Lucene search
+L

76 matches found

osv_azl
osv_azl
•added 2026/10/18 4:17 p.m.•5 views

AZL-109077 CVE-2026-98801 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: net: restrict SORESERVEMEM to TCP sockets and cap max value Commit 2bb2f5fb21b0 "net: add new socket option SORESERVEMEM" and commit d00c8ee31729 "net: fix possible NULL deref in sockreservememory" only checked skhasaccountsk,...

5.8AI score0.00168EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/10/18 3:48 p.m.•5 views

CVE-2026-98801

In the Linux kernel, the following vulnerability has been resolved: net: restrict SORESERVEMEM to TCP sockets and cap max value Commit 2bb2f5fb21b0 "net: add new socket option SORESERVEMEM" and commit d00c8ee31729 "net: fix possible NULL deref in sockreservememory" only checked skhasaccountsk,...

6.1AI score0.00168EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/10/18 12:00 a.m.•8 views

PT-2026-117020

In the Linux kernel, the following vulnerability has been resolved: net: restrict SO RESERVE MEM to TCP sockets and cap max value Commit 2bb2f5fb21b0 "net: add new socket option SO RESERVE MEM" and commit d00c8ee31729 "net: fix possible NULL deref in sock reserve memory" only checked sk has...

5.8AI score0.00168EPSS
SaveExploits0References5
AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•12 views

Astra Linux – Vulnerability in Linux 5.10, Linux

There is a use-after-free vulnerability in the Linux Kernel that can be exploited to achieve local privilege escalation. To exploit this vulnerability, the CONFIGTLS or CONFIGXFRMESPINTCP kernel configuration flags must be set; however, the operation does not require any special privileges. There...

7.8CVSS6.8AI score0.00652EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/08/21 12:00 a.m.•37 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102028)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102028 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: restrict SOATTACHFILTER to priv users This patch restricts the use of SOATTACHFILTER cBPF on...

5.5CVSS5.5AI score0.00125EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/06/28 12:00 a.m.•22 views

Linux Distros Unpatched Vulnerability : CVE-2026-53236

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp: restrict SOATTACHFILTER to priv users This patch restricts the use of SOATTACHFILTER cBPF on TCP sockets to users with CAPNETADMIN capability. This blocks...

5.5CVSS5.5AI score0.00125EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/06/26 10:46 a.m.•30 views

CVE-2026-53236

A flaw was found in the Linux kernel's handling of TCP sockets. An unprivileged application can exploit this vulnerability by attaching a Berkeley Packet Filter BPF using the SOATTACHFILTER option. This allows the application to conduct a side-channel attack, leading to the leakage of sensitive T...

7.1CVSS5.6AI score0.00125EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/06/26 2:09 a.m.•25 views

SUSE CVE-2026-53236

In the Linux kernel, the following vulnerability has been resolved: tcp: restrict SOATTACHFILTER to priv users This patch restricts the use of SOATTACHFILTER cBPF on TCP sockets to users with CAPNETADMIN capability. This blocks potential side-channel attack where an unprivileged application...

4.7CVSS5.5AI score0.00125EPSS
SaveExploits0References18
osv_azl
osv_azl
•added 2026/06/25 9:16 a.m.•22 views

AZL-90572 CVE-2026-53236 affecting package kernel for versions less than 6.6.143.1-1

In the Linux kernel, the following vulnerability has been resolved: tcp: restrict SOATTACHFILTER to priv users This patch restricts the use of SOATTACHFILTER cBPF on TCP sockets to users with CAPNETADMIN capability. This blocks potential side-channel attack where an unprivileged application...

5.5CVSS5.5AI score0.00125EPSS
SaveExploits0References1
NVD
NVD
•added 2026/06/25 9:16 a.m.•30 views

CVE-2026-53236

In the Linux kernel, the following vulnerability has been resolved: tcp: restrict SOATTACHFILTER to priv users This patch restricts the use of SOATTACHFILTER cBPF on TCP sockets to users with CAPNETADMIN capability. This blocks potential side-channel attack where an unprivileged application...

5.5CVSS0.00125EPSS
SaveExploits0References9
osv_cve
osv_cve
•added 2026/06/25 8:39 a.m.•20 views

CVE-2026-53236 tcp: restrict SO_ATTACH_FILTER to priv users

In the Linux kernel, the following vulnerability has been resolved: tcp: restrict SOATTACHFILTER to priv users This patch restricts the use of SOATTACHFILTER cBPF on TCP sockets to users with CAPNETADMIN capability. This blocks potential side-channel attack where an unprivileged application...

5.8AI score
SaveExploits0References12
RedHat Linux
RedHat Linux
•added 2026/06/22 6:10 a.m.•29 views

postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation

A flaw was found in PostgreSQL. Uncontrolled recursion during SSL Secure Sockets Layer and GSS Generic Security Service negotiation allows an attacker to achieve a sustained denial of service. This can be exploited by an attacker with access to a PostgreSQL AFUNIX socket. If SSL and GSS are both...

7.5CVSS6.6AI score0.00595EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/06/17 8:02 a.m.•33 views

postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation

A flaw was found in PostgreSQL. Uncontrolled recursion during SSL Secure Sockets Layer and GSS Generic Security Service negotiation allows an attacker to achieve a sustained denial of service. This can be exploited by an attacker with access to a PostgreSQL AFUNIX socket. If SSL and GSS are both...

7.5CVSS6.6AI score0.00595EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/06/16 8:05 a.m.•25 views

postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation

A flaw was found in PostgreSQL. Uncontrolled recursion during SSL Secure Sockets Layer and GSS Generic Security Service negotiation allows an attacker to achieve a sustained denial of service. This can be exploited by an attacker with access to a PostgreSQL AFUNIX socket. If SSL and GSS are both...

7.5CVSS6.6AI score0.00595EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/06/08 12:00 a.m.•37 views

PT-2026-52331

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A side-channel issue exists where an unprivileged application can attach a filter to TCP sockets to leak TCP sequence and acknowledgment numbers. This is achieved through the use of SO...

6CVSS5.5AI score0.00125EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2026/05/26 11:31 p.m.•25 views

postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation

A flaw was found in PostgreSQL. Uncontrolled recursion during SSL Secure Sockets Layer and GSS Generic Security Service negotiation allows an attacker to achieve a sustained denial of service. This can be exploited by an attacker with access to a PostgreSQL AFUNIX socket. If SSL and GSS are both...

7.5CVSS6.6AI score0.00595EPSS
SaveExploits0References5
osv_alpine
osv_alpine
•added 2026/05/14 2:16 p.m.•42 views

ALPINE-CVE-2026-6479

Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL AFUNIX socket to achieve sustained denial of service. If SSL and GSS are both disabled, an attacker can do the same via access to a PostgreSQL TCP socket. Versions before PostgreSQL 18....

7.5CVSS6.8AI score0.00595EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2026/05/14 1:00 p.m.•32 views

CVE-2026-6479

Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL AFUNIX socket to achieve sustained denial of service. If SSL and GSS are both disabled, an attacker can do the same via access to a PostgreSQL TCP socket. Versions before PostgreSQL 18....

7.5CVSS6.8AI score0.00595EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/05/14 1:00 p.m.•115 views

CVE-2026-6479 PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion

Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL AFUNIX socket to achieve sustained denial of service. If SSL and GSS are both disabled, an attacker can do the same via access to a PostgreSQL TCP socket. Versions before PostgreSQL 18....

7.5CVSS0.00595EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/14 12:00 a.m.•29 views

PT-2026-40924

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.4 PostgreSQL versions prior to 17.10 PostgreSQL versions prior to 16.14 PostgreSQL versions prior to 15.18 PostgreSQL versions prior to 14.23 Description Uncontrolled recursion during SSL and GSS negotiation...

8.8CVSS6.7AI score0.00595EPSS
SaveExploits0References142
Rows per page
Query Builder