5 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-23016
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: inet: frags: drop fraglist conntrack references Jakub added a warning in...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993023)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993023 advisory. In the Linux kernel, the following vulnerability has been resolved: net: gso: fix panic on fraglist with mixed head alloc types Since commit 3dcbdb134f32 net: gso: F...
CVE-2025-68388
Allocation of resources without limits or throttling CWE-770 allows an unauthenticated remote attacker to cause excessive allocation CAPEC-130 of memory and CPU via the integration of malicious IPv4 fragments, leading to a degradation in Packetbeat...
PT-2021-8038 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.12.0-rc6+ Description: The vulnerability is related to a stack out-of-bounds read in the sch frag function when fragmenting IPv4 packets. This occurs when act mirred tries to fragment IPv4 packets that had bee...
QEMU '/hw/net/net_tx_pkt.c' Packet Fragmentation Denial of Service Vulnerability
QEMU is a simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A denial-of-service vulnerability exists in the QEMU '/hw/net/nettxpkt.c' package fragment, which allows an attacker to exploit the vulnerability to crash the...