Lucene search
+L

9 matches found

Github Security Blog
Github Security Blog
•added 2026/06/19 9:42 p.m.•23 views

stigmem-node: RTBF tombstones are mis-attributed and suppress reads tenant-blind (cross-tenant BOLA)

Summary On a multi-tenant stigmem node, RTBF right-to-be-forgotten tombstones were mis-scoped two ways. 1 issuetombstone defaulted the tenant to "default" instead of the caller's tenant, so tombstones could be written to the wrong tenant. 2 The read-suppression path — gettombstonefilter...

5.5AI score
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/05/28 9:36 a.m.•62 views

CVE-2026-46153 8021q: delete cleared egress QoS mappings

In the Linux kernel, the following vulnerability has been resolved: 8021q: delete cleared egress QoS mappings vlandevsetegresspriority currently keeps cleared egress priority mappings in the hash as tombstones. Repeated set/clear cycles with distinct skb priorities therefore accumulate mapping...

0.00112EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/05/28 9:36 a.m.•19 views

CVE-2026-46153 8021q: delete cleared egress QoS mappings

In the Linux kernel, the following vulnerability has been resolved: 8021q: delete cleared egress QoS mappings vlandevsetegresspriority currently keeps cleared egress priority mappings in the hash as tombstones. Repeated set/clear cycles with distinct skb priorities therefore accumulate mapping...

5.8AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/28 12:00 a.m.•5 views

CVE-2026-46153: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: 8021q: delete cleared egress QoS mappings vlandevsetegresspriority currently keeps cleared egress priority mappings in the hash as tombstones. Repeated set/clear cycles with distinct skb priorities therefore accumulate mapping...

5.5CVSS5.8AI score0.00112EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/09/10 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2016-2420

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rootdir/init.rc in Android 4.x before 4.4.4 does not ensure that the /data/tombstones directory exists for the Debuggerd component, which allows attackers to ga...

9.3CVSS7.5AI score0.00471EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2016/04/18 12:59 a.m.•22 views

CVE-2016-2420

rootdir/init.rc in Android 4.x before 4.4.4 does not ensure that the /data/tombstones directory exists for the Debuggerd component, which allows attackers to gain privileges via a crafted application, aka internal bug 26403620...

7.8CVSS7.3AI score0.00471EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2016/04/18 12:59 a.m.•23 views

UBUNTU-CVE-2016-2420

rootdir/init.rc in Android 4.x before 4.4.4 does not ensure that the /data/tombstones directory exists for the Debuggerd component, which allows attackers to gain privileges via a crafted application, aka internal bug 26403620...

7.8CVSS5.8AI score0.00471EPSS
SaveExploits0References5
Prion
Prion
•added 2016/04/18 12:59 a.m.•30 views

Design/Logic Flaw

rootdir/init.rc in Android 4.x before 4.4.4 does not ensure that the /data/tombstones directory exists for the Debuggerd component, which allows attackers to gain privileges via a crafted application, aka internal bug 26403620...

9.3CVSS7.1AI score0.00471EPSS
SaveExploits0References3Affected Software1
RedHat Linux
RedHat Linux
•added 2013/09/03 8:14 p.m.•18 views

OpenStack: Swift Denial of Service using superfluous object tombstones

OpenStack Swift before 1.9.1 in Folsom, Grizzly, and Havana allows authenticated users to cause a denial of service "superfluous" tombstone consumption and Swift cluster slowdown via a DELETE request with a timestamp that is older than expected...

4CVSS5.4AI score0.01675EPSS
SaveExploits1References4
Rows per page
Query Builder