CVE-2026-68123 openvswitch: fix GSO userspace truncation underflow

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix GSO userspace truncation underflow OVSACTIONATTRTRUNC currently stores a delta from the original skb length in OVSCBskb-cutlen. When a later userspace action segments a GSO skb, queuegsopackets reuses that delta...

ROS-20260804-73-0027

The vulnerability of the rcunocbrdpoffload function in the kernel/rcu/treenocb.h file of the Linux operating system is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

CVE-2026-64410

A flaw was found in the Linux kernel's netfilter component, specifically concerning the handling of IPIP IP-in-IP tunnel hardware offload. The system attempts to utilize hardware offload for IPIP tunnels, a feature not yet supported by existing drivers. A remote attacker could potentially exploit...

FreeBSD Security Advisory - FreeBSD-SA-26:52.if_wg

FreeBSD Security Advisory - After dispatching a decrypt operation to OCF and receiving the result, the wg4 driver failed to check whether the MAC verification step succeeded. The driver thus silently accepted packets with an invalid Poly1305 authentication tag...

CVE-2026-64522

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA mlx5exfrmaddstate handles acquire-flow temporary SAs by allocating software state and skipping hardware offload setup. That path jumps to the common success label...

UBUNTU-CVE-2026-64210

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix unlocked writing to ICOSQ During napi poll, when the affinity changes and there's still XSK work to be done, we trigger an ICOSQ interrupt on the new CPU. However, this triggering on the ICOSQ is done...

UBUNTU-CVE-2026-64522

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA mlx5exfrmaddstate handles acquire-flow temporary SAs by allocating software state and skipping hardware offload setup. That path jumps to the common success label...

SUSE CVE-2026-64410

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: IPIP tunnel hardware offload is not yet support No driver supports for IPIP tunnels yet, give up early on setting up the hardware offload for this scenario. This patch adds a stub that can be enhanced to add...

SUSE CVE-2026-64522

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA mlx5exfrmaddstate handles acquire-flow temporary SAs by allocating software state and skipping hardware offload setup. That path jumps to the common success label...

CVE-2026-64410

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: IPIP tunnel hardware offload is not yet support No driver supports for IPIP tunnels yet, give up early on setting up the hardware offload for this scenario. This patch adds a stub that can be enhanced to add...

CVE-2026-64410

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: IPIP tunnel hardware offload is not yet support No driver supports for IPIP tunnels yet, give up early on setting up the hardware offload for this scenario. This patch adds a stub that can be enhanced to add...

UBUNTU-CVE-2026-64410

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: IPIP tunnel hardware offload is not yet support No driver supports for IPIP tunnels yet, give up early on setting up the hardware offload for this scenario. This patch adds a stub that can be enhanced to add...

CVE-2026-64522 net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA mlx5exfrmaddstate handles acquire-flow temporary SAs by allocating software state and skipping hardware offload setup. That path jumps to the common success label...

CVE-2026-64522

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA mlx5exfrmaddstate handles acquire-flow temporary SAs by allocating software state and skipping hardware offload setup. That path jumps to the common success label...

EUVD-2026-48866

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA mlx5exfrmaddstate handles acquire-flow temporary SAs by allocating software state and skipping hardware offload setup. That path jumps to the common success label...

CVE-2026-64410 netfilter: flowtable: IPIP tunnel hardware offload is not yet support

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: IPIP tunnel hardware offload is not yet support No driver supports for IPIP tunnels yet, give up early on setting up the hardware offload for this scenario. This patch adds a stub that can be enhanced to add...

CVE-2026-64410 netfilter: flowtable: IPIP tunnel hardware offload is not yet support

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: IPIP tunnel hardware offload is not yet support No driver supports for IPIP tunnels yet, give up early on setting up the hardware offload for this scenario. This patch adds a stub that can be enhanced to add...

CVE-2026-64410

The CVE-2026-64410 entry concerns the Linux kernel netfilter flowtable for IPIP tunnels where hardware offload is not yet supported. The provided descriptions indicate that no driver supports IPIP tunnels for offload, and a stub has been added to handle unsupported configurations by enqueueing wo...

CVE-2026-64410

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: IPIP tunnel hardware offload is not yet support No driver supports for IPIP tunnels yet, give up early on setting up the hardware offload for this scenario. This patch adds a stub that can be enhanced to add...

EUVD-2026-48954

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: IPIP tunnel hardware offload is not yet support No driver supports for IPIP tunnels yet, give up early on setting up the hardware offload for this scenario. This patch adds a stub that can be enhanced to add...