Lucene search
+L

707 matches found

Microsoft CVE
Microsoft CVE
added 2026/06/10 8:06 a.m.14 views

tap: free page on error paths in tap_get_user_xdp()

...

7.4CVSS5.8AI score0.00235EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2026/06/10 2:25 a.m.20 views

SUSE CVE-2026-46320

In the Linux kernel, the following vulnerability has been resolved: tap: free page on error paths in tapgetuserxdp tapgetuserxdp rejects a frame shorter than ETHHLEN with -EINVAL, and returns -ENOMEM when buildskb fails. Both paths jump to the err label without freeing the page that...

3.3CVSS5.4AI score0.00235EPSS
SaveExploits0References22
RedhatCVE
RedhatCVE
added 2026/06/09 5:13 p.m.13 views

CVE-2026-46321

A flaw was found in the Linux kernel. A local attacker with access to the tun/tap device can exploit this vulnerability. By sending network frames shorter than the expected header length, the system fails to free allocated memory pages, leading to memory leaks. This can exhaust system memory,...

7.1CVSS5.4AI score0.00129EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/06/09 4:55 p.m.60 views

CVE-2026-46320

A flaw was found in the Linux kernel's tap driver. This vulnerability occurs in the tapgetuserxdp function, where allocated memory pages are not properly freed when processing rejected network frames. Specifically, if a frame is shorter than the expected Ethernet header length or if memory...

7.4CVSS5.4AI score0.00235EPSS
SaveExploits0References4
NVD
NVD
added 2026/06/09 1:16 p.m.36 views

CVE-2026-46320

In the Linux kernel, the following vulnerability has been resolved: tap: free page on error paths in tapgetuserxdp tapgetuserxdp rejects a frame shorter than ETHHLEN with -EINVAL, and returns -ENOMEM when buildskb fails. Both paths jump to the err label without freeing the page that...

7.4CVSS0.00235EPSS
SaveExploits0References8
OSV
OSV
added 2026/06/09 1:16 p.m.15 views

UBUNTU-CVE-2026-46320

In the Linux kernel, the following vulnerability has been resolved: tap: free page on error paths in tapgetuserxdp tapgetuserxdp rejects a frame shorter than ETHHLEN with -EINVAL, and returns -ENOMEM when buildskb fails. Both paths jump to the err label without freeing the page that...

8.2CVSS5.3AI score0.00235EPSS
SaveExploits0References11
CVE
CVE
added 2026/06/09 12:11 p.m.53 views

CVE-2026-46320

The CVE-2026-46320 vulnerability affects the Linux kernel tap driver where memory pages allocated for frames in vhost_net_xdp() are not freed on error paths. Specifically, tap_get_user_xdp() may reject frames shorter than ETH_HLEN (-EINVAL) or fail build_skb() (-ENOMEM), but both error paths jump...

7.4CVSS5.4AI score0.00235EPSS
SaveExploits0References8Affected Software1
EUVD
EUVD
added 2026/06/09 12:11 p.m.14 views

EUVD-2026-35410

In the Linux kernel, the following vulnerability has been resolved: tap: free page on error paths in tapgetuserxdp tapgetuserxdp rejects a frame shorter than ETHHLEN with -EINVAL, and returns -ENOMEM when buildskb fails. Both paths jump to the err label without freeing the page that...

5.4AI score0.00235EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/06/09 12:11 p.m.11 views

CVE-2026-46320

In the Linux kernel, the following vulnerability has been resolved: tap: free page on error paths in tapgetuserxdp tapgetuserxdp rejects a frame shorter than ETHHLEN with -EINVAL, and returns -ENOMEM when buildskb fails. Both paths jump to the err label without freeing the page that...

7.4CVSS5.7AI score0.00235EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2026/06/09 12:11 p.m.11 views

CVE-2026-46320 tap: free page on error paths in tap_get_user_xdp()

In the Linux kernel, the following vulnerability has been resolved: tap: free page on error paths in tapgetuserxdp tapgetuserxdp rejects a frame shorter than ETHHLEN with -EINVAL, and returns -ENOMEM when buildskb fails. Both paths jump to the err label without freeing the page that...

7.4CVSS5.8AI score
SaveExploits0References11
Cvelist
Cvelist
added 2026/06/09 12:11 p.m.48 views

CVE-2026-46320 tap: free page on error paths in tap_get_user_xdp()

In the Linux kernel, the following vulnerability has been resolved: tap: free page on error paths in tapgetuserxdp tapgetuserxdp rejects a frame shorter than ETHHLEN with -EINVAL, and returns -ENOMEM when buildskb fails. Both paths jump to the err label without freeing the page that...

7.4CVSS0.00235EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2026/06/09 12:11 p.m.15 views

CVE-2026-46320

In the Linux kernel, the following vulnerability has been resolved: tap: free page on error paths in tapgetuserxdp tapgetuserxdp rejects a frame shorter than ETHHLEN with -EINVAL, and returns -ENOMEM when buildskb fails. Both paths jump to the err label without freeing the page that...

7.4CVSS5.3AI score0.00235EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/06/09 12:00 a.m.21 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the tapgetuserxdp function failing when short frames are rejected or the buildskb function fails,...

7.4CVSS5.3AI score0.00235EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/06/09 12:00 a.m.13 views

CVE-2026-46320

In the Linux kernel, the following vulnerability has been resolved: tap: free page on error paths in tapgetuserxdp tapgetuserxdp rejects a frame shorter than ETHHLEN with -EINVAL, and returns -ENOMEM when buildskb fails. Both paths jump to the err label without freeing the page that...

7.4CVSS5.4AI score0.00235EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.25 views

PT-2026-47757

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the tap get user xdp function. When a frame is shorter than ETH HLEN, the function returns -EINVAL; similarly, it returns -ENOMEM if build skb fails. In both...

8.2CVSS5.3AI score0.00235EPSS
SaveExploits0
Oracle linux
Oracle linux
added 2026/06/03 12:00 a.m.35 views

Unbreakable Enterprise kernel security update

5.4.17-2136.356.4.1 - smb: client: reject userspace cifs.spnego descriptions Asim Viladi Oglu Manizada Orabug: 39463669 5.4.17-2136.356.4 - tun: free page on buildskb failure in tunxdpone Weiming Shi Orabug: 39429147 - tap: free page on error paths in tapgetuserxdp Weiming Shi Orabug: 39429147 -...

9.8CVSS6.2AI score0.99907EPSS
SaveExploits290
Tenable Nessus
Tenable Nessus
added 2026/06/03 12:00 a.m.16 views

Linux Distros Unpatched Vulnerability : CVE-2026-46207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vsock/virtio: fix empty payload in tap skb for non-linear buffers For non-linear skbs, virtiotransportbuildskb goes through virtiotransportcopynonlinearskb to...

5.5CVSS4.5AI score0.00127EPSS
SaveExploits0References3
Oracle linux
Oracle linux
added 2026/06/02 12:00 a.m.32 views

Unbreakable Enterprise kernel security update

6.12.0-203.76.7.1 - smb: client: reject userspace cifs.spnego descriptions Asim Viladi Oglu Manizada Orabug: 39474418 6.12.0-203.76.7 - tun: free page on buildskb failure in tunxdpone Weiming Shi Orabug: 39456024 - tap: free page on error paths in tapgetuserxdp Weiming Shi Orabug: 39456024 - tun:...

9.8CVSS6.8AI score0.99907EPSS
SaveExploits284
RedhatCVE
RedhatCVE
added 2026/05/28 1:54 p.m.17 views

CVE-2026-46207

A flaw was found in the Linux kernel's vsock/virtio component. When processing non-linear data buffers for the vsockmon tap device, the system did not correctly initialize the payload. This oversight could lead to uninitialized data being copied to the monitoring interface, potentially resulting ...

5.5CVSS5.8AI score0.00127EPSS
SaveExploits0References4
NVD
NVD
added 2026/05/28 10:16 a.m.19 views

CVE-2026-46207

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix empty payload in tap skb for non-linear buffers For non-linear skbs, virtiotransportbuildskb goes through virtiotransportcopynonlinearskb to copy the original payload in the new skb to be delivered to the vsockm...

5.5CVSS0.00127EPSS
SaveExploits0References4
Rows per page
Query Builder