135810 matches found
CVE-2026-58058
Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6getdataprimitive libnetutil/netutil.cc, so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a craft...
Linux Distros Unpatched Vulnerability : CVE-2026-28385
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Canonical LXD versions 4.12 through 6.9, a Server-Side Request Forgery SSRF vulnerability in the image import functionality allows authenticated users with t...
Linux Distros Unpatched Vulnerability : CVE-2026-53234
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ibm: emac: Fix use-after-free during device removal The driver was using devmregisternetdev which causes unregisternetdev to be deferred until the devres...
net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove
...
net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint
...
Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247
...
net: mvpp2: sync RX data at the hardware packet offset
...
smb/client: fix possible infinite loop and oob read in symlink_data()
...
ppp: require CAP_NET_ADMIN in target netns for unattached ioctls
...
sctp: fix uninit-value in __sctp_rcv_asconf_lookup()
...
net/sched: taprio: fix use-after-free in advance_sched() on schedule switch
...
net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr
...
net/rds: Restrict use of RDS/IB to the initial network namespace
...
net: bcmgenet: fix racing timeout handler
...
net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS
...
net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list
...
batman-adv: v: stop OGMv2 on disabled interface
...
SUSE CVE-2026-13318
A server-side request forgery SSRF flaw was found in KubeVirt's virt-api port-forward handler. When processing a port-forward request to a VirtualMachineInstance VMI, virt-api reads the target IP from vmi.Status.Interfaces0.IP and passes it directly to net.Dial without validation. For VMIs using...
SUSE CVE-2026-52978
In the Linux kernel, the following vulnerability has been resolved: net: psp: require admin permission for dev-set and key-rotate The dev-set and key-rotate netlink operations modify shared device state PSP version configuration and cryptographic key material, respectively but do not require...
SUSE CVE-2026-53077
In the Linux kernel, the following vulnerability has been resolved: net/rds: Restrict use of RDS/IB to the initial network namespace Prevent using RDS/IB in network namespaces other than the initial one. The existing RDS/IB code will not work properly in non-initial network namespaces...