316 matches found
CVE-2026-111438
在 openGauss-server 的 src/common/backend/libpq/hba.cpp 中，复制连接认证存在访问控制绕过。hbagetauthmethod 在处理 HADR/SW 复制发送方时，不要求 isnodeinternalconnection，直接调用 checkhbareplication。checkhbareplication 仅按 replication 标记做弱匹配，缺少普通 checkhba 中的远程 trust 禁止等完整校验。因此，非内部网络的 HADR/SW 复制连接可绕过内部连接限制和完整 pghba...
CVE-2026-111438 check_hba_replication 认证与访问控制绕过
在 openGauss-server 的 src/common/backend/libpq/hba.cpp 中，复制连接认证存在访问控制绕过。hbagetauthmethod 在处理 HADR/SW 复制发送方时，不要求 isnodeinternalconnection，直接调用 checkhbareplication。checkhbareplication 仅按 replication 标记做弱匹配，缺少普通 checkhba 中的远程 trust 禁止等完整校验。因此，非内部网络的 HADR/SW 复制连接可绕过内部连接限制和完整 pghba...
EUVD-2026-104120
在 openGauss-server 的 src/common/backend/libpq/hba.cpp 中，复制连接认证存在访问控制绕过。hbagetauthmethod 在处理 HADR/SW 复制发送方时，不要求 isnodeinternalconnection，直接调用 checkhbareplication。checkhbareplication 仅按 replication 标记做弱匹配，缺少普通 checkhba 中的远程 trust 禁止等完整校验。因此，非内部网络的 HADR/SW 复制连接可绕过内部连接限制和完整 pghba...
CVE-2026-111438 check_hba_replication 认证与访问控制绕过
在 openGauss-server 的 src/common/backend/libpq/hba.cpp 中，复制连接认证存在访问控制绕过。hbagetauthmethod 在处理 HADR/SW 复制发送方时，不要求 isnodeinternalconnection，直接调用 checkhbareplication。checkhbareplication 仅按 replication 标记做弱匹配，缺少普通 checkhba 中的远程 trust 禁止等完整校验。因此，非内部网络的 HADR/SW 复制连接可绕过内部连接限制和完整 pghba...
CVE-2026-111438
A vulnerability exists in openGauss-server (specifically in src/common/backend/libpq/hba.cpp) where HADR/SW replication connections can bypass access controls. The function hba_getauthmethod() fails to require is_node_internal_connection() for replication senders, leading check_hba_replication() ...
CVE-2026-111438: Authentication Bypass Using an Alternate Path or Channel
在 openGauss-server 的 src/common/backend/libpq/hba.cpp 中，复制连接认证存在访问控制绕过。hbagetauthmethod 在处理 HADR/SW 复制发送方时，不要求 isnodeinternalconnection，直接调用 checkhbareplication。checkhbareplication 仅按 replication 标记做弱匹配，缺少普通 checkhba 中的远程 trust 禁止等完整校验。因此，非内部网络的 HADR/SW 复制连接可绕过内部连接限制和完整 pghba...
DEBIAN-CVE-2026-97569
In the Linux kernel, the following vulnerability has been resolved: bnxten: Prevent queue stop with deferred completions When the driver receives a burst of packets, it can mark a BD with the NOCMPL bit to defer completions. The expectation is that the last packet in the ring will have this bit...
CVE-2026-97569
In the Linux kernel, the following vulnerability has been resolved: bnxten: Prevent queue stop with deferred completions When the driver receives a burst of packets, it can mark a BD with the NOCMPL bit to defer completions. The expectation is that the last packet in the ring will have this bit...
UBUNTU-CVE-2026-97569
In the Linux kernel, the following vulnerability has been resolved: bnxten: Prevent queue stop with deferred completions When the driver receives a burst of packets, it can mark a BD with the NOCMPL bit to defer completions. The expectation is that the last packet in the ring will have this bit...
EUVD-2026-86877
In the Linux kernel, the following vulnerability has been resolved: bnxten: Prevent queue stop with deferred completions When the driver receives a burst of packets, it can mark a BD with the NOCMPL bit to defer completions. The expectation is that the last packet in the ring will have this bit...
CVE-2026-97569
The Linux kernel contains a vulnerability in the bnxt_en driver where a burst of packets can cause the queue to stop permanently. This occurs because the driver may defer completions for all packets in a small ring (
CVE-2026-97569 bnxt_en: Prevent queue stop with deferred completions
In the Linux kernel, the following vulnerability has been resolved: bnxten: Prevent queue stop with deferred completions When the driver receives a burst of packets, it can mark a BD with the NOCMPL bit to defer completions. The expectation is that the last packet in the ring will have this bit...
CVE-2026-97569 bnxt_en: Prevent queue stop with deferred completions
In the Linux kernel, the following vulnerability has been resolved: bnxten: Prevent queue stop with deferred completions When the driver receives a burst of packets, it can mark a BD with the NOCMPL bit to defer completions. The expectation is that the last packet in the ring will have this bit...
CVE-2026-97569: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: bnxten: Prevent queue stop with deferred completions When the driver receives a burst of packets, it can mark a BD with the NOCMPL bit to defer completions. The expectation is that the last packet in the ring will have this bit...
CVE-2026-97569
In the Linux kernel, the following vulnerability has been resolved: bnxten: Prevent queue stop with deferred completions When the driver receives a burst of packets, it can mark a BD with the NOCMPL bit to defer completions. The expectation is that the last packet in the ring will have this bit...
SUSE CVE-2026-80998
In the Linux kernel, the following vulnerability has been resolved: net: bnxt: ring the doorbell when SW USO exits early When a burst of packets is handed down to the driver, the driver defers the doorbell to the end by setting txr-kickpending = 1. The normal TX path handles this, but the SW USO...
PT-2026-92286
In gsa sw pk hash compare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
Linux Distros Unpatched Vulnerability : CVE-2026-80998
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: bnxt: ring the doorbell when SW USO exits early When a burst of packets is handed down ...
CVE-2026-80998
A flaw was found in the Linux kernel's bnxt network driver. When processing a burst of packets, the driver may fail to notify the network device ring the doorbell if the Software UDP Segmentation Offload SW USO path exits prematurely. This oversight can lead to a transmit TX queue stall, renderin...
DEBIAN-CVE-2026-80998
In the Linux kernel, the following vulnerability has been resolved: net: bnxt: ring the doorbell when SW USO exits early When a burst of packets is handed down to the driver, the driver defers the doorbell to the end by setting txr-kickpending = 1. The normal TX path handles this, but the SW USO...