CVE-2026-74666

In the Linux kernel, the following vulnerability has been resolved: packet: synchronize pressure clearing with ring reconfiguration packetsetring updates the RX ring state under skreceivequeue.lock, but used to publish the tpacket receive mode through po-prothook.func after releasing that lock...

CVE-2026-74668 packet: use consistent hard_header_len in TX_RING send path

In the Linux kernel, the following vulnerability has been resolved: packet: use consistent hardheaderlen in TXRING send path tpacketsnd reads dev-hardheaderlen independently for skb allocation and header construction in tpacketfillskb. Concurrent netdevice reconfiguration can therefore make the...

EUVD-2026-64355

In the Linux kernel, the following vulnerability has been resolved: packet: use consistent hardheaderlen in TXRING send path tpacketsnd reads dev-hardheaderlen independently for skb allocation and header construction in tpacketfillskb. Concurrent netdevice reconfiguration can therefore make the...

EUVD-2026-64353

In the Linux kernel, the following vulnerability has been resolved: packet: synchronize pressure clearing with ring reconfiguration packetsetring updates the RX ring state under skreceivequeue.lock, but used to publish the tpacket receive mode through po-prothook.func after releasing that lock...

CVE-2026-74666

This vulnerability affects the Linux kernel AF_PACKET (packet socket) subsystem. A race condition exists in packet_set_ring(): the tpacket receive mode was published via po->prot_hook.func after releasing sk_receive_queue.lock, while the RX ring state was already updated under that lock. This ...

PT-2026-79673

In the Linux kernel, the following vulnerability has been resolved: packet: use consistent hard header len in TX RING send path tpacket snd reads dev-hard header len independently for skb allocation and header construction in tpacket fill skb. Concurrent netdevice reconfiguration can therefore ma...

PT-2026-79671

In the Linux kernel, the following vulnerability has been resolved: packet: synchronize pressure clearing with ring reconfiguration packet set ring updates the RX ring state under sk receive queue.lock, but used to publish the tpacket receive mode through po-prot hook.func after releasing that...

CVE-2026-74582

A flaw was found in the Linux kernel's packet handling functions, specifically packetsnd and packetsendmsgspkt. This vulnerability arises from inconsistent handling of network device header lengths during packet construction. A local attacker could exploit this by triggering a race condition duri...

EUVD-2026-64002

In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vring metadata cache on vring reconfiguration vq-metaiotlb caches the vhostiotlbmap that backs each vring metadata region, and iotlbaccessok returns early on a cache hit, taking the hit as proof that the region h...

CVE-2026-74580

CVE-2026-74580 is a vulnerability in the Linux kernel vhost subsystem. The vq->meta_iotlb[] cache, which stores IOTLB mappings for vring metadata regions, is not invalidated when VHOST_SET_VRING_ADDR or VHOST_SET_VRING_NUM reconfigures a live vring. This causes iotlb_access_ok() to return a st...

CVE-2026-74580 vhost: reset the vring metadata cache on vring reconfiguration

In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vring metadata cache on vring reconfiguration vq-metaiotlb caches the vhostiotlbmap that backs each vring metadata region, and iotlbaccessok returns early on a cache hit, taking the hit as proof that the region h...

PT-2026-79403

In the Linux kernel, the following vulnerability has been resolved: packet: use consistent hard header len in non-ring send paths packet snd reads dev-hard header len multiple times while allocating and constructing an skb. Device reconfiguration can change this value concurrently, for example...

PT-2026-79401

In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vring metadata cache on vring reconfiguration vq-meta iotlb caches the vhost iotlb map that backs each vring metadata region, and iotlb access ok returns early on a cache hit, taking the hit as proof that the...

UBUNTU-CVE-2026-68471

In the Linux kernel, the following vulnerability has been resolved: wifi: ieee80211: validate MLE common info length ieee80211mlecommonsize uses the first common-info octet as the common information length for all known MLE types. However, ieee80211mlesizeok only validates that octet for Basic,...

CVE-2026-68471 wifi: ieee80211: validate MLE common info length

In the Linux kernel, the following vulnerability has been resolved: wifi: ieee80211: validate MLE common info length ieee80211mlecommonsize uses the first common-info octet as the common information length for all known MLE types. However, ieee80211mlesizeok only validates that octet for Basic,...

EUVD-2026-59093

In the Linux kernel, the following vulnerability has been resolved: wifi: ieee80211: validate MLE common info length ieee80211mlecommonsize uses the first common-info octet as the common information length for all known MLE types. However, ieee80211mlesizeok only validates that octet for Basic,...

CVE-2026-44101

Due to missing authentication the CHARX OCPP Agent service allows an unauthenticated remote attacker to reconfigure the backend connection. This can lead to Denial-of-Service and confidential data being disclosed to the attacker...

CVE-2026-44101 OCPP reconfiguration vulnerability

Due to missing authentication the CHARX OCPP Agent service allows an unauthenticated remote attacker to reconfigure the backend connection. This can lead to Denial-of-Service and confidential data being disclosed to the attacker...

CVE-2026-44101

Due to missing authentication the CHARX OCPP Agent service allows an unauthenticated remote attacker to reconfigure the backend connection. This can lead to Denial-of-Service and confidential data being disclosed to the attacker...

CVE-2026-44101

CVE-2026-44101 affects the CHARX OCPP Agent service. The vulnerability arises from missing authentication, allowing an unauthenticated remote attacker to reconfigure the backend connection. Reported impacts include Denial-of-Service and leakage of confidential data through backend reconfiguration...