36 matches found
DiagSpill
DiagSpill CVE-2026-74469 Writeup !WARNING The PoC is provided solely to help defenders, maintainers, and authorized security teams validate patches, mitigations, detections, and exposure on systems they own or are explicitly authorized to test. You are solely responsible for ensuring that your us...
DEBIAN-CVE-2026-99123
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: validate packet source for connected sockets virtiotransportrecvpkt looks up sockets first by the full source and destination tuple, then by destination only in the bound table. The fallback is needed for listening...
CVE-2026-99123
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: validate packet source for connected sockets virtiotransportrecvpkt looks up sockets first by the full source and destination tuple, then by destination only in the bound table. The fallback is needed for listening...
EUVD-2026-111875
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: validate packet source for connected sockets virtiotransportrecvpkt looks up sockets first by the full source and destination tuple, then by destination only in the bound table. The fallback is needed for listening...
CVE-2026-99123 vsock/virtio: validate packet source for connected sockets
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: validate packet source for connected sockets virtiotransportrecvpkt looks up sockets first by the full source and destination tuple, then by destination only in the bound table. The fallback is needed for listening...
CVE-2026-99123
The Linux kernel contains a vulnerability in the vsock/virtio transport where the virtio_transport_recv_pkt() function fails to properly validate the source address of incoming packets for connected sockets. Because sockets remain in the bound table after a connection is established, the system c...
Linux Distros Unpatched Vulnerability : CVE-2026-99123
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vsock/virtio: validate packet source for connected sockets virtiotransportrecvpkt looks up sockets first by the full source and destination tuple, then by...
kernel: sctp: diag: reject stale associations in dump_one path
A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP diagnostics. When performing a socket diagnostic sockdiag lookup, the system may attempt to access memory related to an SCTP association that has already been freed. This can lead to an out-of-bounds read from...
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: sctp: diag: reject stale associations in dumpone path The SCTP exact sockdiag lookup can hold a transport reference, block on locksocksk, and then resume after sctpassociationfree has marked the association dead and freed its bin...
Exploit for CVE-2026-74469
⚡ CVE-2026-74469 — DiagSpill Linux Kernel SCTP Peer T...
DiagSpill
DiagSpill CVE-2026-74469 Writeuphttps://heyitsas.im/post...
kernel: sctp: diag: reject stale associations in dump_one path
A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP diagnostics. When performing a socket diagnostic sockdiag lookup, the system may attempt to access memory related to an SCTP association that has already been freed. This can lead to an out-of-bounds read from...
kernel: sctp: diag: reject stale associations in dump_one path
A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP diagnostics. When performing a socket diagnostic sockdiag lookup, the system may attempt to access memory related to an SCTP association that has already been freed. This can lead to an out-of-bounds read from...
kernel: sctp: diag: reject stale associations in dump_one path
A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP diagnostics. When performing a socket diagnostic sockdiag lookup, the system may attempt to access memory related to an SCTP association that has already been freed. This can lead to an out-of-bounds read from...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100132)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100132 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: diag: reject stale associations in dumpone path The SCTP exact sockdiag lookup can hold a...
SUSE CVE-2026-74469
In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctpassocaddpeer increments the association's 16-bit transportcount for every new unique peer. Adding the 65,536th transport wraps the count to zero. SCTP sockdiag uses transportcount t...
AZL-96329 CVE-2026-74469 affecting package kernel for versions less than 6.6.152.1-1
In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctpassocaddpeer increments the association's 16-bit transportcount for every new unique peer. Adding the 65,536th transport wraps the count to zero. SCTP sockdiag uses transportcount t...
CVE-2026-74469
In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctpassocaddpeer increments the association's 16-bit transportcount for every new unique peer. Adding the 65,536th transport wraps the count to zero. SCTP sockdiag uses transportcount t...
CVE-2026-74469
In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctpassocaddpeer increments the association's 16-bit transportcount for every new unique peer. Adding the 65,536th transport wraps the count to zero. SCTP sockdiag uses transportcount t...
CVE-2026-74469 sctp: prevent peer transport count overflow
In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctpassocaddpeer increments the association's 16-bit transportcount for every new unique peer. Adding the 65,536th transport wraps the count to zero. SCTP sockdiag uses transportcount t...