Lucene search
+L

67 matches found

SUSE CVE
SUSE CVE
•added 2026/08/26 1:14 a.m.•7 views

SUSE CVE-2026-74257

In the Linux kernel, the following vulnerability has been resolved: sockmap: Fix use-after-free in udpbpfrecvmsg syzbot reported use-after-free of struct skmsg in skmsgrecvmsg. 0 skmsgrecvmsg peeks skmsg from psock-ingressmsg under a lock, but its processing is lockless. Thus, skmsgrecvmsg must b...

7.8CVSS7.1AI score0.00168EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/08/23 12:06 a.m.•20 views

SUSE CVE-2026-74610

In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does not set fullrecord, so the record is left full and unpushed. A later...

6.1CVSS5.7AI score0.00175EPSS
SaveExploits0References12
NVD
NVD
•added 2026/08/22 4:16 p.m.•25 views

CVE-2026-74610

In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does not set fullrecord, so the record is left full and unpushed. A later...

7.8CVSS0.00175EPSS
SaveExploits0References5
OSV
OSV
•added 2026/08/22 4:16 p.m.•14 views

AZL-97047 CVE-2026-74610 affecting package kernel for versions less than 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does not set fullrecord, so the record is left full and unpushed. A later...

7.8CVSS5.7AI score0.00175EPSS
SaveExploits0References1
OSV
OSV
•added 2026/08/22 4:16 p.m.•11 views

UBUNTU-CVE-2026-74610

In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does not set fullrecord, so the record is left full and unpushed. A later...

7.8CVSS5.7AI score0.00175EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
•added 2026/08/22 4:16 p.m.•12 views

CVE-2026-74610

In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does not set fullrecord, so the record is left full and unpushed. A later...

7.8CVSS5.7AI score0.00175EPSS
SaveExploits0References7
OSV
OSV
•added 2026/08/22 3:31 p.m.•36 views

CVE-2026-74610 tls: don't leave a full plaintext sk_msg ring unpushed

In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does not set fullrecord, so the record is left full and unpushed. A later...

7.8CVSS5.7AI score
SaveExploits0References8
Cvelist
Cvelist
•added 2026/08/22 3:31 p.m.•34 views

CVE-2026-74610 tls: don't leave a full plaintext sk_msg ring unpushed

In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does not set fullrecord, so the record is left full and unpushed. A later...

7.8CVSS0.00175EPSS
SaveExploits0References5
CVE
CVE
•added 2026/08/22 3:31 p.m.•72 views

CVE-2026-74610

CVE-2026-74610 is a kernel NULL pointer dereference in the Linux kernel's TLS ULP (Upper Layer Protocol) implementation. The root cause is in tls_sw_sendmsg_locked(): when the copy path fills the plaintext sk_msg ring, the full_record flag is not set, leaving the record unpushed. A subsequent spl...

7.8CVSS5.7AI score0.00175EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/22 3:31 p.m.•18 views

EUVD-2026-64547

In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does not set fullrecord, so the record is left full and unpushed. A later...

5.7AI score0.00175EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/22 12:00 a.m.•5 views

CVE-2026-74610: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does not set fullrecord, so the record is left full and unpushed. A later...

7.8CVSS5.7AI score0.00175EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/08/22 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-74610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does no...

7.8CVSS5.7AI score0.00175EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/22 12:00 a.m.•5 views

CVE-2026-74610: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does not set fullrecord, so the record is left full and unpushed. A later...

7.8CVSS5.7AI score0.00175EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/08/19 7:22 p.m.•11 views

CVE-2026-74257

A flaw was found in the Linux kernel's sockmap feature. The udpbpfrecvmsg function, responsible for handling message reception, lacks proper serialization for skmsg objects. This allows multiple threads to access and modify the same skmsg object concurrently, resulting in a use-after-free...

7.8CVSS7.1AI score0.00168EPSS
SaveExploits0References4
NVD
NVD
•added 2026/08/15 6:22 a.m.•13 views

CVE-2026-74256

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: fix integer overflow in bpfmsgpopdata bounds check start and len are u32, so u64 last = start + len; evaluates start + len in 32-bit and wraps before storing it in last. The bounds check if start = offset + l || las...

8.4CVSS0.00196EPSS
SaveExploits0References8
OSV
OSV
•added 2026/08/15 6:22 a.m.•23 views

AZL-96573 CVE-2026-74257 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: sockmap: Fix use-after-free in udpbpfrecvmsg syzbot reported use-after-free of struct skmsg in skmsgrecvmsg. 0 skmsgrecvmsg peeks skmsg from psock-ingressmsg under a lock, but its processing is lockless. Thus, skmsgrecvmsg must b...

7.8CVSS7.1AI score0.00168EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/08/15 6:22 a.m.•16 views

CVE-2026-74257

In the Linux kernel, the following vulnerability has been resolved: sockmap: Fix use-after-free in udpbpfrecvmsg syzbot reported use-after-free of struct skmsg in skmsgrecvmsg. 0 skmsgrecvmsg peeks skmsg from psock-ingressmsg under a lock, but its processing is lockless. Thus, skmsgrecvmsg must b...

7.8CVSS7.1AI score0.00168EPSS
SaveExploits0References11
NVD
NVD
•added 2026/08/15 6:21 a.m.•14 views

CVE-2026-72041

In the Linux kernel, the following vulnerability has been resolved: espintcp: use skmsgfreepartial to fix partial send skmsgfreepartial ensures consistency of the skmsg at every iteration, without having to manually handle uncharges and offsets. This simplifies the code, and fixes some bugs in...

9.8CVSS0.00755EPSS
SaveExploits0References8
OSV
OSV
•added 2026/08/15 6:21 a.m.•14 views

UBUNTU-CVE-2026-72041

In the Linux kernel, the following vulnerability has been resolved: espintcp: use skmsgfreepartial to fix partial send skmsgfreepartial ensures consistency of the skmsg at every iteration, without having to manually handle uncharges and offsets. This simplifies the code, and fixes some bugs in...

9.8CVSS6AI score0.00755EPSS
SaveExploits0References15
EUVD
EUVD
•added 2026/08/15 5:52 a.m.•15 views

EUVD-2026-58999

In the Linux kernel, the following vulnerability has been resolved: espintcp: use skmsgfreepartial to fix partial send skmsgfreepartial ensures consistency of the skmsg at every iteration, without having to manually handle uncharges and offsets. This simplifies the code, and fixes some bugs in...

5.9AI score0.00755EPSS
SaveExploits0References5
Rows per page
Query Builder