CVE-2026-45859 netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinkqueue: do shared-unconfirmed check before segmentation Ulrich reports a regression with nfqueue: If an application did not set the 'FGSO' capability flag and a gso packet with an unconfirmed nfconn entry is...

AZL-88577 CVE-2026-45844 affecting package kernel for versions less than 6.6.141.1-1

In the Linux kernel, the following vulnerability has been resolved: netfilter: arptables: fix IEEE1394 ARP payload parsing Weiming Shi says: "arppacketmatch unconditionally parses the ARP payload assuming two hardware addresses are present source and target. However, IPv4-over-IEEE1394 ARP RFC 27...

CVE-2026-45844

In the Linux kernel, the following vulnerability has been resolved: netfilter: arptables: fix IEEE1394 ARP payload parsing Weiming Shi says: "arppacketmatch unconditionally parses the ARP payload assuming two hardware addresses are present source and target. However, IPv4-over-IEEE1394 ARP RFC 27...

CVE-2026-45843

In the Linux kernel, the following vulnerability has been resolved: slip: bound decode reads against the compressed packet length slhcuncompress parses a VJ-compressed TCP header by advancing a pointer through the packet via decode and pull16. Neither helper bounds-checks against isize, and decod...

CVE-2026-45844 netfilter: arp_tables: fix IEEE1394 ARP payload parsing

In the Linux kernel, the following vulnerability has been resolved: netfilter: arptables: fix IEEE1394 ARP payload parsing Weiming Shi says: "arppacketmatch unconditionally parses the ARP payload assuming two hardware addresses are present source and target. However, IPv4-over-IEEE1394 ARP RFC 27...

CVE-2026-45844

Summary: CVE-2026-45844 affects the Linux kernel netfilter arp_tables on IEEE1394 (FireWire) interfaces. The vulnerability arises because arp_packet_match() unconditionally parses the ARP payload assuming both source and target hardware addresses exist, while IPv4-over-IEEE1394 ARP omits the targ...

CVE-2026-45844

In the Linux kernel, the following vulnerability has been resolved: netfilter: arptables: fix IEEE1394 ARP payload parsing Weiming Shi says: "arppacketmatch unconditionally parses the ARP payload assuming two hardware addresses are present source and target. However, IPv4-over-IEEE1394 ARP RFC 27...

EUVD-2026-32170

In the Linux kernel, the following vulnerability has been resolved: netfilter: arptables: fix IEEE1394 ARP payload parsing Weiming Shi says: "arppacketmatch unconditionally parses the ARP payload assuming two hardware addresses are present source and target. However, IPv4-over-IEEE1394 ARP RFC 27...

CVE-2026-45844 netfilter: arp_tables: fix IEEE1394 ARP payload parsing

In the Linux kernel, the following vulnerability has been resolved: netfilter: arptables: fix IEEE1394 ARP payload parsing Weiming Shi says: "arppacketmatch unconditionally parses the ARP payload assuming two hardware addresses are present source and target. However, IPv4-over-IEEE1394 ARP RFC 27...

EUVD-2026-32169

In the Linux kernel, the following vulnerability has been resolved: slip: bound decode reads against the compressed packet length slhcuncompress parses a VJ-compressed TCP header by advancing a pointer through the packet via decode and pull16. Neither helper bounds-checks against isize, and decod...

CVE-2026-45843 slip: bound decode() reads against the compressed packet length

In the Linux kernel, the following vulnerability has been resolved: slip: bound decode reads against the compressed packet length slhcuncompress parses a VJ-compressed TCP header by advancing a pointer through the packet via decode and pull16. Neither helper bounds-checks against isize, and decod...

CVE-2026-45843

CVE-2026-45843 affects the Linux kernel’s SLIP/VJ-compressed TCP header handling (slip and slhc_uncompress). The vulnerability stems from decode() and pull16() not enforcing bounds against the packet end, and decode() masking its return value to 0xFFFF, causing potential over-reads when a compres...

CVE-2026-45838

In the Linux kernel, the following vulnerability has been resolved: bpf: fix end-of-list detection in cgroupstoragegetnextkey listnextentry never returns NULL -- when the current element is the last entry it wraps to the list head via containerof. The subsequent NULL check is therefore dead code...

org.yamcs:distribution (4.10.9), org.yamcs:packet-viewer (4.10.9) +4 more potentially affected by CVE-2026-44632 via org.yamcs:yamcs-core (4.10.9)

org.yamcs:yamcs-core MAVEN version 4.10.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:distribution 4.10.9 - org.yamcs:packet-viewer 4.10.9 - org.yamcs:simulation 4.10.9 - org.yamcs:yamcs-artemis...

org.yamcs:distribution (4.10.7), org.yamcs:packet-viewer (4.10.7) +4 more potentially affected by CVE-2026-44596 via org.yamcs:yamcs-core (4.10.7)

org.yamcs:yamcs-core MAVEN version 4.10.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:distribution 4.10.7 - org.yamcs:packet-viewer 4.10.7 - org.yamcs:simulation 4.10.7 - org.yamcs:yamcs-artemis...

org.yamcs:distribution (4.10.5), org.yamcs:packet-viewer (4.10.5) +4 more potentially affected by CVE-2026-44596 via org.yamcs:yamcs-core (4.10.5)

org.yamcs:yamcs-core MAVEN version 4.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:distribution 4.10.5 - org.yamcs:packet-viewer 4.10.5 - org.yamcs:simulation 4.10.5 - org.yamcs:yamcs-artemis...

org.yamcs:distribution (4.10.6), org.yamcs:packet-viewer (4.10.6) +4 more potentially affected by CVE-2026-44595 via org.yamcs:yamcs-core (4.10.6)

org.yamcs:yamcs-core MAVEN version 4.10.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:distribution 4.10.6 - org.yamcs:packet-viewer 4.10.6 - org.yamcs:simulation 4.10.6 - org.yamcs:yamcs-artemis...

CVE-2026-46000: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix conn-level packet handling to unshare RESPONSE packets The security operations that verify the RESPONSE packets decrypt bits of it in place - however, the skbuff may be shared with a packet sniffer, which would lead to...

CVE-2026-45952: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: Add validation for MTU changes Increasing the MTU beyond the HDS threshold causes the hardware to fragment packets across multiple buffers. If a single-buffer XDP program is attached, the driver will drop all multi-fr...

PT-2026-43671

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the arena vm close function during a fork operation. The arena vm open function increments the vml-mmap count but fails to register the child Virtual...