66 matches found
CVE-2026-31431-Copy-Fail-Container-Escape
CVE-2026-31431-Copy-Fail-Container-Escape Demonstração https://github.com/user-attachments/assets/2cb0cb67-789a-4461-a0b8-1fe878d9426e Pré-requisitos Contêiner vulnerável ao CVE-2026-31431 Healthcheck do contêiner configurado e comando do healthcheck conhecido Acesso root obtido dentro do contêin...
CVE-2026-64026
A flaw was found in the Linux kernel's rxrpc component. This vulnerability can lead to pagecache corruption when data packets are decrypted in-place after being transmitted locally via the splice system call. This issue stems from improper handling of packet sharing within the I/O thread,...
SUSE CVE-2026-64066
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfsreadtopagecache to pause on subreq failure Fix netfsreadtopagecache so that it pauses the generation of new subrequests if an already-issued subrequest fails...
CVE-2026-64066
A flaw was found in the Linux kernel's netfs component. The netfsreadtopagecache function does not properly pause the generation of new subrequests when a previously issued subrequest has failed. This oversight can lead to continued resource consumption or incorrect system state, potentially...
Linux Distros Unpatched Vulnerability : CVE-2026-64026
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rxrpc: Fix DATA decrypt vs splice by copying data to buffer in recvmsg This improves the fix for CVE-2026-43500. Fix the pagecache corruption from in-place...
CVE-2026-64026
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix DATA decrypt vs splice by copying data to buffer in recvmsg This improves the fix for CVE-2026-43500. Fix the pagecache corruption from in-place decryption of a DATA packet transmitted locally by splice by getting rid ...
CVE-2026-64159
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix zeropoint update where isize remoteisize Fix the update of the zero point by netfsreleasefolio when there is uncommitted data in the pagecache beyond the folio being released but the on-server EOF is in this folio ie...
EUVD-2026-45844
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix zeropoint update where isize remoteisize Fix the update of the zero point by netfsreleasefolio when there is uncommitted data in the pagecache beyond the folio being released but the on-server EOF is in this folio ie...
CVE-2026-64159 netfs: Fix zeropoint update where i_size > remote_i_size
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix zeropoint update where isize remoteisize Fix the update of the zero point by netfsreleasefolio when there is uncommitted data in the pagecache beyond the folio being released but the on-server EOF is in this folio ie...
CVE-2026-64159
CVE-2026-64159 is a bug in the Linux kernel's netfs (network file system) library. The function netfs_release_folio() incorrectly uses the local i_size instead of remote_i_size when updating the zero point (the file position from which the server is assumed to return zeros). This occurs when unco...
CVE-2026-64159
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix zeropoint update where isize remoteisize Fix the update of the zero point by netfsreleasefolio when there is uncommitted data in the pagecache beyond the folio being released but the on-server EOF is in this folio ie...
CVE-2026-64066 netfs: Fix netfs_read_to_pagecache() to pause on subreq failure
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfsreadtopagecache to pause on subreq failure Fix netfsreadtopagecache so that it pauses the generation of new subrequests if an already-issued subrequest fails...
CVE-2026-64066
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfsreadtopagecache to pause on subreq failure Fix netfsreadtopagecache so that it pauses the generation of new subrequests if an already-issued subrequest fails...
CVE-2026-64066 netfs: Fix netfs_read_to_pagecache() to pause on subreq failure
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfsreadtopagecache to pause on subreq failure Fix netfsreadtopagecache so that it pauses the generation of new subrequests if an already-issued subrequest fails...
CVE-2026-64026 rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix DATA decrypt vs splice by copying data to buffer in recvmsg This improves the fix for CVE-2026-43500. Fix the pagecache corruption from in-place decryption of a DATA packet transmitted locally by splice by getting rid ...
CVE-2026-64026
CVE-2026-64026 affects the Linux kernel’s rxrpc path. The issue was addressed by removing in-place decryption in splice()-transmitted DATA packets and instead unconditionally copying the packet content into a dedicated bounce buffer, which is decrypted there and then copied to the final destinati...
EUVD-2026-45599
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix DATA decrypt vs splice by copying data to buffer in recvmsg This improves the fix for CVE-2026-43500. Fix the pagecache corruption from in-place decryption of a DATA packet transmitted locally by splice by getting rid ...
PT-2026-61476
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs component where the zero point—the file position from which the system assumes the server will return zeros to avoid unnecessary reads—is updated incorrectly...
PT-2026-61383
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs read to pagecache function where the system fails to pause the generation of new subrequests when a previously issued subrequest fails. Recommendations At th...
Linux Distros Unpatched Vulnerability : CVE-2026-53168
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: reject fusenotify pagecache ops on directories The operations FUSENOTIFYSTORE and FUSENOTIFYRETRIEVE allow the FUSE daemon to actively write/read pagecach...