PoC-CVE-2026-46331

Questo repository contiene un exploit proof-of-concept PoC per CVE-2026-46331, una vulnerabilità di escalation locale dei privilegi nel kernel Linux nel sottosistema di controllo del traffico. Riassunto della vulnerabilità Il difetto risiede nell'azione di modifica dei pacchetti actpedit, dove il...

CVE-2026-46331-pedit-cow

CVE-2026-46331-pedit-cow Descrizione e passaggi di sfruttamento per la vulnerabilità pedit COW CVE-2026-46331. Panoramica Questa challenge dimostra pedit COW, un difetto del kernel Linux nel sottosistema di controllo del traffico per l'azione di modifica dei pacchetti actpedit. La vulnerabilità...

CVE-2026-46331

CVE-2026-46331 pedit COW – Linux net/sched Packet-Editor Seitencache-Vergiftungs-Sicherheitslücke Executive Summary CVE-2026-46331 Spitzname „pedit COW“ ist eine lokale Linux-Kernel-Privilegienausweitungs-Schwachstelle im Traffic-Control-Subsystem. Ein unprivilegierter Benutzer in einem...

CVE-2026-74739

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: skip hash tables in u32bindclass u32walk enumerates both struct tcuhnode and struct tcuknode through the walker callback. u32bindclass unconditionally casts the passed fh to tcuknode and accesses &n-res, so whe...

CVE-2020-23586

CVE-2020-23586 OPTILINK E-PON "N. MODELLO: OP-XT71000N" con "VERSIONE HARDWARE: V2.2" e "VERSIONE FIRMWARE: OPV3.3.1-191028" vulnerabilità riscontrata in "OPTILINK OP-XT71000N Versione Hardware: V2.2, Versione Firmware: OPV3.3.1-191028" che consente a un attaccante remoto non autenticato di...

CVE-2023-1281

CVE-2023-1281 Vulnerabilidade de Use After Free no filtro de índice tcindex do controle de tráfego do kernel Linux...

tcconfig

.. contents:: tcconfig :backlinks: top :depth: 2 Sommario tcconfig è un wrapper per il comando tc. Semplifica l'impostazione del controllo del traffico di rete larghezza di banda/latenza/perdita di pacchetti/corruzione di pacchetti/ecc. per un'interfaccia di rete/container Docker veth. |PyPI pkg...

tcconfig

.. contents:: tcconfig :backlinks: top :depth: 2 Summary tcconfig is a tc command wrapper. Make it easy to set up traffic control of network bandwidth/latency/packet-loss/packet-corruption/etc. to a network-interface/Docker-containerveth. |PyPI pkg ver| |Supported Python ver| |CI status| |CodeQL|...

The vulnerability of the flow_change() function in the net/sched/cls_flow.c module of the net/sched/traffic control subsystem in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the flowchange function in the net/sched/clsflow.c module of the net/sched subsystem of the Linux operating system’s kernel is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-5.10

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: Remove blockcb from driverlist before freeing it. The error handler of tcfblockBind frees the entire bo-cblist when an error occurs. However, by that time, instances of flowblockCB are already in the driverlist...

CVE-2026-74700

A flaw was found in the Linux kernel's traffic control classifier application programming interface API. A race condition can occur during the destruction of locked classifiers, specifically within the tcnewtfilter function. This race allows an unlocked classifier's request to prematurely decreme...

lua-resty-limit-traffic

Nome lua-resty-limit-traffic - Libreria Lua per limitare e controllare il traffico in OpenResty/ngxlua Indice Nome Stato Sinossi Descrizione Installazione Comunità Mailing list in inglese Mailing list in cinese Bug e patch Autore Copyright e licenza Vedi anche Stato Questa libreria è già...

CVE-2026-74621

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: fix skbuff leak when the header checks reject a packet tcfcthandlefragments runs its header sanity checks before handing anything to the defragmentation engine: if family == NFPROTOIPV4 err =...

CVE-2026-74620

In the Linux kernel, the following vulnerability has been resolved: net/sched: actgact, actpolice: range check the fallback control action tcfactioncheckctrlact range checks the primary control action: if !opcode ret = action TCACTVALUEMAX ? -EINVAL : 0; TCACTVALUEMAX is TCACTTRAP, so...

EUVD-2026-64387

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: Always acquire rtnllock when destroying locked classifiers Another challenge with unlocked filters. There is a short window in tcnewtfilter where a tcfproto can be found and briefly referenced by a totally...

EUVD-2026-64557

In the Linux kernel, the following vulnerability has been resolved: net/sched: actgact, actpolice: range check the fallback control action tcfactioncheckctrlact range checks the primary control action: if !opcode ret = action TCACTVALUEMAX ? -EINVAL : 0; TCACTVALUEMAX is TCACTTRAP, so...

CVE-2026-74620

This Linux kernel vulnerability affects the net/sched subsystem, specifically the act_gact and act_police traffic control actions. The fallback control actions (TCA_GACT_PROB.paction and TCA_POLICE_RESULT) bypass the range check in tcf_action_check_ctrlact(), allowing user space to store TC_ACT_C...

kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle

A flaw was found in the Linux kernel's traffic control TC classifier application programming interface API. The tcfqeventhandle function does not properly handle a consumed socket buffer skb when it is processed by the defragmentation engine. This can lead to a Use-After-Free UAF vulnerability,...

CVE-2026-74382

A flaw was found in the Linux kernel's clsbpf component, which handles traffic control filtering. A local attacker could exploit this vulnerability by triggering a specific sequence of failures during an offload rollback operation. This leads to an unbounded recursion, causing a stack overflow an...

kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle

A flaw was found in the Linux kernel's traffic control TC classifier application programming interface API. The tcfqeventhandle function does not properly handle a consumed socket buffer skb when it is processed by the defragmentation engine. This can lead to a Use-After-Free UAF vulnerability,...