13348 matches found
The vulnerability of the skb_segment_list() function in the net/core/skbuff.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the skbsegmentlist function in the net/core/skbuff.c module of the Linux kernel is related to resource exhaustion. Exploiting this vulnerability can allow an attacker to cause a service failure...
Stored DOM-Based Cross-Site Scripting
wwbn/avideo is vulnerable to Stored DOM-Based Cross-Site Scripting. The vulnerability is due to improper validation and sanitization of the attacker-controlled webSocketSelfURI and pagetitle parameters in the YPTSocket plugin, which are stored and later rendered into the DOM using $.append withou...
net: mvpp2: refill RX buffers before XDP or skb use
...
netdevsim: zero initialize struct iphdr in dummy sk_buff
...
bpf, sockmap: Fix af_unix null-ptr-deref in proto update
...
bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path
...
bpf, sockmap: Fix af_unix iter deadlock
...
net: tls: fix strparser anchor skb leak on offload RX setup failure
...
udp: clear skb->dev before running a sockmap verdict
...
net: skbuff: fix missing zerocopy reference in pskb_carve helpers
...
vsock/vmci: fix sk_ack_backlog leak on failed handshake
...
Bluetooth: RFCOMM: validate skb length in MCC handlers
...
tcp: restrict SO_ATTACH_FILTER to priv users
...
net: openvswitch: fix possible kfree_skb of ERR_PTR
...
neigh: let neigh_xmit take skb ownership
...
netfilter: nf_queue: hold bridge skb->dev while queued
...
SUSE CVE-2026-52974
In the Linux kernel, the following vulnerability has been resolved: net: tls: fix strparser anchor skb leak on offload RX setup failure When tlssetdeviceoffloadrx fails at tlsdevadd, the error path calls tlsswfreeresourcesrx to clean up the SW context that was initialized by tlssetswoffload. This...
SUSE CVE-2026-53033
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Take state lock for afunix iter When a BPF iterator program updates a sockmap, there is a race condition in unixstreambpfupdateproto where the peer pointer can become stale1 during a state transition TCPESTABLISHED ...
GHSA-JG62-J5H6-8MPQ Nezha Monitoring: Unbounded WebSocket Streams — Resource Exhaustion DoS
Description The Nezha dashboard exposes two endpoints that create long-lived WebSocket streams to monitored agents: - POST /api/v1/terminal → createTerminal terminal.go:27-67 - POST /api/v1/file → createFM fm.go:28-67 Both call rpc.NezhaHandlerSingleton.CreateStreamstreamId, ... which inserts a...
CVE-2026-48936
A flaw was found in Node.js. The Node.js Permission API can allow a local server to be started through a Unix domain socket, even when the --allow-net permission is not explicitly granted. This bypasses intended security restrictions, potentially leading to unintended local network exposure or...