CVE-2026-74667

CVE-2026-74667 is an out-of-bounds read in the Linux kernel's net/packet subsystem. The packet_parse_headers() function fails to reset skb->mac_header for protocol-bound SOCK_RAW sockets, SOCK_DGRAM frames, and the legacy SOCK_PACKET path. When these frames traverse the PACKET_QDISC_BYPASS tra...

CVE-2026-74666 packet: synchronize pressure clearing with ring reconfiguration

In the Linux kernel, the following vulnerability has been resolved: packet: synchronize pressure clearing with ring reconfiguration packetsetring updates the RX ring state under skreceivequeue.lock, but used to publish the tpacket receive mode through po-prothook.func after releasing that lock...

EUVD-2026-64354

In the Linux kernel, the following vulnerability has been resolved: net/packet: reset the MAC header on the packet-socket transmit path packetparseheaders resets the MAC header only for a SOCKRAW frame whose socket did not bind a protocol. A protocol-bound SOCKRAW socket, any SOCKDGRAM frame, and...

CVE-2026-74666

A race condition in the Linux kernel packet subsystem (AF_PACKET/TPACKET) allows __packet_rcv_has_room() to dereference stale or NULL ring storage . The root cause is that packet_set_ring() published the tpacket receive hook (po->prot_hook.func) after releasing sk_receive_queue.lock, so packet...

SUSE CVE-2026-72351

In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE private flags can indicate that remote checksum offload metadata is present. The private flags field itself is accounted for by guehdrflagslen, but guehdrprivflagslen currently...

SUSE CVE-2026-74582

In the Linux kernel, the following vulnerability has been resolved: packet: use consistent hardheaderlen in non-ring send paths packetsnd reads dev-hardheaderlen multiple times while allocating and constructing an skb. Device reconfiguration can change this value concurrently, for example through...

PT-2026-79631

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ntb netdev rx handler function where the received skb socket buffer is passed to the network stack before a replacement is allocated. If the allocation fails, no...

PT-2026-79671

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where packet set ring updates the RX ring state under sk receive queue.lock but publishes the tpacket receive mode through po-prot hook.func after releasing that lock. Th...

Linux Distros Unpatched Vulnerability : CVE-2026-74704

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: schcake: drop WARNON1 for malformed packets in ACK filter The schcake ACK filter parses packets to find the TCP header and filter duplicated ACKs if...

PT-2026-79672

In the Linux kernel, the following vulnerability has been resolved: net/packet: reset the MAC header on the packet-socket transmit path packet parse headers resets the MAC header only for a SOCK RAW frame whose socket did not bind a protocol. A protocol-bound SOCK RAW socket, any SOCK DGRAM frame...

Linux Distros Unpatched Vulnerability : CVE-2026-74667

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/packet: reset the MAC header on the packet-socket transmit path packetparseheaders resets the MAC header only for a SOCKRAW frame whose socket did not bind ...

USN-8661-2: Linux kernel (Low Latency) vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

USN-8661-2 linux-lowlatency vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

USN-8667-1: Linux kernel (KVM) vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

USN-8667-1 linux-kvm vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

AZL-96995 CVE-2026-74582 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: packet: use consistent hardheaderlen in non-ring send paths packetsnd reads dev-hardheaderlen multiple times while allocating and constructing an skb. Device reconfiguration can change this value concurrently, for example through...

CVE-2026-76918

A flaw was found in Wireshark. A local attacker could exploit a vulnerability in the SSH Secure Shell protocol dissector, which is responsible for analyzing SSH network traffic. This flaw, triggered by user interaction, could lead to a crash of the Wireshark application, resulting in a denial of...

CVE-2026-74474

A flaw was found in the Linux kernel's vxlan module. This vulnerability arises from the incorrect handling of network packet headers during data transmission. Specifically, certain functions within the vxlan module fail to properly account for the initial part of the network packet, known as the...

EUVD-2026-63751

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP packet to a reachable RPC service, resulting in complete system unavailability and requiring an LPAR restart...

PT-2026-79403

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the packet handling of the Linux kernel where packet snd and packet sendmsg spkt read the hard header len value multiple times during the allocation and construction o...