AZL-97743 CVE-2026-74735 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: l2tp: fix tunnel and session refcount leak on seqfile release In pppol2tpprocopen and l2tpdfsseqopen, iteration state pd-tunnel and pd-session is kept in seqfile private data to allow iteration across multiple read system calls...

UBUNTU-CVE-2026-74735

In the Linux kernel, the following vulnerability has been resolved: l2tp: fix tunnel and session refcount leak on seqfile release In pppol2tpprocopen and l2tpdfsseqopen, iteration state pd-tunnel and pd-session is kept in seqfile private data to allow iteration across multiple read system calls...

Linux Distros Unpatched Vulnerability : CVE-2026-74735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - l2tp: fix tunnel and session refcount leak on seqfile release In pppol2tpprocopen and l2tpdfsseqopen, iteration state pd-tunnel and pd-session is kept in seqfil...

PT-2026-82115

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the L2TP module when userspace closes /proc/net/pppol2tp or /sys/kernel/debug/l2tp/tunnels before reaching the end-of-file. The iteration state,...

CVE-2026-64119

CVE-2026-64119 affects the Linux kernel L2TP subsystem. A local unprivileged user can pin the host CPU indefinitely by racing L2TP_CMD_SESSION_GET on L2TP_ATTR_IFNAME with L2TP_CMD_SESSION_CREATE/DELETE on the same tunnel, under CAP_NET_ADMIN. The root cause is list_del_init() in l2tp_session_unh...

CVE-2024-37343

There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.06. Attackers with valid tunnel credentials can pass a limited-length script to the administrative console which is then temporarily stored where an administrato...

CVE-2024-37343 Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06

There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.06. Attackers with valid tunnel credentials can pass a limited-length script to the administrative console which is then temporarily stored where an administrato...