POC-2020-8558

Overview CVE-2020-8558 is a Kubernetes venerability which was published because kube-proxy unexpectedly makes localhost-bound host services available to others on the network. I place the emphasis on unexpectedly because this vulnerability is due to a design flaw oversight, not an implementation...

opnsense-tunables-loader

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · opnsense-tunables-loader Write-up: https://abraxaslabs.tech/research/opnsense-tunables-loader opnsense-tunables-loader Class: Config line injection Reach: Remote OPNsense core 26.7.6 a842fe48 - opnsense.org System:...

kernel: sctp: avoid auth_enable sysctl UAF during netns teardown

A flaw was found in the Stream Control Transmission Protocol SCTP implementation within the Linux kernel. This Use-After-Free UAF vulnerability occurs during network namespace netns teardown. A local attacker with the ability to open a sysctl file could exploit this flaw, potentially leading to a...

webhook-cve-2022-0811

webhook-cve-2022-0811 This is a really simple webhook that just blocks pod creation if malicious sysctl values are configured. Build go test CGOENABLED=0 GOOS=linux GOARCH=amd64 GO111MODULE=on go build Build image an deploy in Minikube Start minikube: minikube start minikube addons enable registr...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes Invalid net.ipv4.tcpreordering values are rejected before they reach the TCP socket state. The sysctl is stored as an int but copied into the u32 tp-reordering fie...

kernel: sctp: avoid auth_enable sysctl UAF during netns teardown

A flaw was found in the Stream Control Transmission Protocol SCTP implementation within the Linux kernel. This Use-After-Free UAF vulnerability occurs during network namespace netns teardown. A local attacker with the ability to open a sysctl file could exploit this flaw, potentially leading to a...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.19. It arises when a failure in setting up mqueue or ipc sysctl leads to the use of the regular mntput function to unmount a long-lived mount, resulting in leaks of the mount and mqueue superblocks...

Linux Distros Unpatched Vulnerability : CVE-2026-98530

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: kprobes: Fix permanent hang when flushing the kprobe optimizer Writing 0 to...

Linux Distros Unpatched Vulnerability : CVE-2026-98434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: sysctl: Check range in procdointvecmsjiffiesminmax Add the range check to...

kernel: sctp: avoid auth_enable sysctl UAF during netns teardown

A flaw was found in the Stream Control Transmission Protocol SCTP implementation within the Linux kernel. This Use-After-Free UAF vulnerability occurs during network namespace netns teardown. A local attacker with the ability to open a sysctl file could exploit this flaw, potentially leading to a...

CVE-2026-98434

A flaw was found in the Linux kernel. Due to a missing range validation check in the sysctl subsystem, configured minimum and maximum limits were not enforced during specific millisecond-to-jiffies conversions. A local user with permission to modify kernel parameters could provide out-of-bounds...

UBUNTU-CVE-2026-98434

In the Linux kernel, the following vulnerability has been resolved: sysctl: Check range in procdointvecmsjiffiesminmax Add the range check to doprocintconvmsjiffiesminmax that commit d174174c6776 "sysctl: replace SYSCTLINTCONVCUSTOM macro with functions" incorrectly removed...

CVE-2026-98434

In the Linux kernel, the following vulnerability has been resolved: sysctl: Check range in procdointvecmsjiffiesminmax Add the range check to doprocintconvmsjiffiesminmax that commit d174174c6776 "sysctl: replace SYSCTLINTCONVCUSTOM macro with functions" incorrectly removed...

PT-2026-116653

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A range check was missing in the proc dointvec ms jiffies minmax function within the sysctl component. This occurred because a previous update to replace the SYSCTL INT CONV CUSTOM macro...

PT-2026-116749

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A permanent hang occurs when flushing the kprobe optimizer. Writing 0 to the /proc/sys/debug/kprobes-optimization endpoint while a kprobe is jump-optimized causes the writer to sleep...

Astra Linux – vulnerability in linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ip: Fixed data races around sysctlipprotsock. Sysctlipprotsock is accessed concurrently, and there is always a chance of a data race. Therefore, all readers and writers need some basic protection to prevent load/store tearing...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctltcpfastopen. While reading sysctltcpfastopen, it can be changed concurrently. Thus, we need to add READONCE to its readers...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: TCP: Fixed a data race around sysctltcpearlyretrans. When reading sysctltcpearlyretrans, it can be changed concurrently. Therefore, we need to add READONCE to its reader function...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: udp: Fix a data-race around sysctludpl3mdevaccept. While reading sysctludpl3mdevaccept, it can be changed concurrently. Thus, we need to add READONCE to its reader...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: TCP: Fixed a data race around sysctltcpprobeinterval. When reading sysctltcpprobeinterval, it can be changed concurrently. Therefore, we need to add READONCE to its reader function...