CVE-2026-4588

The CVE affects kalcaddle kodbox 1.64, specifically the Site-level API key Handler via the function shareSafeGroup in /workspace/source-code/app/controller/explorer/shareOut.class.php. The root cause is manipulation of the argument sk which leads to the use of a hard-coded cryptographic key. The ...

PT-2026-39072

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A divide-by-zero exception occurs in the tipc sk filter connect function. A user can set the conn timeout variable to a value between 0 and 3 using setsockoptTIPC CONN TIMEOUT. When a SY...

CVE-2026-20016

creationtimestamp| type| source ---|---|--- 2026-03-04 20:43:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgb5jqlddb2n...

CVE-2021-35485

creationtimestamp| type| source ---|---|--- 2026-03-03 20:15:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg6liq3m342v...

CVE-2026-29093

creationtimestamp| type| source ---|---|--- 2026-03-03 16:21:28+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-xxpw-32hf-q8v9 2026-03-06 04:00:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgeggsufiv2n 2026-03-06 08:15:28+00:00| seen|...

The vulnerability of SK Hynix’s DDR5 RAM modules, related to improper cleaning or release of resources, allows attackers to execute a Rowhammer-type attack.

The vulnerability of SK Hynix’s DDR5 memory modules is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to perform a Rowhammer attack alter data in memory cells by repeatedly accessing the same memory block over short periods of time...

UBUNTU-CVE-2026-23120

In the Linux kernel, the following vulnerability has been resolved: l2tp: avoid one data-race in l2tptunneldelwork We should read sk-sksocket only when dealing with kernel sockets. syzbot reported the following data-race: BUG: KCSAN: data-race in l2tptunneldelwork / skcommonrelease write to...

AZL-75150 CVE-2025-71148 affecting package kernel for versions less than 6.6.121.1-1

In the Linux kernel, the following vulnerability has been resolved: net/handshake: restore destructor on submit failure handshakereqsubmit replaces sk-skdestruct but never restores it when submission fails before the request is hashed. handshakeskdestruct then returns early and the original...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004875)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004875 advisory. In the Linux kernel, the following vulnerability has been resolved: kcm: fix strpinit order and cleanup strpinit is called just a few lines above this csk-skuserdata...

Azure Linux 3.0 Security Update: kernel (CVE-2024-36972)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36972 advisory. - In the Linux kernel, the following vulnerability has been resolved: afunix: Update unixsksk-oobskb under...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003628)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003628 advisory. In skclonelock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003846)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003846 advisory. In the Linux kernel before 5.5.8, getrawsocket in drivers/vhost/net.c lacks validation of an skfamily field, which might allow attackers to trigger kernel stack...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000506)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000506 advisory. In the Linux kernel before 5.5.8, getrawsocket in drivers/vhost/net.c lacks validation of an skfamily field, which might allow attackers to trigger kernel stack...

CVE-2025-39484

creationtimestamp| type| source ---|---|--- 2026-01-05 17:17:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbowyjoq472u 2026-01-05 17:18:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbowztoynb2e 2026-01-05 17:19:17+00:00| seen|...

PT-2026-27667

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data race occurs in the network subsystem when skmsg or other layers modify the sk data ready and sk write space pointers while other CPUs read them concurrently. Recommendations At th...

CVE-2023-54218

In the Linux kernel, the following vulnerability has been resolved: net: Fix load-tearing on sk-skstamp in sockrecvcmsgs. KCSAN found a data race in sockrecvcmsgs where the read access to sk-skstamp needs READONCE. BUG: KCSAN: data-race in packetrecvmsg / packetrecvmsg write marked to...

SUSE CVE-2023-54218

In the Linux kernel, the following vulnerability has been resolved: net: Fix load-tearing on sk-skstamp in sockrecvcmsgs. KCSAN found a data race in sockrecvcmsgs where the read access to sk-skstamp needs READONCE. BUG: KCSAN: data-race in packetrecvmsg / packetrecvmsg write marked to...

SUSE CVE-2023-54226

In the Linux kernel, the following vulnerability has been resolved: afunix: Fix data races around sk-skshutdown. KCSAN found a data race around sk-skshutdown where unixreleasesock and unixshutdown update it under unixstatelock, OTOH unixpoll and unixdgrampoll read it locklessly. We need to annota...

Linux Distros Unpatched Vulnerability : CVE-2023-54226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afunix: Fix data races around sk-skshutdown. KCSAN found a data race around sk-skshutdown where unixreleasesock and unixshutdown update it under unixstatelock,...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993082)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993082 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix the sk-skforwardalloc warning of skstreamkillqueues When running testsockmap...