CVE-2023-0179-PoC

Needle CVE-2023-0179 漏洞利用 本仓库包含针对我在 nftables 子系统中最近发现的安全漏洞的利用代码，该漏洞被分配为 CVE-2023-0179，影响从 5.5 到 6.2-rc3 的所有 Linux 版本，不过该利用已在 6.1.6 上进行了测试。 漏洞详情和报告可在 oss-security 上找到 构建说明 只需执行 make needle 命令即可生成相应的可执行文件。 构建成功需要 libmnl 和 libnftnl： root@kitploit: sudo apt-get install libmnl-dev libnftnl-dev 信息泄露...

CVE-2023-0179-PoC

Needle CVE-2023-0179 漏洞利用 此仓库包含我最近在nftables子系统中发现的漏洞利用代码（已分配CVE-2023-0179），影响了从5.5到6.2-rc3的所有Linux版本，但漏洞利用在6.1.6上测试。 漏洞详情和说明可在oss-security找到 构建说明 只需调用 make needle 命令即可生成对应的可执行文件。 构建成功需要 libmnl 和 libnftnl： root@kitploit: sudo apt-get install libmnl-dev libnftnl-dev 信息泄露 漏洞利用将进入一个非特权用户和网络命名空间，并通过...

CVE-2026-74579

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: fix mask build for partial field offload nftpayloadoffloadmask builds the offload match mask for a payload expression that covers only part of a header field. For a partial IPv6 address match fieldlen = 16,...

AZL-96600 CVE-2026-74579 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: fix mask build for partial field offload nftpayloadoffloadmask builds the offload match mask for a payload expression that covers only part of a header field. For a partial IPv6 address match fieldlen = 16,...

CVE-2026-74579

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: fix mask build for partial field offload nftpayloadoffloadmask builds the offload match mask for a payload expression that covers only part of a header field. For a partial IPv6 address match fieldlen = 16,...

UBUNTU-CVE-2026-74579

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: fix mask build for partial field offload nftpayloadoffloadmask builds the offload match mask for a payload expression that covers only part of a header field. For a partial IPv6 address match fieldlen = 16,...

EUVD-2026-60050

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: fix mask build for partial field offload nftpayloadoffloadmask builds the offload match mask for a payload expression that covers only part of a header field. For a partial IPv6 address match fieldlen = 16,...

CVE-2026-74579

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: fix mask build for partial field offload nftpayloadoffloadmask builds the offload match mask for a payload expression that covers only part of a header field. For a partial IPv6 address match fieldlen = 16,...

CVE-2026-74579 netfilter: nft_payload: fix mask build for partial field offload

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: fix mask build for partial field offload nftpayloadoffloadmask builds the offload match mask for a payload expression that covers only part of a header field. For a partial IPv6 address match fieldlen = 16,...

CVE-2026-74579 netfilter: nft_payload: fix mask build for partial field offload

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: fix mask build for partial field offload nftpayloadoffloadmask builds the offload match mask for a payload expression that covers only part of a header field. For a partial IPv6 address match fieldlen = 16,...

CVE-2026-74579

CVE-2026-74579 is a vulnerability in the Linux kernel 's netfilter subsystem, specifically in the nft_payload_offload_mask() function within nft_payload.c. When building an offload match mask for a partial IPv6 address match (e.g., field_len=16, priv_len=1), the code performs a shift of 1 <

Linux Distros Unpatched Vulnerability : CVE-2026-74579

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nftpayload: fix mask build for partial field offload nftpayloadoffloadmask builds the offload match mask for a payload expression that covers only pa...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-990332)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990332 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: incorrect arithmetics when fetching VLAN header bits If the offset + lengt...

ROS-20250623-01

The vulnerability of the nftpayload function of the net/netfilter /nftpayload.c module of the netfilter component of the Linux kernel is related to the operation exceeding the memory buffer boundary. of Linux operating system is related to the operation exceeding the buffer boundaries in memory...

CVE-2024-50251

CVE-2024-50251 is a Linux kernel netfilter nft_payload vulnerability. The issue arises when nft_payload sanitization of offset and length fails, allowing skb_checksum() to access beyond the sk_buff boundary if offset+length exceeds the skb length, triggering a BUG_ON(). Connected advisories confi...

GSD-2023-1002196 netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits

netfilter: nftpayload: incorrect arithmetics when fetching VLAN header bits This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.164 by commit...