Lucene search
+L

1721 matches found

Cvelist
Cvelist
added 2026/07/19 3:39 p.m.38 views

CVE-2026-64090 batman-adv: tt: avoid empty VLAN responses

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid empty VLAN responses The commit 16116dac2339 "batman-adv: prevent TT request storms by not sending inconsistent TT TLVLs" added checks to the local direct TT response code. But the response can also be done...

0.00128EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/07/19 3:39 p.m.39 views

CVE-2026-64032 bridge: mcast: Fix a possible use-after-free when removing a bridge port

In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix a possible use-after-free when removing a bridge port When per-VLAN multicast snooping is enabled, the bridge iterates over all the bridge ports, disables the per-port multicast context on each port and enables...

7.8CVSS0.00133EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/19 3:39 p.m.7 views

CVE-2026-64032 bridge: mcast: Fix a possible use-after-free when removing a bridge port

In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix a possible use-after-free when removing a bridge port When per-VLAN multicast snooping is enabled, the bridge iterates over all the bridge ports, disables the per-port multicast context on each port and enables...

7.8CVSS5.4AI score
SaveExploits0References10
CVE
CVE
added 2026/07/19 3:39 p.m.32 views

CVE-2026-64032

The CVE-2026-64032 entry documents a Linux kernel use-after-free in bridge multicast snooping when removing a bridge port. The issue occurs when both per-port and per-{port, VLAN} multicast contexts become enabled on a single bridge port due to interactions between per-VLAN multicast snooping and...

7.8CVSS5.4AI score0.00133EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/07/19 3:39 p.m.11 views

EUVD-2026-45605

In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix a possible use-after-free when removing a bridge port When per-VLAN multicast snooping is enabled, the bridge iterates over all the bridge ports, disables the per-port multicast context on each port and enables...

5.4AI score0.00133EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2026/07/19 3:39 p.m.17 views

CVE-2026-64032

In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix a possible use-after-free when removing a bridge port When per-VLAN multicast snooping is enabled, the bridge iterates over all the bridge ports, disables the per-port multicast context on each port and enables...

7.8CVSS5.2AI score0.00133EPSS
SaveExploits0
CVE
CVE
added 2026/07/19 2:55 p.m.32 views

CVE-2026-63955

The CVE-2026-63955 entry concerns a Linux kernel issue in mm/vmalloc where __get_vm_area_node() would trigger BUG_ON(in_interrupt()) even when BH were disabled. The call path through __vlan_add()/br_fdb_add_local() and rhashtable_lookup_insert_fast() could reach kvmalloc/vmalloc, leading to a BUG...

7.5CVSS5.5AI score0.00468EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/07/19 2:55 p.m.16 views

CVE-2026-63890

In the Linux kernel, the following vulnerability has been resolved: scsi: fcoe: Reject FIP descriptors with zero fipdlen in CVL walker drivers/scsi/fcoe/fcoectlr.c::fcoectlrrecvclrvlink advanced the descriptor cursor by an attacker-supplied fipdlen without ever requiring dlen = sizeofstruct fipde...

5.3AI score0.0022EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/07/19 2:18 p.m.38 views

CVE-2026-63868 net: garp: fix unsigned integer underflow in garp_pdu_parse_attr

In the Linux kernel, the following vulnerability has been resolved: net: garp: fix unsigned integer underflow in garppduparseattr The receive-side GARP attribute parser computes dlen with reversed operands: dlen = sizeofga - ga-len; ga-len is the on-wire attribute length and includes the GARP...

0.0022EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/07/19 12:00 a.m.17 views

PT-2026-61349

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the bridge component when removing a bridge port. This occurs when both per-port and per-port, VLAN multicast contexts are enabled on a single bridge por...

7.8CVSS5.2AI score0.00133EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/19 12:00 a.m.25 views

PT-2026-61408

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Time-of-Check to Time-of-Use TOCTOU race condition exists in the batman-adv module. This occurs when generating the local TT based TVLV, where the system first calculates the number of...

9.8CVSS5.8AI score0.00426EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/19 12:00 a.m.14 views

PT-2026-61185

In the Linux kernel, the following vulnerability has been resolved: net: garp: fix unsigned integer underflow in garp pdu parse attr The receive-side GARP attribute parser computes dlen with reversed operands: dlen = sizeofga - ga-len; ga-len is the on-wire attribute length and includes the GARP...

5.4AI score0.0022EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/07/17 12:52 p.m.22 views

kernel: net: sched: act_csum: validate nested VLAN headers

A flaw was found in the Linux kernel's network scheduler component. A remote attacker could send specially crafted network packets containing nested Virtual Local Area Network VLAN headers. This could cause the kernel to read beyond allocated memory, leading to a system crash and a denial of...

5.5CVSS4.6AI score0.00117EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/07/15 3:58 p.m.20 views

kernel: net: sched: act_csum: validate nested VLAN headers

A flaw was found in the Linux kernel's network scheduler component. A remote attacker could send specially crafted network packets containing nested Virtual Local Area Network VLAN headers. This could cause the kernel to read beyond allocated memory, leading to a system crash and a denial of...

5.5CVSS6.1AI score0.00117EPSS
SaveExploits0References5
NVD
NVD
added 2026/07/01 3:17 p.m.17 views

CVE-2026-5138

A flaw was found in Foreman. An authenticated user with host-edit permissions could exploit a cross-tenant information disclosure vulnerability. This flaw occurs because the taxonomyscope controller method does not properly validate organization and location IDs from nested request parameters,...

4.3CVSS0.0038EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/01 2:08 p.m.13 views

CVE-2026-5138

A flaw was found in Foreman. An authenticated user with host-edit permissions could exploit a cross-tenant information disclosure vulnerability. This flaw occurs because the taxonomyscope controller method does not properly validate organization and location IDs from nested request parameters,...

4.3CVSS5.8AI score0.0038EPSS
SaveExploits0References7
CVE
CVE
added 2026/07/01 2:08 p.m.42 views

CVE-2026-5138

Foreman vulnerability CVE-2026-5138 involves the taxonomy_scope controller failing to validate organization and location IDs in nested request parameters. An authenticated user with host-edit permissions can trigger cross-tenant information disclosure, leaking sensitive infrastructure metadata (s...

4.3CVSS5.8AI score0.0038EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
added 2026/07/01 2:08 p.m.17 views

EUVD-2026-41004

A flaw was found in Foreman. An authenticated user with host-edit permissions could exploit a cross-tenant information disclosure vulnerability. This flaw occurs because the taxonomyscope controller method does not properly validate organization and location IDs from nested request parameters,...

4.3CVSS5.8AI score0.0038EPSS
SaveExploits0References4
OSV
OSV
added 2026/06/29 12:00 a.m.20 views

ALSA-2026:30848 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation CVE-2026-31488 kernel: ipv6: icmp: clear skb2-cb in ip6errgenicmpv6unreach CVE-2026-43038 kernel: netfilter: flowtabl...

9.8CVSS6.4AI score0.00465EPSS
SaveExploits1References18
AstraLinux
AstraLinux
added 2026/06/23 11:48 a.m.5 views

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Bridge: mcast: Fixed a use-after-free during router port configuration. The bridge maintains a global list of ports behind which a multicast router resides. This list is consulted during forwarding to ensure that multicast packet...

7.8CVSS6.2AI score0.00253EPSS
SaveExploits1References3
Rows per page
Query Builder