25 matches found
CVE-2026-80875
In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in TCP state lookup TCP state handling reparses the skb to find the TCP header. For IPv6 it uses sizeofstruct ipv6hdr, while the surrounding IPVS code already parsed the packet with ipvsfilliphsk...
CVE-2026-80875 ipvs: use parsed transport offset in TCP state lookup
In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in TCP state lookup TCP state handling reparses the skb to find the TCP header. For IPv6 it uses sizeofstruct ipv6hdr, while the surrounding IPVS code already parsed the packet with ipvsfilliphsk...
EUVD-2026-71505
In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in TCP state lookup TCP state handling reparses the skb to find the TCP header. For IPv6 it uses sizeofstruct ipv6hdr, while the surrounding IPVS code already parsed the packet with ipvsfilliphsk...
PT-2026-85794
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IPVS IP Virtual Server component where TCP state handling incorrectly reparses the socket buffer skb to locate the TCP header. For IPv6, the system uses a fixed si...
Linux Distros Unpatched Vulnerability : CVE-2026-68477
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvs: fix more places with wrong ipv6 transport offsets Sashiko reports for more incorrect IPv6 transport offsets. The app code for TCP was assuming IPv4 networ...
CVE-2026-68477
A flaw was found in the Linux kernel's IP Virtual Server IPVS component. This vulnerability arises from incorrect IPv6 transport offsets, where TCP application code might incorrectly assume an IPv4 network header when processing IPv6 packets. Additionally, the ICMPv6 header offset in ipvsouticmpv...
UBUNTU-CVE-2026-68477
In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport offsets Sashiko reports for more incorrect IPv6 transport offsets. The app code for TCP was assuming IPv4 network header even after the ipvsh argument was provided. This can cause...
CVE-2026-68477
CVE-2026-68477 relates to the Linux kernel IPVS handling of IPv6 transport offsets. The vulnerability stems from code paths that continued to assume an IPv4 network header after the ipv6 switch, causing incorrect IPv6 transport offset handling for TCP and related paths, and potentially impacting ...
CVE-2026-68477 ipvs: fix more places with wrong ipv6 transport offsets
In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport offsets Sashiko reports for more incorrect IPv6 transport offsets. The app code for TCP was assuming IPv4 network header even after the ipvsh argument was provided. This can cause...
CVE-2026-68477 ipvs: fix more places with wrong ipv6 transport offsets
In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport offsets Sashiko reports for more incorrect IPv6 transport offsets. The app code for TCP was assuming IPv4 network header even after the ipvsh argument was provided. This can cause...
EUVD-2026-59099
In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport offsets Sashiko reports for more incorrect IPv6 transport offsets. The app code for TCP was assuming IPv4 network header even after the ipvsh argument was provided. This can cause...
PT-2026-72189
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IPVS component where incorrect IPv6 transport offsets are used. The TCP application code incorrectly assumes an IPv4 network header even when the ipvsh argument is...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992662)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992662 advisory. In the Linux kernel, the following vulnerability has been resolved: erspan: do not use skbmacheader in ndostartxmit Drivers should not assume skbmacheaderskb ==...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992336)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992336 advisory. In the Linux kernel, the following vulnerability has been resolved: erspan: do not use skbmacheader in ndostartxmit Drivers should not assume skbmacheaderskb ==...
EUVD-2023-59949
Malicious code in bioql PyPI...
SUSE CVE-2023-53312
In the Linux kernel, the following vulnerability has been resolved: net: fix netdevstartxmit trace event vs skbtransportoffset After blamed commit, we must be more careful about using skbtransportoffset, as reminded us by syzbot: WARNING: CPU: 0 PID: 10 at include/linux/skbuff.h:2868...
DEBIAN-CVE-2023-53312
In the Linux kernel, the following vulnerability has been resolved: net: fix netdevstartxmit trace event vs skbtransportoffset After blamed commit, we must be more careful about using skbtransportoffset, as reminded us by syzbot: WARNING: CPU: 0 PID: 10 at include/linux/skbuff.h:2868...
CVE-2023-53312
In the Linux kernel, the following vulnerability has been resolved: net: fix netdevstartxmit trace event vs skbtransportoffset After blamed commit, we must be more careful about using skbtransportoffset, as reminded us by syzbot: WARNING: CPU: 0 PID: 10 at include/linux/skbuff.h:2868...
CVE-2023-53312
CVE-2023-53312 : In the Linux kernel, a trace-event interaction with skb_transport_offset() in net_dev_start_xmit could lead to unsafe skb_transport_offset usage. The issue arises after a blamed commit and is fixed by the kernel remediation described in the initial document (commit references inc...
CVE-2023-53312 net: fix net_dev_start_xmit trace event vs skb_transport_offset()
In the Linux kernel, the following vulnerability has been resolved: net: fix netdevstartxmit trace event vs skbtransportoffset After blamed commit, we must be more careful about using skbtransportoffset, as reminded us by syzbot: WARNING: CPU: 0 PID: 10 at include/linux/skbuff.h:2868...