21 matches found
CVE-2026-74710
A flaw was found in the Linux kernel's AFXDP eXpress Data Path component. This vulnerability arises because the AFXDP mechanism accepts a transmit TX metadata length that is smaller than required, allowing the kernel to read beyond its designated memory area. An attacker could potentially exploit...
CVE-2026-74707
A flaw was found in the Linux kernel's xsk AFXDP sockets component. This vulnerability allows a local user to bypass security validation by modifying transmission TX metadata after it has been initially checked but before it is used to prepare hardware requests. This could lead to unexpected syst...
CVE-2026-74707
In the Linux kernel, the following vulnerability has been resolved: xsk: validate metadata when processing requests The zero-copy path validates TX metadata while obtaining the descriptor context, then reads it again later when preparing the hardware request. User space can change the metadata...
CVE-2026-74710
In the Linux kernel, the following vulnerability has been resolved: xsk: require at least 16 bytes of TX metadata AFXDP accepts a TX metadata length as small as eight bytes, but every supported request needs the flags plus at least one eight-byte request field. Such short metadata also lets the...
EUVD-2026-64397
In the Linux kernel, the following vulnerability has been resolved: xsk: require at least 16 bytes of TX metadata AFXDP accepts a TX metadata length as small as eight bytes, but every supported request needs the flags plus at least one eight-byte request field. Such short metadata also lets the...
CVE-2026-74710
CVE-2026-74710 is an out-of-bounds read in the Linux kernel's AF_XDP (xsk) component. The mechanism accepts a TX metadata length as small as eight bytes, but every supported request requires the flags field plus at least one eight-byte request field (16 bytes minimum). When metadata shorter than ...
CVE-2026-74710 xsk: require at least 16 bytes of TX metadata
In the Linux kernel, the following vulnerability has been resolved: xsk: require at least 16 bytes of TX metadata AFXDP accepts a TX metadata length as small as eight bytes, but every supported request needs the flags plus at least one eight-byte request field. Such short metadata also lets the...
CVE-2026-74710 xsk: require at least 16 bytes of TX metadata
In the Linux kernel, the following vulnerability has been resolved: xsk: require at least 16 bytes of TX metadata AFXDP accepts a TX metadata length as small as eight bytes, but every supported request needs the flags plus at least one eight-byte request field. Such short metadata also lets the...
CVE-2026-74707
CVE-2026-74707 affects the Linux kernel's xsk (AF_XDP sockets) component, specifically the zero-copy TX path . The root cause is a time-of-check-to-time-of-use (TOCTOU) flaw: TX metadata is validated when obtaining the descriptor context but then read again later when preparing the hardware reque...
EUVD-2026-64394
In the Linux kernel, the following vulnerability has been resolved: xsk: validate metadata when processing requests The zero-copy path validates TX metadata while obtaining the descriptor context, then reads it again later when preparing the hardware request. User space can change the metadata...
PT-2026-79715
In the Linux kernel, the following vulnerability has been resolved: xsk: require at least 16 bytes of TX metadata AF XDP accepts a TX metadata length as small as eight bytes, but every supported request needs the flags plus at least one eight-byte request field. Such short metadata also lets the...
PT-2026-79713
In the Linux kernel, the following vulnerability has been resolved: xsk: validate launch-time metadata size Launch-time metadata extends beyond the first 16 bytes of struct xsk tx metadata. Reject the request when the registered metadata area does not contain the complete field. Snapshot the...
Linux Distros Unpatched Vulnerability : CVE-2026-74710
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xsk: require at least 16 bytes of TX metadata AFXDP accepts a TX metadata length as small as eight bytes, but every supported request needs the flags plus at...
CVE-2026-11368
The Bluetooth host ATT layer subsys/bluetooth/host/att.c associates each in-flight ATT TX buffer with its owning channel via the static txmetadatastorage array data-attchan = chan. When a buffer's last reference is dropped, its net-buf destroy callback defers the completion handling to the system...
EUVD-2024-51908
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2024-53236
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: xsk: Free skb when TX metadata options are invalid When a new skb is allocated for...
CVE-2024-53236
In the Linux kernel, the following vulnerability has been resolved: xsk: Free skb when TX metadata options are invalid When a new skb is allocated for transmitting an xsk descriptor, i.e., for every non-multibuf descriptor or the first frag of a multibuf descriptor, but the descriptor is later...
CVE-2024-53236
In the Linux kernel, the following vulnerability has been resolved: xsk: Free skb when TX metadata options are invalid When a new skb is allocated for transmitting an xsk descriptor, i.e., for every non-multibuf descriptor or the first frag of a multibuf descriptor, but the descriptor is later...
CVE-2024-53236 xsk: Free skb when TX metadata options are invalid
In the Linux kernel, the following vulnerability has been resolved: xsk: Free skb when TX metadata options are invalid When a new skb is allocated for transmitting an xsk descriptor, i.e., for every non-multibuf descriptor or the first frag of a multibuf descriptor, but the descriptor is later...
CVE-2024-53236 xsk: Free skb when TX metadata options are invalid
In the Linux kernel, the following vulnerability has been resolved: xsk: Free skb when TX metadata options are invalid When a new skb is allocated for transmitting an xsk descriptor, i.e., for every non-multibuf descriptor or the first frag of a multibuf descriptor, but the descriptor is later...