ssj

SSJ - 당신의 일상적인 리눅스 배포판이 슈퍼 사이언이 되었습니다. 소개 SSJ는 당신의 일상적인 리눅스 배포판Ubuntu, Debian 등에 설치된 Docker를 활용하여 수백 가지의 침투 테스트 및 포렌식 도구를 마법처럼 장착해주는 작고 재미있는 스크립트입니다. 기술적 세부사항 SSJ는 Kali Linux 베이스 이미지인 kalilinux/kali-last-release에 kali-linux-default 메타패키지가 설치된 Docker 이미지를 가져옵니다. kali.download/kali 미러와...

kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink()

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface vti6 component. An unprivileged local user, particularly within a user namespace, could exploit a vulnerability related to incorrect network namespace handling during the movement of a vti6 tunnel. This issue can lead to a kerne...

kernel: net: qrtr: restrict socket creation to the initial network namespace

A flaw was found in the Linux kernel's QRTR Qualcomm IPC Router networking component. An unprivileged local attacker can create a QRTR socket in a separate network namespace. Due to improper handling of global state variables, this allows the attacker to send datagrams and control-plane messages ...

kernel: net: qrtr: restrict socket creation to the initial network namespace

A flaw was found in the Linux kernel's QRTR Qualcomm IPC Router networking component. An unprivileged local attacker can create a QRTR socket in a separate network namespace. Due to improper handling of global state variables, this allows the attacker to send datagrams and control-plane messages ...

SUSE CVE-2026-97419

In the Linux kernel, the following vulnerability has been resolved: hsr: broadcast netlink notifications in the device's net namespace The HSR generic netlink family sets .netnsok = true. HSR devices can live in network namespaces other than initnet. Two async notifiers broadcast events with...

CVE-2026-97939

A flaw was found in the Linux kernel's IP multicast routing subsystem. A local user with network administration privileges inside a network namespace can create an excessive number of multicast routing tables. Because these allocations are not tracked against memory control group limits, kernel...

CVE-2026-97476

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. An unprivileged local attacker can exploit this vulnerability to cause information disclosure across isolated network environments. Because socket inspection handlers do not filter connection and socket lists by the...

CVE-2026-97608

A flaw was found in the Linux kernel's netfilter subsystem. A race condition occurs when network namespace operations are torn down before global logging backends are unregistered. A local user can exploit this timing window through sysctl or netlink interfaces to rebind a logger while it is bein...

linux-kernel-codex-harness-v2

Kernel Codex Harness v2 한국어 | English 研究ツール · オリジナルインポート: 2026年4月3日 · v2 ドキュメント改訂: 2026年7月11日 外部シグナル: 注意配分から来歴認識型トリアージへ 再現可能な観測値を使ってモデルの注意を導き、その後リポジトリの来歴を使ってレビューキューの整理を行う——証明を主張するためではない。 プロジェクト系統— Kernel Codex Harness v1 · 注意配分 → Kernel Codex Harness v2 · 来歴認識型トリアージ プロジェクトステータス...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: SCTP: Avoid a UAF situation during the teardown of a network namespace when authenable is set to true. The procsctpdoauth function updates the SCTP control socket after changing net.sctp.authenable. This function retrieves the...

CVE-2026-97476

In the Linux kernel, the following vulnerability has been resolved: rds: filter RDSINFO getsockopt by caller's netns The RDSINFO family of getsockopt2 options reads several file-scope global lists that are not per-netns: rdssockinfo / rds6sockinfo, rdssockincinfo / rds6sockincinfo - rdssocklist...

DEBIAN-CVE-2026-97419

In the Linux kernel, the following vulnerability has been resolved: hsr: broadcast netlink notifications in the device's net namespace The HSR generic netlink family sets .netnsok = true. HSR devices can live in network namespaces other than initnet. Two async notifiers broadcast events with...

CVE-2026-97419 hsr: broadcast netlink notifications in the device's net namespace

In the Linux kernel, the following vulnerability has been resolved: hsr: broadcast netlink notifications in the device's net namespace The HSR generic netlink family sets .netnsok = true. HSR devices can live in network namespaces other than initnet. Two async notifiers broadcast events with...

CVE-2026-97419

The Linux kernel contains a vulnerability in the HSR (High-availability Seamless Redundancy) generic netlink family. Because the .netnsok flag is set to true, devices can reside in various network namespaces; however, two async notifiers—hsr_nl_ringerror() and hsr_nl_nodedown()—incorrectly use ge...

EUVD-2026-86032

In the Linux kernel, the following vulnerability has been resolved: hsr: broadcast netlink notifications in the device's net namespace The HSR generic netlink family sets .netnsok = true. HSR devices can live in network namespaces other than initnet. Two async notifiers broadcast events with...

CVE-2026-97419 hsr: broadcast netlink notifications in the device's net namespace

In the Linux kernel, the following vulnerability has been resolved: hsr: broadcast netlink notifications in the device's net namespace The HSR generic netlink family sets .netnsok = true. HSR devices can live in network namespaces other than initnet. Two async notifiers broadcast events with...

CVE-2026-97419

In the Linux kernel, the following vulnerability has been resolved: hsr: broadcast netlink notifications in the device's net namespace The HSR generic netlink family sets .netnsok = true. HSR devices can live in network namespaces other than initnet. Two async notifiers broadcast events with...

CVE-2026-97419: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: hsr: broadcast netlink notifications in the device's net namespace The HSR generic netlink family sets .netnsok = true. HSR devices can live in network namespaces other than initnet. Two async notifiers broadcast events with...

CVE-2026-97476: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: rds: filter RDSINFO getsockopt by caller's netns The RDSINFO family of getsockopt2 options reads several file-scope global lists that are not per-netns: rdssockinfo / rds6sockinfo, rdssockincinfo / rds6sockincinfo - rdssocklist...

PT-2026-98095

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Reliable Datagram Sockets RDS implementation where the RDS INFO family of getsockopt2 options fails to filter information by the caller's network namespace. Becaus...