HPESBNW05156 rev 1 - Multiple Vulnerabilities in HPE Networking AOS-Swtich (AOS-S)

Potential Security Impact: Remote: Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 2530 Switch Series - Please refer to Vulnerability Summary for details about affected HPE Networking AOS-Switch AOS-S software versions - Any hardware running the...

HPESBNW05158 rev.1 - Multiple Vulnerabilities in HPE Networking ClearPass Policy Manager (CPPM)

Potential Security Impact: Local: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba ClearPass Enterprise Software - Please refer to Vulnerability Summary for information on impacted software verisions. - Any hardware running the affected software is...

PT-2026-107215

Name of the Vulnerable Software and Affected Versions HPE Networking ClearPass Policy Manager affected versions not specified Description A sensitive information disclosure issue exists in the client software. An attacker with local access to the affected system could exploit this to obtain...

CVE-2016-1734

パッチは、セキュリティアドバイザリが示唆していたような AppleUSBNetworking.kext にはありません（https://support.apple.com/en-ca/HT206166）。 /CVE-2016-1734 md5sum ./10.11.1/AppleUSBNetworking.kext/Contents/MacOS/AppleUSBNetworking.c ./10.11.5/AppleUSBNetworking.kext/Contents/MacOS/AppleUSBNetworking.c 4d297d692f49f12621b0218364486ac0...

CVE-2026-93315

When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may cause cleanup to block, operate outside the build rootfs, or fail without failing the build...

CVE-2026-93315

The BuildKit build engine is vulnerable to a Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367) when using proxy networking with CA injection. A build step can modify the CA bundle before the cleanup process occurs, potentially causing the cleanup to block, execute outside the build root...

CVE-2026-93315 BuildKit proxy CA cleanup can be disrupted by build steps

When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may cause cleanup to block, operate outside the build rootfs, or fail without failing the build...

CVE-2026-98101

A flaw was found in the Linux kernel's IPv6 networking subsystem. A race condition in the ip6mcsource function allows concurrent packet processing routines to observe inconsistent multicast source filter lists when entries are modified in place. A local user could exploit this flaw by changing...

meshdeck

meshdeck Arch Linux ARM 向け MeshDeck ポート - Wilson これは元々 Arch Linux ARM の Wilson リポジトリに移植されました。Wilson リポジトリは ArchAssault プロジェクト http://www.archassault.org と統合されつつあります。 重複と類似した目標があるためです。 オリジナル/アップストリームはすべて、Dr. Philip Polstra によって作成されています。 彼の Sourceforge ページから: http://sourceforge.net/projects/thedeck...

CVE-2026-43503

🚨 CVE-2026-43503 — DirtyClone 공유 메모리가 안전하게 공유되는 것을 멈출 때. 로컬 권한 상승 취약점으로, 이는 SKBFLSHAREDFRAG 플래그가 Linux 네트워킹 스택 내에서 부적절하게 전파되어 발생합니다. 📖 개요 CVE-2026-43503 별칭 DirtyClone는 Linux 커널 네트워킹 서브시스템에 영향을 미치는 높은 심각도의 로컬 권한 상승LPE 취약점입니다. 이 취약점은 여러 소켓 버퍼SKB 프래그먼트 복사 루틴이 패킷 프래그먼트를 복제하거나 전송할 때 SKBFLSHAREDFRAG 플래...

USN-8851-3: Linux kernel (Azure) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file system NFS server daemon; - IPv6 networking; - Netfilter; CVE-2025-38724, CVE-2026-53131, CVE-2026-532...

USN-8851-3 linux-azure-5.4 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file system NFS server daemon; - IPv6 networking; - Netfilter; CVE-2025-38724, CVE-2026-53131, CVE-2026-532...

kernel: Linux kernel: Denial of Service in QFQ scheduler via child qlen manipulation

A flaw was found in the Linux kernel's Quick Fair Queuing QFQ scheduler. The QFQ class deactivation logic incorrectly relies on a child qdisc's queue length qlen to determine if a class is active. A local user with CAPNETADMIN capabilities can manipulate the child qlen into an unexpected state...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: mac80211: mesh: Fixed a leak of meshpreqqueue objects The hwmp code uses objects of type meshpreqqueue, which are added to a list in ieee80211ifmesh to track mpath. We need to fix this issue. If the mpath is deleted, the ex...

Security Bulletin: Kernel privilege escalation and disclosure Vulnerabilities in Linux in IBM Cloud Pak System[CVE-2026-46300, CVE-2026-46333, CVE-2026-43284]

Summary Multiple vulnerabilities in the Linux kernel affect the underlying operating system used by Platform system Manager PSM and OS Image for Red Hat Enterprise Linux Systems shipped with Cloud Pak System, . These issues include a local privilege escalation flaw in the networking subsystem...

The vulnerabilities of the get_absolute_path() and validate_absolute_path() methods in the Tornado asynchronous networking library allow attackers to read arbitrary files.

The vulnerability of the getabsolutepath and validateabsolutepath methods in the Tornado asynchronous networking library is related to incorrect definition of links before accessing files. Exploiting this vulnerability allows an attacker to read arbitrary files remotely...

CVE-2024-36886

N-Day脆弱性の研究 概要 このプロジェクトは、LinuxカーネルにおけるN-Day脆弱性 に焦点を当て、そのライフサイクルの理解、影響の分析、緩和戦略の探求に重点を置いています。N-Day脆弱性とは、公開されている欠陥であり、多くのシステムでパッチが適用されていないため、攻撃者にとって価値の高い標的となります。 本研究は、特定のLinuxカーネルサブシステムを調査し、実際の脆弱性CVE-2024-36886を評価することで、そのセキュリティへの影響を示し、タイムリーなパッチ管理の重要性を強調しています。 目的 Linuxカーネルサブシステムとその潜在的な脆弱性の包括的な分析 を実施す...

Azure-Networking-Privilege-Escalation-Exploit-CVE-2025-54914

Azure-Networking-Privilege-Escalation-Exploit-CVE-2025-54914 Azure 네트워킹 권한 상승 익스플로잇 CVE‑2025‑54914 2025년 9월 4일 작성자: Mark Mallia 1. 개요 2025년 9월 4일, Microsoft의 Azure 네트워킹 서비스는 권한 상승 취약점CVE‑2025‑54914을 문서화한 중요한 보안 권고를 접수했습니다. 이 결함은 CVSSCommon Vulnerability Scoring System에서 10.0점을 받았으며, 사용자 상호 작용 없이...

Reproducing-ConnMan-1.34

Connection Manager Copyright C 2007-2012 Intel Corporation. All rights reserved. 機能と特徴 次の機能はConnection Managerに組み込まれています: - 汎用プラグイン基盤 - デバイスとネットワークの抽象化（基本的なストレージサポート付き） - IPv4、IPv4-LL（リンクローカル）およびDHCP - RFC 5227に準拠したIPv4アドレス競合検出（ACD） - IPv6、DHCPv6および6to4トンネル - 高度なルーティングとDNS設定 -...

wireguard-initramfs

wireguard-initramfs dropbear を wireguard 経由で使用します。 カーネル起動中、暗号化パーティションがマウントされる前に wireguard ネットワーキングを有効にします。dropbear と組み合わせることで、鍵素材を保存したりリモートネットワーク上にポートを公開したりすることなく、完全に暗号化されたリモートブートを実現できます。wireguard サーバーのエンドポイントに到達できるインターネット接続が存在するだけでよいのです。 通常の dropbear 接続と DNS 解決を使用して wireguard エンドポイントを見つけることができます...