linux-kernel-codex-harness-v2

Kernel Codex Harness v2 한국어 | English Research Tool · Original Import: 3 April 2026 · v2 Documentation Revision: 11 July 2026 External Signal: From Attention Allocation to Provenance-Aware Triage Use reproducible observations to guide model attention, then use repository provenance to organize...

Paranoid-CVE-2026-98432

Paranoid-CVE-2026-98432 Drop incoming IPv4 TCP packets whose IP header contains options. A small, reversible iptables stopgap for CVE-2026-98432. Drops IPv4 TCP packets containing IP options in the current network namespace. Includes clear status output, repeatable apply/remove commands, a...

kernel: openvswitch: Fix CT limit teardown use-after-free

A flaw was found in the Linux kernel's Open vSwitch OVS component. An unprivileged user, operating from a user and network namespace, can trigger a use-after-free vulnerability during network namespace teardown. This occurs because packet processing attempts to use connection tracking CT limit...

kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink

A flaw was found in the Linux kernel's ip6gre and ip6erspan tunnel drivers. The changelink functions in these drivers do not adequately verify administrative capabilities CAPNETADMIN across different network namespaces. This allows a local attacker, who has CAPNETADMIN in one network namespace bu...

kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink

A flaw was found in the Linux kernel's IP Generic Routing Encapsulation ipgre component. This vulnerability allows a local attacker with network administration capabilities in one network namespace to modify a tunnel residing in a different network namespace where they lack privileges. This is du...

kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink

A flaw was found in the Linux kernel's ip6gre and ip6erspan tunnel drivers. The changelink functions in these drivers do not adequately verify administrative capabilities CAPNETADMIN across different network namespaces. This allows a local attacker, who has CAPNETADMIN in one network namespace bu...

kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink

A flaw was found in the Linux kernel's VXLAN Virtual Extensible LAN implementation. A local attacker, with CAPNETADMIN network administration capability in one network namespace, could exploit an incorrect privilege check in the rtnl changelink path. This allows the attacker to modify the...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: rds: drop incoming messages that cross network namespace boundaries rdsfindbound looks up the destination socket using a global rhashtable keyed solely on addr, port, scopeid. Network namespaces are not part of the key, so a send...

Astra Linux – vulnerability in linux-6.18

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: undo netns switch if renaming the wiphy fails Once all interfaces have been moved, cfg80211switchnetns moves the wiphy itself by setting its network namespace and then renaming it, causing sysfs to move it as well...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: restrict socket creation to the initial network namespace QRTR retains its entire port and node state in module-global variables that are not partitioned per network namespace: qrtrlocalnid is a single global node ID...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: ipv6: ndisc: fix NULL deref in acceptuntrackedna acceptuntrackedna re-fetches the inet6dev using in6devgetdev, and dereferences idev-cnf.acceptuntrackedna without performing a NULL check, even though its sole caller, ndiscrecvna,...

kernel: openvswitch: Fix CT limit teardown use-after-free

A flaw was found in the Linux kernel's Open vSwitch OVS component. An unprivileged user, operating from a user and network namespace, can trigger a use-after-free vulnerability during network namespace teardown. This occurs because packet processing attempts to use connection tracking CT limit...

kernel: openvswitch: Fix CT limit teardown use-after-free

A flaw was found in the Linux kernel's Open vSwitch OVS component. An unprivileged user, operating from a user and network namespace, can trigger a use-after-free vulnerability during network namespace teardown. This occurs because packet processing attempts to use connection tracking CT limit...

kernel: openvswitch: Fix CT limit teardown use-after-free

A flaw was found in the Linux kernel's Open vSwitch OVS component. An unprivileged user, operating from a user and network namespace, can trigger a use-after-free vulnerability during network namespace teardown. This occurs because packet processing attempts to use connection tracking CT limit...

kernel: openvswitch: Fix CT limit teardown use-after-free

A flaw was found in the Linux kernel's Open vSwitch OVS component. An unprivileged user, operating from a user and network namespace, can trigger a use-after-free vulnerability during network namespace teardown. This occurs because packet processing attempts to use connection tracking CT limit...

kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change

A flaw was found in the Linux kernel. A race condition in the Enhanced Transmission Selection ETS traffic-control scheduler allows a class to remain active while its associated queue structure is freed during reconfiguration. A local user with network configuration privileges or the ability to...

kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change

A flaw was found in the Linux kernel. A race condition in the Enhanced Transmission Selection ETS traffic-control scheduler allows a class to remain active while its associated queue structure is freed during reconfiguration. A local user with network configuration privileges or the ability to...

kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change

A flaw was found in the Linux kernel. A race condition in the Enhanced Transmission Selection ETS traffic-control scheduler allows a class to remain active while its associated queue structure is freed during reconfiguration. A local user with network configuration privileges or the ability to...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: xfrm: fix skdstcache double-free in xfrmuserpolicy xfrmuserpolicy clears the socket dst cache using skdstreset; specifically, it performs the non-atomic skdstsetsk, NULL. It reads skdstcache via rcudereferenceprotected, stores a...

CVE-2026-99201

In the Linux kernel, the following vulnerability has been resolved: netlink: avoid hashing the network namespace pointer The netlink rhashtable key includes a raw struct net pointer and a user-controlled port ID. Both /proc/net/netlink and socket diagnostics expose the table's bucket order. By...