67 matches found
SUSE CVE-2026-74257
In the Linux kernel, the following vulnerability has been resolved: sockmap: Fix use-after-free in udpbpfrecvmsg syzbot reported use-after-free of struct skmsg in skmsgrecvmsg. 0 skmsgrecvmsg peeks skmsg from psock-ingressmsg under a lock, but its processing is lockless. Thus, skmsgrecvmsg must b...
SUSE CVE-2026-74610
In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does not set fullrecord, so the record is left full and unpushed. A later...
CVE-2026-74610
In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does not set fullrecord, so the record is left full and unpushed. A later...
AZL-97047 CVE-2026-74610 affecting package kernel for versions less than 6.6.152.1-1
In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does not set fullrecord, so the record is left full and unpushed. A later...
UBUNTU-CVE-2026-74610
In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does not set fullrecord, so the record is left full and unpushed. A later...
CVE-2026-74610
In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does not set fullrecord, so the record is left full and unpushed. A later...
CVE-2026-74610 tls: don't leave a full plaintext sk_msg ring unpushed
In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does not set fullrecord, so the record is left full and unpushed. A later...
CVE-2026-74610 tls: don't leave a full plaintext sk_msg ring unpushed
In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does not set fullrecord, so the record is left full and unpushed. A later...
CVE-2026-74610
CVE-2026-74610 is a kernel NULL pointer dereference in the Linux kernel's TLS ULP (Upper Layer Protocol) implementation. The root cause is in tls_sw_sendmsg_locked(): when the copy path fills the plaintext sk_msg ring, the full_record flag is not set, leaving the record unpushed. A subsequent spl...
EUVD-2026-64547
In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does not set fullrecord, so the record is left full and unpushed. A later...
CVE-2026-74610: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does not set fullrecord, so the record is left full and unpushed. A later...
Linux Distros Unpatched Vulnerability : CVE-2026-74610
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does no...
CVE-2026-74610: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does not set fullrecord, so the record is left full and unpushed. A later...
CVE-2026-74257
A flaw was found in the Linux kernel's sockmap feature. The udpbpfrecvmsg function, responsible for handling message reception, lacks proper serialization for skmsg objects. This allows multiple threads to access and modify the same skmsg object concurrently, resulting in a use-after-free...
CVE-2026-74256
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: fix integer overflow in bpfmsgpopdata bounds check start and len are u32, so u64 last = start + len; evaluates start + len in 32-bit and wraps before storing it in last. The bounds check if start = offset + l || las...
AZL-96573 CVE-2026-74257 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: sockmap: Fix use-after-free in udpbpfrecvmsg syzbot reported use-after-free of struct skmsg in skmsgrecvmsg. 0 skmsgrecvmsg peeks skmsg from psock-ingressmsg under a lock, but its processing is lockless. Thus, skmsgrecvmsg must b...
CVE-2026-74257
In the Linux kernel, the following vulnerability has been resolved: sockmap: Fix use-after-free in udpbpfrecvmsg syzbot reported use-after-free of struct skmsg in skmsgrecvmsg. 0 skmsgrecvmsg peeks skmsg from psock-ingressmsg under a lock, but its processing is lockless. Thus, skmsgrecvmsg must b...
CVE-2026-72041
In the Linux kernel, the following vulnerability has been resolved: espintcp: use skmsgfreepartial to fix partial send skmsgfreepartial ensures consistency of the skmsg at every iteration, without having to manually handle uncharges and offsets. This simplifies the code, and fixes some bugs in...
UBUNTU-CVE-2026-72041
In the Linux kernel, the following vulnerability has been resolved: espintcp: use skmsgfreepartial to fix partial send skmsgfreepartial ensures consistency of the skmsg at every iteration, without having to manually handle uncharges and offsets. This simplifies the code, and fixes some bugs in...
EUVD-2026-58999
In the Linux kernel, the following vulnerability has been resolved: espintcp: use skmsgfreepartial to fix partial send skmsgfreepartial ensures consistency of the skmsg at every iteration, without having to manually handle uncharges and offsets. This simplifies the code, and fixes some bugs in...