CVE-2026-43139

A flaw was found in the Linux kernel's xfrm6 subsystem. This vulnerability occurs because the xfrm6getsaddr function does not properly check the return value of ipv6devgetsaddr. This oversight can result in an uninitialized source address being used, potentially leading to system instability or a...

EUVD-2026-27698

In the Linux kernel, the following vulnerability has been resolved: xfrm6: fix uninitialized saddr in xfrm6getsaddr xfrm6getsaddr does not check the return value of ipv6devgetsaddr. When ipv6devgetsaddr fails to find a suitable source address returns -EADDRNOTAVAIL, saddr-in6 is left uninitialize...

CVE-2026-43139

In the Linux kernel, the following vulnerability has been resolved: xfrm6: fix uninitialized saddr in xfrm6getsaddr xfrm6getsaddr does not check the return value of ipv6devgetsaddr. When ipv6devgetsaddr fails to find a suitable source address returns -EADDRNOTAVAIL, saddr-in6 is left uninitialize...

CVE-2026-43139 xfrm6: fix uninitialized saddr in xfrm6_get_saddr()

In the Linux kernel, the following vulnerability has been resolved: xfrm6: fix uninitialized saddr in xfrm6getsaddr xfrm6getsaddr does not check the return value of ipv6devgetsaddr. When ipv6devgetsaddr fails to find a suitable source address returns -EADDRNOTAVAIL, saddr-in6 is left uninitialize...

CVE-2026-43139

The CVE-2026-43139 entry concerns the Linux kernel xfrm6 subsystem. The issue arises in xfrm6_get_saddr() which does not check the return value of ipv6_dev_get_saddr(); when ipv6_dev_get_saddr() fails with -EADDRNOTAVAIL, saddr->in6 remains uninitialized and xfrm6_get_saddr() incorrectly retur...

CVE-2026-43139

In the Linux kernel, the following vulnerability has been resolved: xfrm6: fix uninitialized saddr in xfrm6getsaddr xfrm6getsaddr does not check the return value of ipv6devgetsaddr. When ipv6devgetsaddr fails to find a suitable source address returns -EADDRNOTAVAIL, saddr-in6 is left uninitialize...

CVE-2026-5335

creationtimestamp| type| source ---|---|--- 2026-05-04 10:26:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkzhinw5uy2v...

CVE-2026-42596

creationtimestamp| type| source ---|---|--- 2026-04-30 19:11:14+00:00| published-proof-of-concept| https://github.com/gotenberg/gotenberg/security/advisories/GHSA-4vmc-gm8v-m35h 2026-05-14 17:14:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mltcxjauzm2i 2026-05-17 18:01:12+00:0...

CVE-2026-7418

creationtimestamp| type| source ---|---|--- 2026-04-29 23:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mko7cbhulp2t 2026-04-30 00:26:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkoe37qfku2o...

FreeRTOS-Plus-TCP security vulnerabilities

FreeRTOS-Plus-TCP is an extensible, open-source TCP/IP stack designed for use with FreeRTOS. Security vulnerabilities existed in versions prior to V4.2.6 and V4.4.1 of FreeRTOS-Plus-TCP. These vulnerabilities stemmed from insufficient data packet validation, allowing adjacent network participants...

CVE-2026-31685 netfilter: ip6t_eui64: reject invalid MAC header for all packets

In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6teui64: reject invalid MAC header for all packets eui64mt6 derives a modified EUI-64 from the Ethernet source address and compares it with the low 64 bits of the IPv6 source address. The existing guard only rejects ...

CVE-2026-5358

creationtimestamp| type| source ---|---|--- 2026-04-20 22:12:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxifteyxs2i 2026-04-21 21:25:58+00:00| seen| Telegram/zqh64O-3jGBNpD02e4IDQ2Ua8XH6cA6PRqW3q0FpcVLnRBs...

CVE-2026-40170

creationtimestamp| type| source ---|---|--- 2026-04-16 23:18:23+00:00| published-proof-of-concept| Telegram/x6U1CUbtpfWdw00zGhzow4OOkK7AiEHUVbiM6o3SMYH6zs0 2026-04-17 00:03:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjnmqlsfem26 2026-04-17 17:12:30+00:00| seen|...

CVE-2026-40261 Composer has Command Injection via Malicious Perforce Reference

Composer is a dependency manager for PHP. Versions 1.0 through 2.2.26 and 2.3 through 2.9.5 contain a command injection vulnerability in the Perforce::syncCodeBase method, which appends the $sourceReference parameter to a shell command without proper escaping, and additionally in the...

CVE-2026-5397

creationtimestamp| type| source ---|---|--- 2026-04-15 08:27:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjjhyp6njw2t 2026-04-15 17:03:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjketdrscl2a 2026-04-15 17:21:32+00:00| seen|...

CVE-2019-25701

creationtimestamp| type| source ---|---|--- 2026-04-12 14:10:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjcjqmowb72w 2026-04-17 18:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mjpkyapp3a2n...

CVE-2026-6126

creationtimestamp| type| source ---|---|--- 2026-04-12 12:44:53+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mjcexr3jzj22 2026-04-12 13:15:23+00:00| published-proof-of-concept| Telegram/MAArghuJr9V3EBWp3NdbOgL0SAw37FjqzKr6qVSads5vX0...

CVE-2026-5053

creationtimestamp| type| source ---|---|--- 2026-04-11 02:29:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj6s42y42p23 2026-04-11 03:21:45+00:00| seen| Telegram/oNJqzE-05Zhzc8NPQW-z5MMZ2uUFxP7FYrJiMTOKneUM6w 2026-04-16 09:07:08+00:00| seen|...

CVE-2026-39972

creationtimestamp| type| source ---|---|--- 2026-04-09 19:22:33+00:00| seen| Telegram/HFSRmPQIuJm0mhlgKTjgnUZc9IKWtHrGIbUWbiDZawdQwcQ 2026-04-09 19:22:59+00:00| published-proof-of-concept| Telegram/k5gHuzl44UiSjs6WvJKw2ZASZi-uE6KFE3zi6HenZzrhwHY 2026-04-09 19:38:45+00:00| seen|...

kernel: macvlan: fix error recovery in macvlan_common_newlink()

A use-after-free vulnerability was found in the macvlan driver. When creating a macvlan interface in source mode fails after the source MAC has been added to the hash table e.g., due to an invalid interface name, the hash entry still references the freed netdevice structure. Subsequent packets...