8 matches found
EUVD-2026-32169
In the Linux kernel, the following vulnerability has been resolved: slip: bound decode reads against the compressed packet length slhcuncompress parses a VJ-compressed TCP header by advancing a pointer through the packet via decode and pull16. Neither helper bounds-checks against isize, and decod...
CVE-2026-45843 slip: bound decode() reads against the compressed packet length
In the Linux kernel, the following vulnerability has been resolved: slip: bound decode reads against the compressed packet length slhcuncompress parses a VJ-compressed TCP header by advancing a pointer through the packet via decode and pull16. Neither helper bounds-checks against isize, and decod...
PT-2026-43677
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The slhc uncompress function parses VJ-compressed TCP headers by advancing a pointer through the packet using decode and pull16. These helper functions do not perform bounds-checks again...
CVE-2026-43030
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix regsafe for pointers to packet In case rold-reg-range == BEYONDPKTEND && rcur-reg-range == N regsafe may return true which may lead to current state with valid packet range not being explored. Fix the bug...
CVE-2026-43030
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix regsafe for pointers to packet In case rold-reg-range == BEYONDPKTEND && rcur-reg-range == N regsafe may return true which may lead to current state with valid packet range not being explored. Fix the bug...
EUVD-2026-26629
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix regsafe for pointers to packet In case rold-reg-range == BEYONDPKTEND && rcur-reg-range == N regsafe may return true which may lead to current state with valid packet range not being explored. Fix the bug...
PT-2026-36447
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Google Chrome affected versions not specified Description A bug in the Linux kernel's regsafe function occurs when rold-reg-range is BEYOND PKT END and rcur-reg-range is N, potentially causing the...
