firehol

FireHOL ======= http://firehol.org/ root@kitploit: FireHOL, 인간을 위한 iptables 상태 저장 패킷 필터링 방화벽! FireQOS, 인간을 위한 TC 기반 대역폭 셰이퍼! Git 이 지침은 git 저장소로 작업하는 사람들을 위한 것입니다. 더 일반적인 지침은 업그레이드 노트부터 시작합니다. Git 저장소 클론하기 github firehol 저장소 페이지에는 저장소를 클론하는 데 사용할 수 있는 URL이 나열되어 있습니다. 클론 후에는 스타일 검사 등을 위해 git 훅을 복사해...

CVE-2026-64027

A flaw was found in the net/shaper component of the Linux kernel. A race condition exists in how VALID marks are handled for entries in an XArray. This can lead to a Use-After-Free UAF vulnerability, where memory is incorrectly freed while still in use, potentially allowing an attacker to cause a...

SUSE CVE-2026-64027

In the Linux kernel, the following vulnerability has been resolved: net: shaper: rework the VALID marking again Recent commit changed the semantics from NOTVALID to VALID. I didn't realize that the flags are not stored atomically with the entry in XArray. There's still a race of reader observing ...

SUSE CVE-2026-64054

In the Linux kernel, the following vulnerability has been resolved: net: shaper: reject duplicate leaves in GROUP request netshapernlgroupdoit does not deduplicate NETSHAPERALEAVES entries. When userspace supplies the same leaf handle twice, the same old-parent pointer lands twice in oldnodes. Th...

CVE-2026-64054

A flaw was found in the net/shaper component of the Linux kernel. This vulnerability occurs because the netshapernlgroupdoit function does not properly handle duplicate leaf entries in a GROUP request. A local attacker could exploit this by supplying the same leaf handle multiple times, leading t...

Linux Distros Unpatched Vulnerability : CVE-2026-64054

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: shaper: reject duplicate leaves in GROUP request netshapernlgroupdoit does not...

Linux Distros Unpatched Vulnerability : CVE-2026-64027

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: shaper: rework the VALID marking again Recent commit changed the semantics from NOTVALI...

CVE-2026-64054

In the Linux kernel, the following vulnerability has been resolved: net: shaper: reject duplicate leaves in GROUP request netshapernlgroupdoit does not deduplicate NETSHAPERALEAVES entries. When userspace supplies the same leaf handle twice, the same old-parent pointer lands twice in oldnodes. Th...

CVE-2026-64027

In the Linux kernel, the following vulnerability has been resolved: net: shaper: rework the VALID marking again Recent commit changed the semantics from NOTVALID to VALID. I didn't realize that the flags are not stored atomically with the entry in XArray. There's still a race of reader observing ...

EUVD-2026-45627

In the Linux kernel, the following vulnerability has been resolved: net: shaper: reject duplicate leaves in GROUP request netshapernlgroupdoit does not deduplicate NETSHAPERALEAVES entries. When userspace supplies the same leaf handle twice, the same old-parent pointer lands twice in oldnodes. Th...

CVE-2026-64054

CVE-2026-64054 is a Linux kernel vulnerability in the net_shaper (Network Shaper API) subsystem. The function net_shaper_nl_group_doit() fails to deduplicate NET_SHAPER_A_LEAVES entries, so when userspace supplies the same leaf handle twice, the same parent pointer is stored twice in old_nodes[],...

CVE-2026-64054 net: shaper: reject duplicate leaves in GROUP request

In the Linux kernel, the following vulnerability has been resolved: net: shaper: reject duplicate leaves in GROUP request netshapernlgroupdoit does not deduplicate NETSHAPERALEAVES entries. When userspace supplies the same leaf handle twice, the same old-parent pointer lands twice in oldnodes. Th...

CVE-2026-64054 net: shaper: reject duplicate leaves in GROUP request

In the Linux kernel, the following vulnerability has been resolved: net: shaper: reject duplicate leaves in GROUP request netshapernlgroupdoit does not deduplicate NETSHAPERALEAVES entries. When userspace supplies the same leaf handle twice, the same old-parent pointer lands twice in oldnodes. Th...

EUVD-2026-45600

In the Linux kernel, the following vulnerability has been resolved: net: shaper: rework the VALID marking again Recent commit changed the semantics from NOTVALID to VALID. I didn't realize that the flags are not stored atomically with the entry in XArray. There's still a race of reader observing ...

CVE-2026-64027 net: shaper: rework the VALID marking (again)

In the Linux kernel, the following vulnerability has been resolved: net: shaper: rework the VALID marking again Recent commit changed the semantics from NOTVALID to VALID. I didn't realize that the flags are not stored atomically with the entry in XArray. There's still a race of reader observing ...

CVE-2026-64027

In the Linux kernel, the following vulnerability has been resolved: net: shaper: rework the VALID marking again Recent commit changed the semantics from NOTVALID to VALID. I didn't realize that the flags are not stored atomically with the entry in XArray. There's still a race of reader observing ...

CVE-2026-64027

The CVE-2026-64027 issue affects the Linux kernel net: shaper component (XArray-based marking of entries). A race occurs when a reader observes a VALID mark is later invalidated by a writer reusing a slot, potentially leading to a use-after-free if net_shaper_rollback() frees entries without obse...

CVE-2026-64027 net: shaper: rework the VALID marking (again)

In the Linux kernel, the following vulnerability has been resolved: net: shaper: rework the VALID marking again Recent commit changed the semantics from NOTVALID to VALID. I didn't realize that the flags are not stored atomically with the entry in XArray. There's still a race of reader observing ...

PT-2026-61371

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the network shaper component where the net shaper nl group doit function fails to deduplicate NET SHAPER A LEAVES entries. If a user provides the same leaf handle multip...

PT-2026-61344

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the network shaper component due to the non-atomic storage of flags within the XArray. A reader may observe a VALID mark for a slot but be interrupted before...