1150 matches found
CVE-2026-102762
The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message. Each malformed PUBLISH costs one packet, or one chain of packets, from the network driver's receive pool, and nothing returns it. A peer that can deliver a few dozen such messages exhausts the pool and stops all inbou...
CVE-2026-97603
A flaw was found in the Linux kernel's idpf network driver. This flaw allows a local user with administrative privileges to cause a Denial of Service DoS through a kernel crash. The issue occurs because dynamic interrupt moderation DIM background tasks are not disabled before releasing queue vect...
CVE-2026-97434
A flaw was found in the Linux kernel's dpaa2-switch network driver. During device removal, network packet polling instances NAPI shared across switch ports can be deleted before they are properly disabled. A local user with administrative privileges could trigger this issue during device teardown...
CVE-2026-97411
A flaw was found in the Linux kernel's IBM EMAC network driver. During module removal, the driver unconditionally attempts to disable network polling routines even if they were never enabled or were already stopped. This improper state handling causes the kernel to enter an infinite loop, resulti...
CVE-2026-93830
A flaw was found in the Linux kernel's stmmac network driver. An attacker can cause a Denial of Service DoS by sending high volumes of network traffic to an affected system. Under heavy packet load, the network controller exhausts its receive buffers and continuously fires hardware interrupts...
CVE-2026-97569
A flaw was found in the Linux kernel's Broadcom NetXtreme-E bnxten network driver. An attacker can cause a Denial of Service DoS by sending a burst of network traffic followed by a large UDP Segmentation Offload USO packet. When operating with small transmit ring configurations, the driver...
CVE-2026-102762: Missing Release of Memory after Effective Lifetime
The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message. Each malformed PUBLISH costs one packet, or one chain of packets, from the network driver's receive pool, and nothing returns it. A peer that can deliver a few dozen such messages exhausts the pool and stops all inbou...
CVE-2026-98028
A flaw was found in the Linux kernel's Netronome Flow Processor NFP network driver. When replacing an existing flow steering rule fails during hardware reprogramming, the driver fails to remove the old rule from its internal list, creating an inconsistency with the active rule counter. A local us...
CVE-2026-98016
A flaw was found in the Linux kernel's Mellanox network driver mlx5e. A race condition occurs during the concurrent teardown of traffic control TC sample rules sharing the same context, causing the system to reference memory after it has already been freed. A local user with network administrativ...
CVE-2026-98014
A flaw was found in the Linux kernel's Mellanox network driver mlx5. This vulnerability allows a local privileged user to cause a Denial of Service DoS through a system crash. During hardware reset or error recovery procedures, improper cleanup when disabling a virtual network port leaves stale...
CVE-2026-93279
A flaw was found in the Linux kernel's Octeon network driver. During network device shutdown or driver removal, a pending cleanup task may execute after associated network device structures have already been freed from memory. A local user could exploit this race condition during device teardown ...
kernel: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer
A flaw was found in the Linux kernel's mana network driver. This Time-of-Check to Time-of-Use TOCTOU vulnerability allows a hardware component to modify a message identifier hwcmsgid in Direct Memory Access DMA memory after it has been validated but before it is used. This manipulation bypasses...
CVE-2026-93278
A flaw was found in the Linux kernel's Octeon network driver. During interface shutdown, the driver deletes the packet polling mechanism without properly disabling it first, allowing active polling routines to continue running after interrupt handlers are released. A local attacker could exploit...
kernel: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer
A flaw was found in the Linux kernel's mana network driver. This Time-of-Check to Time-of-Use TOCTOU vulnerability allows a hardware component to modify a message identifier hwcmsgid in Direct Memory Access DMA memory after it has been validated but before it is used. This manipulation bypasses...
USN-8833-1 libvirt-hwe vulnerabilities
It was discovered that libvirt did not properly validate newline characters in DNS TXT record values and SRV record attributes in its virtual network driver. A local attacker with permission to define virtual networks could possibly use this issue to inject arbitrary dnsmasq configuration...
USN-8833-1: libvirt vulnerabilities
It was discovered that libvirt did not properly validate newline characters in DNS TXT record values and SRV record attributes in its virtual network driver. A local attacker with permission to define virtual networks could possibly use this issue to inject arbitrary dnsmasq configuration...
DEBIAN-CVE-2026-98025
In the Linux kernel, the following vulnerability has been resolved: net: usb: cx82310eth: drop URB after 0xffff reboot sentinel to prevent partialdata heap overflow The 0xffff length sentinel detects a router reboot and schedules re-enabling of ethernet mode, but then falls through to the rest of...
TencentOS Server 4: libvirt (TSSA-2026:1048)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1048 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
PT-2026-94430
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mana network driver where the mana gd query max resources function calculates the gc-num msix usable value based on the CPU count and resp.max msix, but fails to...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: Fixed the issue where corrupted pointer deletion occurred in cases of region creation failures. In cases where region creation fails in ipcdevlinkcreateregion, the previously created regions are deleted using a...