ayaFlow

ayaFlow ayaFlow is a Rust + eBPF network traffic analyzer built with Aya. It runs one agent per Linux node, attaches a TC classifier at ingress and egress, and exposes live traffic data, historical SQLite-backed history, and Prometheus metrics. What It Does Captures IPv4, IPv6, TCP, and UDP traff...

CVE-2026-90099

A flaw was found in the Linux kernel's network scheduler. An unprivileged user can exploit a memory accounting vulnerability in the traffic control tc classifier. By creating a large number of filters, an attacker can cause the kernel to pin memory outside of memory cgroup memcg limits, leading t...

SUSE CVE-2026-90099

In the Linux kernel, the following vulnerability has been resolved: net/sched: account classifier filter allocations to memcg Allocations in the tc classifier change paths filter objects, per-CPU counters, and per-filter aux data use plain GFPKERNEL without GFPACCOUNT, allowing unprivileged users...

PT-2026-94447

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Unprivileged users can pin kernel memory outside of memory control group memcg charging. This occurs because allocations in the tc classifier change paths—including filter objects, per-C...

PT-2026-79705

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Linux kernel within the tc new tfilter function. This occurs when two threads attempt to create filters such as a u32 filter and a flower filter in the sam...

PT-2026-72726

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The flow classifier in the network scheduler uses the addr fold function for fields missing from packet headers. When operating in map mode, userspace can control the mask, xor, rshift,...