tcconfig

.. contents:: tcconfig :backlinks: top :depth: 2 요약 tcconfig 는 tc 명령어의 래퍼입니다. 네트워크 인터페이스/Docker 컨테이너veth에 대한 네트워크 대역폭/지연/패킷 손실/패킷 손상 등의 트래픽 제어를 쉽게 설정할 수 있습니다. |PyPI pkg ver| |Supported Python ver| |CI status| |CodeQL| .. |PyPI pkg ver| image:: https://badge.fury.io/py/tcconfig.svg :target:...

tcconfig

.. contents:: tcconfig :backlinks: top :depth: 2 Summary tcconfig is a tc command wrapper. Make it easy to set up traffic control of network bandwidth/latency/packet-loss/packet-corruption/etc. to a network-interface/Docker-containerveth. |PyPI pkg ver| |Supported Python ver| |CI status| |CodeQL|...

lua-resty-limit-traffic

名前 lua-resty-limit-traffic - OpenResty/ngxlua 向けのトラフィックを制限・制御する Lua ライブラリ 目次 名前 ステータス 概要 説明 インストール コミュニティ 英語メーリングリスト 中国語メーリングリスト バグとパッチ 著者 著作権とライセンス 関連項目 ステータス このライブラリはまだ非常に実験的ですが、すでに利用可能です。 Lua API はまだ流動的であり、予告なく変更される可能性があります。 概要 demonstrate the usage of the resty.limit.req module alone! http...

CVE-2020-23586

CVE-2020-23586 OPTILINK E-PON 「モデル番号：OP-XT71000N」、 「ハードウェアバージョン：V2.2」、および「ファームウェアバージョン：OPV3.3.1-191028」 「OPTILINK OP-XT71000N ハードウェアバージョン：V2.2、ファームウェアバージョン：OPV3.3.1-191028」に見つかった脆弱性により、認証されていないリモート攻撃者がクロスサイトリクエストフォージェリ（CSRF）攻撃を行い、ネットワークトラフィック制御タイプルールを追加できる可能性があります。 ターゲット /netqosclsedit.asp 攻撃ベクトル...

PoC-CVE-2026-46331

이 저장소에는 트래픽 제어traffic-control 하위 시스템의 Linux 커널 로컬 권한 상승 취약점인 CVE-2026-46331에 대한 개념 증명PoC 익스플로잇이 포함되어 있습니다. 취약점 요약 이 결함은 actpedit 패킷 편집 액션에 존재하며, 커널이 모든 런타임 패킷 오프셋을 완전히 알기 전에 copy-on-write 쓰기 가능 범위를 잘못 계산할 수 있습니다. 특정 로컬 조건이 충족되면 공유 페이지 캐시 메모리에 대한 쓰기가 허용될 수 있습니다. 영향 권한이 없는 로컬 사용자는 이 동작을 악용하여 /bin/s...

CVE-2026-46331-pedit-cow

CVE-2026-46331-pedit-cow pedit COW 취약점CVE-2026-46331에 대한 분석 및 익스플로잇 단계. 개요 이 챌린지는 Linux 커널의 트래픽 제어 서브시스템에서 패킷 편집 액션actpedit에 존재하는 pedit COW 결함을 시연합니다. 이 취약점은 권한이 없는 사용자가 setuid-root 바이너리의 메모리 내 복사본을 덮어쓰도록 허용하여, 디스크 상의 파일을 건드리지 않고도 사실상 루트 셸을 획득할 수 있게 합니다. 익스플로잇 단계 1. 초기 설정 환경은 권한이 없는 사용자karen로...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crxsa-2026_13565)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crxsa-202613565 advisory. kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state CVE-2026-23136 kernel: Linux kernel: Use-after-free in...

Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2023_4541)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20234541 advisory. kernel: use-after-free in l2capconnect and l2capleconnectreq in net/bluetooth/l2capcore.c CVE-2022-42896 kernel: tcindex: use-after-free vulnerability in...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_13565)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202613565 advisory. kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state CVE-2026-23136 kernel: Linux kernel: Use-after-free in...

CVE-2026-97959

A flaw was found in the Linux kernel. When an existing clsroute traffic control filter is moved to a different bucket during configuration updates, the kernel fails to free the vacated bucket once it becomes empty. This failure leaves stale bucket references in place and prevents the associated...

CVE-2026-46331

CVE-2026-46331 pedit COW – Linux net/sched Packet-Editor Page-Cache Poisoning Vulnerability Executive Summary CVE-2026-46331 nicknamed “pedit COW” is a local Linux kernel privilege-escalation flaw in the traffic-control subsystem. An unprivileged user in an unprivileged network namespace can...

CVE-2026-97966

A flaw was found in the Linux kernel's Marvell OCTEON TX2 network driver. When tearing down Hierarchical Token Bucket HTB quality-of-service queues, the driver fails to clear hardware scheduler topology configurations before returning queues to the shared pool. A local user with network...

CVE-2026-97963

A flaw was found in the Linux kernel's stmmac network driver. An uninitialized read-write lock is accessed when configuring traffic control scheduling on an interface that has not been brought up. A local user with network administration privileges could exploit this flaw to cause a kernel crash,...

CVE-2026-97958

A flaw was found in the Linux kernel. A local user can cause a Denial of Service DoS by sending repeated netlink queries to inspect network traffic control chains without reading the responses. When the socket buffer fills, the kernel incorrectly retries the operation in an unbounded loop. This...

pedit-cow

CVE-2026-46331 は、トラフィック制御サブシステムとページキャッシュの破損に関わる Linux カーネルの権限昇格脆弱性です。 要件: Linux x8664 GCC iproute2 tc 脆弱なカーネル 悪用フロー: SUID 列挙 ↓ ターゲット選択 ↓ ELF 解析 ↓ tc / Netlink / pedit ↓ ページキャッシュの破損 ↓ 破損の検証 ↓ SUID 実行 ↓ 権限昇格...

CVE-2026-97616

A flaw was found in the Linux kernel's traffic control action subsystem. This flaw allows a local user to cause a Denial of Service DoS through resource exhaustion. When processing a batched request to replace traffic control actions, an initialization failure causes the cleanup routine to abort...

CVE-2023-1281

CVE-2023-1281 Linux カーネルのトラフィック制御インデックスフィルタ tcindex における Use After Free の脆弱性。...

CVE-2026-98017

A flaw was found in the Linux kernel's network traffic control subsystem. This flaw allows a local user with network administration privileges to cause a denial of service DoS or potentially escalate privileges. A use-after-free condition occurs when the kernel prematurely deallocates network...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel before version 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allowed an unprivileged user to trigger a denial of service system crash through a crafted traffic control configuration set up using the "tc qdisc" and "tc class" commands. This issue affect...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/sched: accept TCASTAB only for root qdisc Most qdisc implementations maintain their backlog using qdiscpktlenskb, assuming this value remains invariant between the enqueue and dequeue handlers. Unfortunately, the syzbot explo...