when pskbexpandhead fails. This issue was addressed by...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: igb: Fixed the issue where igbdown got hung when removing the Thunderbolt hub. In a setup where a Thunderbolt hub is connected to Ethernet and a display via USB Type-C, users may experience a task-hanging timeout when they remove...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: i40e: Fixed the input validation logic for actionmeta. Also, corrected the condition to check for “greater than or equal” to prevent out-of-band dereferencing...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net: dsa: improved shutdown sequence Alexander Sverdlin identified two issues during shutdown with the lan9303 driver. One issue is specific to lan9303, and the other occurs regardless of the driver. The first issue is that...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: sfc: Fixed the null pointer dereference in efxhardstartxmit. Trying to access the channel through the txqueue variable is incorrect because we can only be in this situation if txqueue is NULL. Therefore, we should not dereference...