PF_RING

PFRING™ Introduction PFRING™ is a Linux kernel module and user-space framework that allows you to process packets at high-rates while providing you a consistent API for packet processing applications. Who needs PFRING™? Basically everyone who has to handle many packets per second. The term ‘many’...

CVE-2026-100236

A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the header fits in the source first segment or in the destination buffer, and a header longer than the configured GSO segment size can underflow the payload-size calculation. ...

Detection-and-Mitigation-for-CVE-2022-2639

Detection-and-Mitigation-for-CVE-2022-2639 Description The Open vSwitch kernel module allows flexible userspace control over flow-level packet processing on selected network devices. It can be used to implement a plain Ethernet switch, network device bonding, VLAN processing, network access...

CVE-2026-55200

🚨 CVE-2026-55200 - Critical libssh2 Out-of-Bounds Write Vulnerability 📌 Overview CVE-2026-55200 is a critical memory corruption vulnerability affecting the widely deployed libssh2 library. The flaw arises from improper validation of the SSH packet length field during packet processing, potentiall...

kernel: xfrm: hold dev ref until after transport_finish NF_HOOK

A flaw was found in the Linux kernel's xfrm IP eXtensible FRamework subsystem. This vulnerability involves a race condition where a network device's reference is released too early during packet processing after asynchronous cryptography. This premature release can lead to the system attempting t...

kernel: xfrm: hold dev ref until after transport_finish NF_HOOK

A flaw was found in the Linux kernel's xfrm IP eXtensible FRamework subsystem. This vulnerability involves a race condition where a network device's reference is released too early during packet processing after asynchronous cryptography. This premature release can lead to the system attempting t...

kernel: xfrm: hold dev ref until after transport_finish NF_HOOK

A flaw was found in the Linux kernel's xfrm IP eXtensible FRamework subsystem. This vulnerability involves a race condition where a network device's reference is released too early during packet processing after asynchronous cryptography. This premature release can lead to the system attempting t...

Astra Linux – Vulnerability in Qemu

In QEMU versions up to 5.0.0, an assertion failure can occur during network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could exploit this flaw to terminate the QEMU process on the host, resulting in a denial-of-service condition in...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Wifi: mwifiex: Fixed out-of-bounds access to the skb-data buffer during OOB operations and integer underflow when processing RX packets. Ensure that functions such as mwifiexprocessmgmtpacket, mwifiexprocessstarxpacket,...

XRDP Packet Processing Handler DoS

The vulnerability of the RDP packet processing module in the XRDP server is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Cisco ASA Uncontrolled Resource Consumption (CVE-2020-3554)

A vulnerability in the TCP packet processing of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a memory...

kernel: xfrm: hold dev ref until after transport_finish NF_HOOK

A flaw was found in the Linux kernel's xfrm IP eXtensible FRamework subsystem. This vulnerability involves a race condition where a network device's reference is released too early during packet processing after asynchronous cryptography. This premature release can lead to the system attempting t...

CVE-2026-86128

A NULL pointer dereference vulnerability exists in the Fireware OS NetFlow packet-processing feature. This flaw allows a remote, unauthenticated attacker to trigger a denial of service (DoS) by sending a specially crafted IPv6 packet . No specific affected versions, remediation steps, or exploita...

PT-2026-102953

Name of the Vulnerable Software and Affected Versions Fireware OS affected versions not specified Description A NULL pointer dereference in the NetFlow packet-processing feature allows a remote, unauthenticated attacker to trigger a denial of service by sending a specially crafted IPv6 packet. A...

CVE-2026-63452

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the HTTP/1 parser limits decompression work per transaction but does not limit how many small brotli compression bombs a single flow can submit. With...

CVE-2026-73455: Improper Handling of Length Parameter Inconsistency

On affected platforms running Arista EOS with Open Shortest Path First version 3 OSPFv3 configured, a specially crafted packet can cause the OSPFv3 agent to restart unexpectedly...

CVE-2026-76685

A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated input. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input that triggers an integer overflow. Successful...

EUVD-2026-79211

A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated input. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input that triggers an integer overflow. Successful...

CVE-2026-76685

CVE-2026-76685 affects HPE Networking EdgeConnect SD-WAN Gateways in the proxy packet processing logic , where improper handling of malformed or truncated input triggers an integer overflow that escalates to a buffer overflow . An unauthenticated remote attacker can send specially crafted input t...

PT-2026-92445

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A flaw in the proxy packet processing logic occurs when malformed or truncated input is improperly handled. An unauthenticated remote attacker can trigger an...