Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (crlsa-2024_4211)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20244211 advisory. kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack CVE-2020-26555 kernel: TCP-spoofed ghost ACKs and leak leak initial...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2024:1715000325)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1715000325 advisory. - When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_6570)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20266570 advisory. kernel: Linux kernel net/mlx5: Use-after-free in ECVF vports unload leads to denial of service CVE-2025-38109 kernel: Kernel: Privilege escalation or denia...

Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (crlsa-2024_1607)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20241607 advisory. kernel: vmwgfx: NULL pointer dereference in vmwcmddxdefinequery CVE-2022-38096 kernel: Out of boundary write in perfreadgroup as result of overflow a...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2024:1715000749)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1715000749 advisory. - Improper access control in the IntelR Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an unauthenticated...

CVE-2026-23111-PoC

CVE-2026-23111 — Linux カーネル nftables UAF → LPE Linux カーネル nftables サブシステムにおける use-after-free である CVE-2026-23111 の動作するローカル権限昇格エクスプロイト。linux-6.12.69 x86-64 でテスト済み。 ターゲット要件 このエクスプロイトは、以下の設定でビルドされたターゲットカーネルを前提としています: オプション| 値| 理由 ---|---|--- CONFIGNFTABLES| y| 脆弱なサブシステム CONFIGUSERNS| y| nftables...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

kernel: netfilter: nf_tables: reject mismatching sum of field_len with set key length

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: reject mismatching sum of fieldlen with set key length The field length description provides the length of each separated key field in the concatenation, each field gets rounded up to 32-bits to calculate the...

RHEL 9 : kernel (RHSA-2026:70484)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70484 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netfilter: nftables: reject...

SUSE CVE-2026-90061

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: skip double clone set expressions on element insert Both the dynset and newsetelem path clone the existing set expressions when setting set element expressions if no override expressions are provided. This...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-23111 — Linux Kernel nftables UAF → LPE A working l...

CVE-2023-32233-reproduction

CVE-2023-32233 — Use-After-Free en nftables: Reproducción y análisis de causa raíz Lo que es este repositorio: mi reproducción práctica y estudio de CVE-2023-32233, un use-after-free en el subsistema nftables de Netfilter del kernel de Linux que permite la escalada local de privilegios, divulgado...

SUSE CVE-2026-90062

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: move hardware offload step after building the chain blob Allocate the chain blob before the ruleset offload to reduce chances of entering an inconsistent state where the offloaded ruleset in the nic and the...

Linux Distros Unpatched Vulnerability : CVE-2026-90062

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nftables: move hardware offload step after building the chain blob Allocate the chain blob before the ruleset offload to reduce chances of entering a...

Linux Distros Unpatched Vulnerability : CVE-2026-90061

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nftables: skip double clone set expressions on element insert Both the dynset and newsetelem path clone the existing set expressions when setting set...

AZL-102513 CVE-2026-90062 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: move hardware offload step after building the chain blob Allocate the chain blob before the ruleset offload to reduce chances of entering an inconsistent state where the offloaded ruleset in the nic and the...

DEBIAN-CVE-2026-90061

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: skip double clone set expressions on element insert Both the dynset and newsetelem path clone the existing set expressions when setting set element expressions if no override expressions are provided. This...

CVE-2026-90061

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: skip double clone set expressions on element insert Both the dynset and newsetelem path clone the existing set expressions when setting set element expressions if no override expressions are provided. This...

CVE-2026-90062

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: move hardware offload step after building the chain blob Allocate the chain blob before the ruleset offload to reduce chances of entering an inconsistent state where the offloaded ruleset in the nic and the...

DEBIAN-CVE-2026-90062

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: move hardware offload step after building the chain blob Allocate the chain blob before the ruleset offload to reduce chances of entering an inconsistent state where the offloaded ruleset in the nic and the...