24613 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-53110
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/bpf: Zero-extend bpf prog return values and kfunc arguments s390x ABI requires callers to zero-extend unsigned arguments and sign-extend signed arguments,...
Linux Distros Unpatched Vulnerability : CVE-2026-40012
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ECS zero scoped answers are stored in the packet cache while they should not. This impacts only configurations that have ECS enabled; CVE-2026-40012 Note that...
Linux Distros Unpatched Vulnerability : CVE-2026-53055
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: hisilicon/sec2 - prevent req used-after-free for sec During packet transmission, if the system is under heavy load, the hardware might complete processi...
CVE-2026-10643 Out-of-bounds heap write in Zephyr `recvmsg()` ancillary-data path (`insert_pktinfo` undersizes the control-buffer capacity check)
Zephyr's IP socket recvmsg implementation subsys/net/lib/sockets/socketsinet.c, insertpktinfo validated the user-supplied ancillary msgcontrol buffer using only the payload length msg-msgcontrollen pktinfolen before writing a full control message consisting of an aligned cmsg header plus the...
bpf, sockmap: Fix af_unix null-ptr-deref in proto update
...
bpf, arm64: Fix off-by-one in check_imm signed range check
...
bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb
...
net: mvpp2: sync RX data at the hardware packet offset
...
bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap
...
bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path
...
bpf, sockmap: Fix af_unix iter deadlock
...
bpf: Fix NULL deref in map_kptr_match_type for scalar regs
...
libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c
...
thunderbolt: Validate XDomain request packet size before type cast
...
[SECURITY] Fedora 43 Update: ldns-1.9.2-1.fc43
ldns is a library with the aim to simplify DNS programming in C. All low-level DNS/DNSSEC operations are supported. We also define a higher level API which allows a programmer to for instance create or sign packets...
CVE-2026-53092
A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. This vulnerability occurs due to incorrect delta tracking when source and destination registers are the same during register value adjustments. This can lead to a mismatch between the BPF verifier's analysis and the actu...
CVE-2026-53035
A flaw was found in the Linux kernel's Berkeley Packet Filter BPF sockmap component. A deadlock can occur in the bpfiterunixseqshow function when an iterator program attempts to update a sockmap while a lock is already held. This recursive locking scenario can lead to a system freeze or...
CVE-2026-53036
A flaw was found in the Linux kernel. Specifically, an off-by-one error exists in the BPF Berkeley Packet Filter JIT Just-In-Time compiler when handling immediate values for branch instructions on ARM64 architectures. This vulnerability allows the system to process values outside their intended...
CVE-2026-53111
A flaw was found in the Linux kernel. The bpflwtxmitpushencap helper in the Berkeley Packet Filter BPF subsystem attempts to access an uninitialized network device structure during certain test runs. A local user can exploit this null pointer dereference by executing the bpflwtpushipencap functio...
CVE-2026-53110
A flaw was found in the Linux kernel's BPF Berkeley Packet Filter JIT Just-In-Time compiler for the s390x architecture. The system's Application Binary Interface ABI requires that unsigned arguments and return values be zero-extended. However, the BPF JIT compiler incorrectly performed only sign...