CVE-2026-98381

A flaw was found in the Linux kernel's virtual Ethernet veth driver. When resizing network channels, the driver fails to properly clear references to detached eXpress Data Path XDP programs on removed receive queues. If the channel count is subsequently increased, the kernel may execute the freed...

CVE-2026-80613

In the Linux kernel, the following vulnerability has been resolved: veth: fix NAPI leak in XDP enable error path During XDP enablement in veth, if xdprxqinforeg or xdprxqinforegmemmodel fails, the driver rolls back the changes. However, the rollback loop: for i--; i = start; i-- decrements the lo...

UBUNTU-CVE-2026-80613

In the Linux kernel, the following vulnerability has been resolved: veth: fix NAPI leak in XDP enable error path During XDP enablement in veth, if xdprxqinforeg or xdprxqinforegmemmodel fails, the driver rolls back the changes. However, the rollback loop: for i--; i = start; i-- decrements the lo...

CVE-2026-80613

In the Linux kernel, the following vulnerability has been resolved: veth: fix NAPI leak in XDP enable error path During XDP enablement in veth, if xdprxqinforeg or xdprxqinforegmemmodel fails, the driver rolls back the changes. However, the rollback loop: for i--; i = start; i-- decrements the lo...

EUVD-2026-66572

In the Linux kernel, the following vulnerability has been resolved: veth: fix queue index used to wake the peer txq in vethpoll vethpoll derives the index of the peer TX queue to wake from rq-xdprxq.queueindex. That field is only initialized by xdprxqinforeg in vethenablexdprange, which runs only...

CVE-2026-74742 veth: fix queue index used to wake the peer txq in veth_poll

In the Linux kernel, the following vulnerability has been resolved: veth: fix queue index used to wake the peer txq in vethpoll vethpoll derives the index of the peer TX queue to wake from rq-xdprxq.queueindex. That field is only initialized by xdprxqinforeg in vethenablexdprange, which runs only...

Linux Distros Unpatched Vulnerability : CVE-2026-74742

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - veth: fix queue index used to wake the peer txq in vethpoll vethpoll derives the index of the peer TX queue to wake from rq-xdprxq.queueindex. That field is onl...

SUSE CVE-2026-74612

In the Linux kernel, the following vulnerability has been resolved: veth: fix skb length accounting after XDP frag adjustment veth exposes non-linear skb fragments through an xdpbuff. If an XDP program adjusts the fragment area, vethxdprcvskb copies xdpfragssize back to skb-datalen but leaves...

CVE-2026-74476

A flaw was found in the veth component of the Linux kernel. This vulnerability occurs when a specially crafted network packet, known as a fraglist skb socket buffer, is processed by the veth driver. An attacker could potentially send such a packet, causing the system to misinterpret fragment...

CVE-2026-74476

The CVE-2026-74476 entry describes a Linux kernel vulnerability in the veth path where a frag_list skb can reach veth with data_len set but nr_frags zero. The root cause is that veth_convert_skb_to_xdp_buff() could expose frag_list data to XDP as if it were in frags[], even though frags[] is empt...

CVE-2026-74476 veth: convert frag_list skbs before running XDP

In the Linux kernel, the following vulnerability has been resolved: veth: convert fraglist skbs before running XDP A fraglist skb can reach veth with datalen set but nrfrags zero. vethconvertskbtoxdpbuff only converts skbs that are shared, locked, have frags, or do not have enough headroom. It...

CVE-2026-72493 net: serialize netif_running() check in enqueue_to_backlog()

In the Linux kernel, the following vulnerability has been resolved: net: serialize netifrunning check in enqueuetobacklog Syzbot reported a KASAN slab-use-after-free in fibruleslookup. The root cause is a race condition where packets can escape the backlog flushing during device unregistration...

PT-2026-72928

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the veth driver where a frag list skb socket buffer can reach the driver with data len set but nr frags at zero. The function veth convert skb to xdp buff fails to...

The vulnerability of the veth_convert_skb_to_xdp_buff() function in the drivers/net/veth.c module of the network device driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vethconvertskbtoxdpbuff function in the drivers/net/veth.c module of the Linux kernel network device driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

MiracleLinux 4 : kernel-2.6.32-358.11.1.el6 (AXSA:2013-571:06)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-571:06 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002461)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002461 advisory. The veth aka virtual Ethernet driver in the Linux kernel before 2.6.34 does not properly manage skbs during congestion, which allows remote attackers to cause a deni...

UBUNTU-CVE-2025-68232

In the Linux kernel, the following vulnerability has been resolved: veth: more robust handing of race to avoid txq getting stuck Commit dc82a33297fc "veth: apply qdisc backpressure on full ptrring to reduce TX drops" introduced a race condition that can lead to a permanently stalled TXQ. This was...

kernel: veth: Fix use after free in XDP_REDIRECT

A use-after-free vulnerability has been identified within the vethconvertskbtoxdpbuff function of the Linux kernel's veth driver. The flaw stems from improper memory management during packet headroom expansion for XDP eXpress Data Path. Specifically, when the pskbexpandhead function allocates new...

kernel: veth: Fix use after free in XDP_REDIRECT

A use-after-free vulnerability has been identified within the vethconvertskbtoxdpbuff function of the Linux kernel's veth driver. The flaw stems from improper memory management during packet headroom expansion for XDP eXpress Data Path. Specifically, when the pskbexpandhead function allocates new...

kernel: veth: Fix use after free in XDP_REDIRECT

A use-after-free vulnerability has been identified within the vethconvertskbtoxdpbuff function of the Linux kernel's veth driver. The flaw stems from improper memory management during packet headroom expansion for XDP eXpress Data Path. Specifically, when the pskbexpandhead function allocates new...