Lucene search
K

20 matches found

Microsoft CVE
Microsoft CVE
added 2026/05/28 8:12 a.m.9 views

net: strparser: fix skb_head leak in strp_abort_strp()

...

7.5CVSS5.4AI score0.00501EPSS
Exploits0
NVD
NVD
added 2026/05/27 2:17 p.m.13 views

CVE-2026-46102

In the Linux kernel, the following vulnerability has been resolved: net: strparser: fix skbhead leak in strpabortstrp When the stream parser is aborted, for example after a message assembly timeout, it can still hold a reference to a partially assembled message in strp-skbhead. That skb is not...

7.5CVSS0.00501EPSS
Exploits0References8
ATTACKERKB
ATTACKERKB
added 2026/05/27 12:59 p.m.6 views

CVE-2026-46102

In the Linux kernel, the following vulnerability has been resolved: net: strparser: fix skbhead leak in strpabortstrp When the stream parser is aborted, for example after a message assembly timeout, it can still hold a reference to a partially assembled message in strp-skbhead. That skb is not...

7.5CVSS5.7AI score0.00501EPSS
Exploits0References9Affected Software1
Debian CVE
Debian CVE
added 2026/05/27 12:59 p.m.10 views

CVE-2026-46102

In the Linux kernel, the following vulnerability has been resolved: net: strparser: fix skbhead leak in strpabortstrp When the stream parser is aborted, for example after a message assembly timeout, it can still hold a reference to a partially assembled message in strp-skbhead. That skb is not...

7.5CVSS5.7AI score0.00501EPSS
Exploits0
CVE
CVE
added 2026/05/27 12:59 p.m.26 views

CVE-2026-46102

The CVE-2026-46102 issue affects the Linux kernel network stream parser (net: strparser). When the stream parser is aborted (e.g., after a message assembly timeout), the partially assembled message referenced by strp->skb_head is not released in strp_abort_strp(), causing a memory leak that co...

7.5CVSS5.8AI score0.00501EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.11 views

PT-2026-43970

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the stream parser when it is aborted, such as after a message assembly timeout. The strp abort strp function fails to release the reference to a partially assembl...

9.8CVSS6AI score0.00531EPSS
Exploits0References366
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.4 views

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: kcm: An annotation was added for the data-race around kcm-rxwait. kcm-rxpsock can be accessed without a read lock in kcmrfree. The read and write operations were also updated accordingly. syzbot reported: BUG: KCSAN: A data-ra...

5.5CVSS5.7AI score0.00145EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/04/17 12:0 a.m.4 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007528)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007528 advisory. In the Linux kernel, the following vulnerability has been resolved: kcm: annotate data-races around kcm-rxwait kcm-rxpsock can be read locklessly in kcmrfree. Annota...

5.5CVSS5.8AI score0.00145EPSS
Exploits0References4
AstraLinux
AstraLinux
added 2025/11/01 10:54 a.m.3 views

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fixed a panic that occurred when calling skblinearize. The panic can be reproduced by executing the command: ./bench sockmap -c 2 -p 1 -a --rx-verdict-ingress --rx-strp 100000 A kernel panic was then captured: '''...

5.5CVSS6.2AI score0.00138EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/10/24 11:35 p.m.1 views

SUSE CVE-2025-38165

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix panic when calling skblinearize The panic can be reproduced by executing the command: ./bench sockmap -c 2 -p 1 -a --rx-verdict-ingress --rx-strp 100000 Then a kernel panic was captured: ''' 657.460555 kernel BU...

5.5CVSS6.4AI score0.00138EPSS
Exploits0References22
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-55590

Malicious code in bioql PyPI...

6.3AI score0.00145EPSS
Exploits0References9
Tenable Nessus
Tenable Nessus
added 2025/09/17 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2022-50265

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: kcm: annotate data-races around kcm-rxwait kcm-rxpsock can be read locklessly in kcmrfree...

5.5CVSS5.8AI score0.00145EPSS
Exploits0References2
NVD
NVD
added 2025/09/15 3:15 p.m.4 views

CVE-2022-50265

In the Linux kernel, the following vulnerability has been resolved: kcm: annotate data-races around kcm-rxwait kcm-rxpsock can be read locklessly in kcmrfree. Annotate the read and writes accordingly. syzbot reported: BUG: KCSAN: data-race in kcmrcvstrparser / kcmrfree write to 0xffff88810784e3d0...

5.5CVSS0.00145EPSS
Exploits0References8
CVE
CVE
added 2025/09/15 2:45 p.m.18 views

CVE-2022-50291

CVE-2022-50291 pertains to the Linux kernel KCM subsystem. Connected advisories describe a data-race in kcm_rfree() related to kcm->rx_psock and an analogous race for kcm->rx_wait, fixed by annotating reads/writes around these fields. The patches address lockless reads in kcm_rfree and ensu...

5.5CVSS6AI score0.00146EPSS
Exploits0References8Affected Software1
Cvelist
Cvelist
added 2025/09/15 2:21 p.m.4 views

CVE-2022-50265 kcm: annotate data-races around kcm->rx_wait

In the Linux kernel, the following vulnerability has been resolved: kcm: annotate data-races around kcm-rxwait kcm-rxpsock can be read locklessly in kcmrfree. Annotate the read and writes accordingly. syzbot reported: BUG: KCSAN: data-race in kcmrcvstrparser / kcmrfree write to 0xffff88810784e3d0...

0.00145EPSS
Exploits0References8
OSV
OSV
added 2025/07/03 9:15 a.m.0 views

DEBIAN-CVE-2025-38165

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix panic when calling skblinearize The panic can be reproduced by executing the command: ./bench sockmap -c 2 -p 1 -a --rx-verdict-ingress --rx-strp 100000 Then a kernel panic was captured: ''' 657.460555 kernel BU...

5.5CVSS5.5AI score0.00138EPSS
Exploits0References1
OSV
OSV
added 2025/07/03 9:15 a.m.2 views

AZL-64565 CVE-2025-38165 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix panic when calling skblinearize The panic can be reproduced by executing the command: ./bench sockmap -c 2 -p 1 -a --rx-verdict-ingress --rx-strp 100000 Then a kernel panic was captured: ''' 657.460555 kernel BU...

5.5CVSS5.6AI score0.00138EPSS
Exploits0References1
OSV
OSV
added 2025/07/03 9:15 a.m.1 views

UBUNTU-CVE-2025-38165

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix panic when calling skblinearize The panic can be reproduced by executing the command: ./bench sockmap -c 2 -p 1 -a --rx-verdict-ingress --rx-strp 100000 Then a kernel panic was captured: ''' 657.460555 kernel BU...

5.5CVSS6AI score0.00138EPSS
Exploits0References40
Cvelist
Cvelist
added 2025/07/03 8:36 a.m.6 views

CVE-2025-38165 bpf, sockmap: Fix panic when calling skb_linearize

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix panic when calling skblinearize The panic can be reproduced by executing the command: ./bench sockmap -c 2 -p 1 -a --rx-verdict-ingress --rx-strp 100000 Then a kernel panic was captured: ''' 657.460555 kernel BU...

0.00138EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/04/07 12:0 a.m.1 views

PT-2025-27750

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A panic in the Linux kernel can be triggered by executing a specific command, resulting in a kernel bug. The issue originates from the assertion BUG ONskb sharedskb in skb linearize. A...

5.5CVSS6.5AI score0.00138EPSS
Exploits0
Rows per page
Query Builder