Linux Distros Unpatched Vulnerability : CVE-2026-68302

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - amt: re-read skb header pointers after every pull Several AMT receive and transmit paths cache a pointer into the skb head iphdr, ipv6hdr, ethhdr or the AMT...

CVE-2026-63924

In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh pointer after ipv6hopjumbo ipv6hopjumbo calls pskbtrimrcsum, which can change skb pointers. Let's recompute nh pointer to make sure any change won't mess things up...

CVE-2026-64113

In the Linux kernel, the following vulnerability has been resolved: ixgbevf: fix use-after-free in VEPA multicast source pruning ixgbevfcleanrxirq prunes frames whose source MAC matches the VF's own address VEPA multicast workaround by freeing the skb and continuing to the next descriptor:...

CVE-2026-63924

CVE-2026-63924 is a Linux kernel issue where in ipv6_hop_jumbo(), calling pskb_trim_rcsum() can change skb pointers. The fix recomputes the neighbor header (nh) pointer to ensure it remains correct after potential skb pointer changes, mitigating pointer misalignment risks. The vulnerability is de...

PT-2026-61174

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the airoha dev xmit function where the transmit loop reads fragment address and length during its final iteration. This occurs when the loop index equals skb shinfoskb-n...

SUSE CVE-2023-53384

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: avoid possible NULL skb pointer dereference In 'mwifiexhandleuaprxforward', always check the value returned by 'skbcopy' to avoid potential NULL pointer dereference in 'mwifiexuapqueuebridgedpkt', and drop original...

CVE-2023-53384

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: avoid possible NULL skb pointer dereference In 'mwifiexhandleuaprxforward', always check the value returned by 'skbcopy' to avoid potential NULL pointer dereference in 'mwifiexuapqueuebridgedpkt', and drop original...

CVE-2023-53384 wifi: mwifiex: avoid possible NULL skb pointer dereference

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: avoid possible NULL skb pointer dereference In 'mwifiexhandleuaprxforward', always check the value returned by 'skbcopy' to avoid potential NULL pointer dereference in 'mwifiexuapqueuebridgedpkt', and drop original...

CVE-2022-49858

The CVE-2022-49858 entry concerns the Linux kernel’s octeontx2-pf driver. A faulty SQE (Submission Queue Entry) threshold check based on HW-updated SQB count could allow submitting an SQE before the CQE for the previous one is processed in NAPI, causing loss of SKB pointers and a leak. The root c...

CVE-2021-47224

A vulnerability was found in the Linux kernel's lltemac driver, where the skb socket buffer may be improperly freed after use. This can lead to a use-after-free issue, as fragments of the skb can still be in use while attempting to free it, causing instability in the system during data...

CVE-2021-47224 net: ll_temac: Make sure to free skb when it is completely used

In the Linux kernel, the following vulnerability has been resolved: net: lltemac: Make sure to free skb when it is completely used With the skb pointer piggy-backed on the TX BD, we have a simple and efficient way to free the skb buffer when the frame has been transmitted. But in order to avoid...

CVE-2021-47224 net: ll_temac: Make sure to free skb when it is completely used

In the Linux kernel, the following vulnerability has been resolved: net: lltemac: Make sure to free skb when it is completely used With the skb pointer piggy-backed on the TX BD, we have a simple and efficient way to free the skb buffer when the frame has been transmitted. But in order to avoid...

CVE-2021-47013

In the Linux kernel, the following vulnerability has been resolved: net:emac/emac-mac: Fix a use after free in emacmactxbufsend In emacmactxbufsend, it calls emactxfilltpd..,skb,... If some error happens in emactxfilltpd, the skb will be freed via devkfreeskbskb in error branch of emactxfilltpd...

CVE-2006-2274

Linux SCTP lksctp before 2.6.17 allows remote attackers to cause a denial of service infinite recursion and crash via a packet that contains two or more DATA fragments, which causes an skb pointer to refer back to itself when the full message is reassembled, leading to infinite recursion in the...