16398 matches found
CVE-2026-68117
A flaw was found in the Linux kernel's TIPC Transparent Inter-Process Communication protocol. A local attacker could exploit this vulnerability by repeatedly creating and failing to insert new sockets, causing the tipcskcreate function to leave a dangling pointer to a freed socket object. This...
CVE-2026-73214
Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, dtlsserverinputhandler and createnewconnectedudpsocket in src/apps/relay/dtlslistener.c retain OpenSSL dtls1reassemblefragment state for a 35-byte fragmented ClientHello declaring a 650,000-byte handshake before...
CVE-2026-68397
A flaw was found in the Linux kernel's net/iucv module. The afiucvhsrcv function fails to properly manage socket references. This allows a local attacker to trigger a use-after-free vulnerability by concurrently closing a socket while it is being processed. Successful exploitation can lead to a...
CVE-2026-68399
A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component, specifically within the socket cloning mechanism. When a new socket is created and its cloning process fails prematurely, the new socket's BPF local storage may incorrectly reference the parent socket's storage. This can...
CVE-2026-68161
A flaw was found in the Linux kernel's SCTP Stream Control Transmission Protocol implementation. When a network namespace netns is torn down, the associated SCTP UDP User Datagram Protocol tunnel sockets are not properly closed. This oversight can lead to a resource leak, potentially resulting in...
CVE-2026-68387
A flaw was found in the Linux kernel's Controller Area Network CAN raw socket implementation. A local attacker could exploit a race condition in the rawsetsockopt function. This occurs due to insufficient locking during read-modify-write operations on a shared bitfield when modifying socket flags...
CVE-2026-73070
Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserveraccept, causing descriptors to overflow fdset structures in src/channel.c and fixed-size struct pollfd arrays in src/osunix.c,...
AZL-95565 CVE-2026-73070 affecting package vim for versions less than 9.2.0957-1
Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserveraccept, causing descriptors to overflow fdset structures in src/channel.c and fixed-size struct pollfd arrays in src/osunix.c,...
CVE-2026-73070
Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserveraccept, causing descriptors to overflow fdset structures in src/channel.c and fixed-size struct pollfd arrays in src/osunix.c,...
CVE-2026-73070 Vim: Stack Buffer Overflow in the Vim Socket Server
Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserveraccept, causing descriptors to overflow fdset structures in src/channel.c and fixed-size struct pollfd arrays in src/osunix.c,...
CVE-2026-73070 Vim: Stack Buffer Overflow in the Vim Socket Server
Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserveraccept, causing descriptors to overflow fdset structures in src/channel.c and fixed-size struct pollfd arrays in src/osunix.c,...
EUVD-2026-56222
Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserveraccept, causing descriptors to overflow fdset structures in src/channel.c and fixed-size struct pollfd arrays in src/osunix.c,...
CVE-2026-73070 Vim: Stack Buffer Overflow in the Vim Socket Server
Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserveraccept, causing descriptors to overflow fdset structures in src/channel.c and fixed-size struct pollfd arrays in src/osunix.c,...
CVE-2026-68386
A flaw was found in the Linux kernel. A local attacker with BPF program capabilities could exploit a vulnerability in the BPF sockmap feature. This occurs when a BPF program increments the reference count of an unbound UDP socket, and the socket is subsequently bound. This sequence of events caus...
CVE-2026-68379
A flaw was found in the Linux kernel's TCP implementation. A reference leak in TIMEWAIT sockets can occur upon a PSP Policy Security Policy failure in both IPv4 and IPv6 receive paths. This vulnerability can lead to a memory leak of tcptwbucket structures, potentially resulting in a Denial of...
tipc: clear sock->sk on the failed-insert path in tipc_sk_create()
...
net: qrtr: restrict socket creation to the initial network namespace
...
bpf, sockmap: Reject unhashed UDP sockets on sockmap update
...
