Lucene search
+L

99 matches found

Positive Technologies
Positive Technologies
added 2026/08/22 12:00 a.m.21 views

PT-2026-79618

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: avoid refilling the RX queue after teardown Commit b917507e5ad9 "vsock/virtio: stop workers during the .remove" made the RX worker jump to its common exit when rx run is clear. That exit still refills the RX queue...

5.7AI score0.00126EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2026/08/22 12:00 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-74613

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vsock/virtio: avoid refilling the RX queue after teardown Commit b917507e5ad9 vsock/virtio: stop workers during the .remove made the RX worker jump to its commo...

7.8CVSS5.7AI score0.00126EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/22 12:00 a.m.28 views

PT-2026-79619

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: read virtqueues under worker locks Commit bd50c5dc182b "vsock/virtio: add support for device suspend/resume" made the run flags transition from false to true when restore installs replacement virtqueues. The RX, TX...

5.4AI score0.00142EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2026/08/22 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-74614

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vsock/virtio: read virtqueues under worker locks Commit bd50c5dc182b vsock/virtio: add support for device suspend/resume made the run flags transition from fals...

8.4CVSS6.3AI score0.00142EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/07/21 11:10 p.m.13 views

CVE-2026-63970

A flaw was found in the Linux kernel's vsock/virtio transport. This vulnerability occurs when the system processes zerocopy socket buffers skbs and encounters an error during memory allocation for fixed-buffer vectored data. The system may attempt to free memory incorrectly, leading to a...

7.8CVSS5.3AI score0.00175EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/07/21 1:02 p.m.15 views

SUSE CVE-2026-63970

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: bind uarg before filling zerocopy skb virtiotransportsendpktinfo allocates or reuses the zerocopy uarg before entering the send loop, but virtiotransportallocskb still fills the skb before it inherits that uarg. Whe...

7.8CVSS5.3AI score0.00175EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/07/19 2:55 p.m.25 views

EUVD-2026-45743

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: bind uarg before filling zerocopy skb virtiotransportsendpktinfo allocates or reuses the zerocopy uarg before entering the send loop, but virtiotransportallocskb still fills the skb before it inherits that uarg. Whe...

5.4AI score0.00175EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/15 5:03 a.m.15 views

SUSE CVE-2026-53365

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-skb sends When a large message is fragmented into multiple skbs, the zerocopy uarg is only allocated and attached to the last skb in the loop. Non-final skbs carry pinned user pages...

7.8CVSS5.3AI score0.00197EPSS
SaveExploits2References4
OSV
OSV
added 2026/07/13 5:33 p.m.19 views

CVE-2026-53365 vsock/virtio: fix zerocopy completion for multi-skb sends

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-skb sends When a large message is fragmented into multiple skbs, the zerocopy uarg is only allocated and attached to the last skb in the loop. Non-final skbs carry pinned user pages...

7.8CVSS6AI score
SaveExploits0References8
Debian CVE
Debian CVE
added 2026/07/13 5:33 p.m.14 views

CVE-2026-53365

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-skb sends When a large message is fragmented into multiple skbs, the zerocopy uarg is only allocated and attached to the last skb in the loop. Non-final skbs carry pinned user pages...

7.8CVSS5.2AI score0.00197EPSS
SaveExploits2
CVE
CVE
added 2026/07/13 5:33 p.m.104 views

CVE-2026-53365

CVE-2026-53365 is a local privilege escalation vulnerability in the Linux kernel's vsock/virtio zerocopy path (net/vmw_vsock/virtio_transport_common.c). When large messages are fragmented into multiple SKBs, the zerocopy uarg is only attached to the last SKB, leaving non-final SKBs with pinned us...

7.8CVSS6AI score0.00197EPSS
SaveExploits2References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/07/13 5:33 p.m.5 views

CVE-2026-53365 vsock/virtio: fix zerocopy completion for multi-skb sends

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-skb sends When a large message is fragmented into multiple skbs, the zerocopy uarg is only allocated and attached to the last skb in the loop. Non-final skbs carry pinned user pages...

5.3AI score0.00197EPSS
SaveExploits2References4
ATTACKERKB
ATTACKERKB
added 2026/07/13 5:33 p.m.7 views

CVE-2026-53365

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-skb sends When a large message is fragmented into multiple skbs, the zerocopy uarg is only allocated and attached to the last skb in the loop. Non-final skbs carry pinned user pages...

5.5CVSS6AI score0.00197EPSS
SaveExploits2References5Affected Software1
Cvelist
Cvelist
added 2026/07/13 5:33 p.m.54 views

CVE-2026-53365 vsock/virtio: fix zerocopy completion for multi-skb sends

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-skb sends When a large message is fragmented into multiple skbs, the zerocopy uarg is only allocated and attached to the last skb in the loop. Non-final skbs carry pinned user pages...

0.00197EPSS
SaveExploits2References4
Tenable Nessus
Tenable Nessus
added 2026/07/13 12:00 a.m.23 views

Linux Distros Unpatched Vulnerability : CVE-2026-53365

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vsock/virtio: fix zerocopy completion for multi-skb sends When a large message is fragmented into multiple skbs, the zerocopy uarg is only allocated and attache...

7.8CVSS7.1AI score0.00197EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
added 2026/06/28 12:00 a.m.18 views

Linux Distros Unpatched Vulnerability : CVE-2026-53132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vsock/virtio: fix potential unbounded skb queue virtiotransportincrxpkt checks vvs-rxbytes + len vvs-bufalloc. virtiotransportrecvenqueue skips coalescing for...

7.1CVSS5.9AI score0.00138EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/06/26 8:20 a.m.22 views

CVE-2026-53132

A flaw was found in the Linux kernel's vsock/virtio component. A remote attacker could send specially crafted packets with zero length and an End-of-Message EOM flag. This could lead to an unbounded queue of packets, consuming excessive memory and potentially causing a Denial of Service DoS due t...

7.1CVSS5.8AI score0.00138EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/06/26 2:12 a.m.20 views

SUSE CVE-2026-53132

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix potential unbounded skb queue virtiotransportincrxpkt checks vvs-rxbytes + len vvs-bufalloc. virtiotransportrecvenqueue skips coalescing for packets with VIRTIOVSOCKSEQEOM. If fed with packets with len == 0 and...

5.5CVSS5.8AI score0.00138EPSS
SaveExploits0References17
RedhatCVE
RedhatCVE
added 2026/06/25 6:17 p.m.13 views

CVE-2026-52994

A flaw was found in the Linux kernel's vsock/virtio component. This vulnerability involves an accounting error in the MSGZEROCOPY pinned-pages mechanism, where the system's resource limit for locked memory RLIMITMEMLOCK may not be properly enforced. This could allow a local attacker or a maliciou...

5.5CVSS5.8AI score0.00126EPSS
SaveExploits0References4
OSV
OSV
added 2026/06/25 9:16 a.m.16 views

AZL-90384 CVE-2026-53132 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix potential unbounded skb queue virtiotransportincrxpkt checks vvs-rxbytes + len vvs-bufalloc. virtiotransportrecvenqueue skips coalescing for packets with VIRTIOVSOCKSEQEOM. If fed with packets with len == 0 and...

7.1CVSS5.8AI score0.00138EPSS
SaveExploits0References1
Rows per page
Query Builder