Lucene search
+L

1227 matches found

Tenable Nessus
Tenable Nessus
•added 2026/08/26 12:00 a.m.•13 views

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098898)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098898 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes Reject invalid...

7.1CVSS6AI score0.00178EPSS
SaveExploits0References4
AstraLinux
AstraLinux
•added 2026/08/24 10:19 a.m.•14 views

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Drivers: hv: vmbus: Disabled the option to deactivate sysctlrecordpanicmsg by default in isolated guests. hvpanicpage might contain information sensitive to guests; do not dump this information to Hyper-V by default in isolate...

7.1CVSS6.5AI score0.003EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/08/22 12:54 a.m.•14 views

SUSE CVE-2026-68290

In the Linux kernel, the following vulnerability has been resolved: rds: tcp: unregister sysctl before tearing down listen socket rdstcpexitnet frees the per-netns RDS TCP listen socket via rdstcpkillsock before unregistering the per-netns sysctl table. Since rdstcpskbufhandler derives the netns...

7.8CVSS5.6AI score0.0017EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/08/13 4:24 p.m.•7 views

SUSE CVE-2026-68162

In the Linux kernel, the following vulnerability has been resolved: sctp: avoid authenable sysctl UAF during netns teardown procsctpdoauth updates the SCTP control socket after changing net.sctp.authenable. The handler gets the per-net SCTP state from ctl-data, so an already opened sysctl file ca...

7CVSS5.4AI score0.00184EPSS
SaveExploits0References13
RedhatCVE
RedhatCVE
•added 2026/08/11 4:44 p.m.•18 views

CVE-2026-68290

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS TCP implementation. A race condition can occur during network namespace teardown, where a concurrent system control sysctl write operation attempts to access a socket that has already been freed. This use-after-free vulnerabilit...

7.8CVSS5.3AI score0.0017EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2026/08/11 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2026-68290

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rds: tcp: unregister sysctl before tearing down listen socket rdstcpexitnet frees the per-netns RDS TCP listen socket via rdstcpkillsock before unregistering th...

7.8CVSS5.9AI score0.0017EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/10 1:20 p.m.•12 views

CVE-2026-68290

In the Linux kernel, the following vulnerability has been resolved: rds: tcp: unregister sysctl before tearing down listen socket rdstcpexitnet frees the per-netns RDS TCP listen socket via rdstcpkillsock before unregistering the per-netns sysctl table. Since rdstcpskbufhandler derives the netns...

7.8CVSS0.0017EPSS
SaveExploits0References4
OSV
OSV
•added 2026/08/10 1:20 p.m.•12 views

DEBIAN-CVE-2026-68162

In the Linux kernel, the following vulnerability has been resolved: sctp: avoid authenable sysctl UAF during netns teardown procsctpdoauth updates the SCTP control socket after changing net.sctp.authenable. The handler gets the per-net SCTP state from ctl-data, so an already opened sysctl file ca...

7.8CVSS5.2AI score0.00184EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/10 1:20 p.m.•10 views

CVE-2026-68161

In the Linux kernel, the following vulnerability has been resolved: sctp: close UDP tunnel sockets during netns teardown procsctpdoudpport starts per-net SCTP UDP tunneling sockets when net.sctp.udpport is set, and stops/restarts them when the sysctl value changes. The netns exit path does not st...

9.8CVSS0.00671EPSS
SaveExploits0References5
OSV
OSV
•added 2026/08/10 1:20 p.m.•9 views

AZL-95120 CVE-2026-68162 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: sctp: avoid authenable sysctl UAF during netns teardown procsctpdoauth updates the SCTP control socket after changing net.sctp.authenable. The handler gets the per-net SCTP state from ctl-data, so an already opened sysctl file ca...

7.8CVSS5.8AI score0.00184EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/08/10 1:20 p.m.•15 views

CVE-2026-68290

In the Linux kernel, the following vulnerability has been resolved: rds: tcp: unregister sysctl before tearing down listen socket rdstcpexitnet frees the per-netns RDS TCP listen socket via rdstcpkillsock before unregistering the per-netns sysctl table. Since rdstcpskbufhandler derives the netns...

7.8CVSS5.5AI score0.0017EPSS
SaveExploits0References5
OSV
OSV
•added 2026/08/10 1:20 p.m.•9 views

UBUNTU-CVE-2026-68290

In the Linux kernel, the following vulnerability has been resolved: rds: tcp: unregister sysctl before tearing down listen socket rdstcpexitnet frees the per-netns RDS TCP listen socket via rdstcpkillsock before unregistering the per-netns sysctl table. Since rdstcpskbufhandler derives the netns...

7.8CVSS5.3AI score0.0017EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2026/08/10 1:20 p.m.•11 views

CVE-2026-68162

In the Linux kernel, the following vulnerability has been resolved: sctp: avoid authenable sysctl UAF during netns teardown procsctpdoauth updates the SCTP control socket after changing net.sctp.authenable. The handler gets the per-net SCTP state from ctl-data, so an already opened sysctl file ca...

7.8CVSS5.4AI score0.00184EPSS
SaveExploits0References8
OSV
OSV
•added 2026/08/10 1:20 p.m.•9 views

UBUNTU-CVE-2026-68162

In the Linux kernel, the following vulnerability has been resolved: sctp: avoid authenable sysctl UAF during netns teardown procsctpdoauth updates the SCTP control socket after changing net.sctp.authenable. The handler gets the per-net SCTP state from ctl-data, so an already opened sysctl file ca...

7.8CVSS6.7AI score0.00184EPSS
SaveExploits0References9
CVE
CVE
•added 2026/08/10 12:02 p.m.•71 views

CVE-2026-68290

CVE-2026-68290 concerns the Linux kernel RDS TCP implementation. A race condition during network namespace teardown can occur when a concurrent sysctl write dereferences a freed per-netns listen socket, due to rds_tcp_exit_net() freeing the socket before the per-netns sysctl table is unregistered...

7.8CVSS5.3AI score0.0017EPSS
SaveExploits0References4
OSV
OSV
•added 2026/08/10 12:02 p.m.•39 views

CVE-2026-68290 rds: tcp: unregister sysctl before tearing down listen socket

In the Linux kernel, the following vulnerability has been resolved: rds: tcp: unregister sysctl before tearing down listen socket rdstcpexitnet frees the per-netns RDS TCP listen socket via rdstcpkillsock before unregistering the per-netns sysctl table. Since rdstcpskbufhandler derives the netns...

7.8CVSS5.4AI score
SaveExploits0References7
EUVD
EUVD
•added 2026/08/10 12:02 p.m.•14 views

EUVD-2026-55391

In the Linux kernel, the following vulnerability has been resolved: rds: tcp: unregister sysctl before tearing down listen socket rdstcpexitnet frees the per-netns RDS TCP listen socket via rdstcpkillsock before unregistering the per-netns sysctl table. Since rdstcpskbufhandler derives the netns...

5.3AI score0.0017EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/08/10 12:02 p.m.•46 views

CVE-2026-68290 rds: tcp: unregister sysctl before tearing down listen socket

In the Linux kernel, the following vulnerability has been resolved: rds: tcp: unregister sysctl before tearing down listen socket rdstcpexitnet frees the per-netns RDS TCP listen socket via rdstcpkillsock before unregistering the per-netns sysctl table. Since rdstcpskbufhandler derives the netns...

7.8CVSS0.0017EPSS
SaveExploits0References4
CVE
CVE
•added 2026/08/10 11:59 a.m.•88 views

CVE-2026-68162

CVE-2026-68162 is a Linux kernel SCTP vulnerability (local) where a Use-After-Free can occur during netns teardown due to an auth_enable sysctl window. The bug stems from SCTP’s per-net sysctl state being registered before the control socket is fully established and remaining writable after inet_...

7.8CVSS5.3AI score0.00184EPSS
SaveExploits0References9
OSV
OSV
•added 2026/08/10 11:59 a.m.•23 views

CVE-2026-68162 sctp: avoid auth_enable sysctl UAF during netns teardown

In the Linux kernel, the following vulnerability has been resolved: sctp: avoid authenable sysctl UAF during netns teardown procsctpdoauth updates the SCTP control socket after changing net.sctp.authenable. The handler gets the per-net SCTP state from ctl-data, so an already opened sysctl file ca...

7.8CVSS5.4AI score
SaveExploits0References12
Rows per page
Query Builder