tcconfig

.. contents:: tcconfig :backlinks: top :depth: 2 Summary tcconfig is a tc command wrapper. Make it easy to set up traffic control of network bandwidth/latency/packet-loss/packet-corruption/etc. to a network-interface/Docker-containerveth. |PyPI pkg ver| |Supported Python ver| |CI status| |CodeQL|...

CVE-2020-23586

CVE-2020-23586 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" vulnerability found in the "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028"which allows an unauthenticated, remote attacker to conduct a...

PoC-CVE-2026-46331

This repository contains a proof-of-concept PoC exploit for CVE-2026-46331, a Linux kernel local privilege escalation vulnerability in the traffic-control subsystem. Vulnerability Summary The flaw exists in the actpedit packet-editing action, where the kernel may calculate the copy-on-write...

CVE-2026-46331-pedit-cow

CVE-2026-46331-pedit-cow Write-up and exploitation steps for the pedit COW vulnerability CVE-2026-46331. Overview This challenge demonstrates pedit COW, a Linux kernel flaw in the traffic-control subsystem's packet-editing action actpedit. The vulnerability allows an unprivileged user to overwrit...

lua-resty-limit-traffic

Name lua-resty-limit-traffic - Lua library for limiting and controlling traffic in OpenResty/ngxlua Table of Contents Name Status Synopsis Description Installation Community English Mailing List Chinese Mailing List Bugs and Patches Author Copyright and License See Also Status This library is...

CVE-2026-46331

CVE-2026-46331 pedit COW – Linux net/sched Packet-Editor Page-Cache Poisoning Vulnerability Executive Summary CVE-2026-46331 nicknamed “pedit COW” is a local Linux kernel privilege-escalation flaw in the traffic-control subsystem. An unprivileged user in an unprivileged network namespace can...

pedit-cow

CVE-2026-46331 is a Linux kernel privilege escalation vulnerability involving the traffic control subsystem and page cache corruption. Requirements: Linux x8664 GCC iproute2 tc Vulnerable kernel Exploitation Flow: SUID Enumeration ↓ Target Selection ↓ ELF Analysis ↓ tc / Netlink / pedit ↓ Page...

CVE-2023-1281

CVE-2023-1281 Use After Free vulnerability in Linux kernel traffic control index filter tcindex...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Fix internal port memory leak The flow rule can be splited, and the extra postact rules are added to postact table. It's possible to trigger memleak when the rule forwards packets from internal port and over tunnel...

CVE-2026-98811

A flaw was found in the Linux kernel's network traffic control classifier subsystem. A local attacker with network administration privileges could exploit a race condition by submitting concurrent filter addition requests that fail during creation. Due to improper error handling, the kernel fails...

CVE-2026-98622

A flaw was found in the Linux kernel's traffic control connection tracking subsystem. Under normal load or during connection tracking flushes, expected memory allocation failures inappropriately trigger a kernel warning. A local user can exploit this condition by racing connection flushes against...

CVE-2026-80739

A flaw was found in the Linux kernel. A race condition exists in the net/mlx5e driver's Traffic Control TC flow deletion mechanism. When a flow fails to be added, the deletion process attempts to acquire a lock without proper checks, leading to a recursive lock acquisition in certain 'peer flow'...

CVE-2026-98584

A flaw was found in the Linux kernel's network traffic control subsystem. A local user can exploit this vulnerability to cause an information disclosure of kernel stack data. When dumping text search filter configurations, the kernel fails to initialize a stack structure before copying it into...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: net: sched: avoid qdiscresetalltxgt vs dequeue race for lockless qdiscs When reducing the number of real TX queues, netifsetrealnumtxqueues calls qdiscresetalltxgt to flush qdiscs for queues that will no longer be used. Currently...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: remove blockcb from driverlist before freeing Error handler of tcfblockbind frees the whole bo-cblist on error. However, by that time the flowblockcb instances are already in the driver list because driver...

CVE-2026-90099

A flaw was found in the Linux kernel's network scheduler. An unprivileged user can exploit a memory accounting vulnerability in the traffic control tc classifier. By creating a large number of filters, an attacker can cause the kernel to pin memory outside of memory cgroup memcg limits, leading t...

tcconfig

.. contents:: tcconfig :backlinks: top :depth: 2 Resumen tcconfig es un envoltorio del comando tc. Facilita la configuración del control de tráfico de ancho de banda/latencia/pérdida de paquetes/corrupción de paquetes/etc. en una interfaz de red/contenedor Docker veth. |PyPI pkg ver| |Supported...

CVE-2026-98380

A flaw was found in the Linux kernel's traffic control subsystem. A local attacker with network configuration privileges can exploit a race condition during traffic control action deletion to cause a Denial of Service DoS by crashing the system. Due to missing error validation during action...

CVE-2026-98336

A flaw was found in the Linux kernel's mac80211 wireless networking subsystem. A local user with network administration privileges can cause a denial of service DoS by configuring hardware traffic control TC offloading on virtual Access Point Virtual Local Area Network APVLAN interfaces. Because...

CVE-2026-98235

A flaw was found in the Linux kernel's network traffic control subsystem. When processing a batched request to delete traffic actions, a failure encountered on an action bound to a filter causes the cleanup process to terminate prematurely without releasing references on subsequent actions. A loc...