188 matches found
ROS-20260929-73-0077
The vulnerability of the functions x25queuerxframe and x25clearqueues in the net/x25/x25in.c module, which are part of the networking functions in the Linux kernel, involves copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability...
Astra Linux – Vulnerability in Linux 5.10, Linux
In the Linux kernel, the following vulnerability has been resolved: net/x25: Fixed a leak in x25lapbreceiveframe. x25lapbreceiveframe uses skbcopy to obtain a private copy of an skb. The newly created skb should be freed in the under-sized/fragmented skb error handling path. Otherwise, a memory...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: net/x25: Fixed an overflow issue when accumulating packets. Added a check to ensure that x25sock.fraglen does not exceed its limit. The fraglen value also needs to be reset when purging the fragmentqueue in x25clearqueues...
Astra Linux – Vulnerability in Linux
An out-of-bounds memory access flaw was discovered in the x25bind function in the net/x25/afx25.c file within the Linux kernel version v5.12-rc5. A failure in the bounds check allows a local attacker with a user account on the system to access out-of-bounds memory, resulting in a system crash or...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: net/x25: Fixed a potential double-free of the skb object. When allocskb fails in x25queuerxframe, it calls kfreeskbskb at line 48 and returns 1 error. This error propagates through the call chain as follows: x25queuerxframe retur...
SUSE CVE-2026-74628
In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free of the socket by its timers The x25 timers are armed with modtimer and cancelled with timerdelete, so a pending timer holds no reference on the socket and a cancel does not wait for a callback already...
CVE-2026-74628
A flaw was found in the Linux kernel's x25 network protocol. The way timers are managed for x25 sockets can lead to a use-after-free vulnerability. Specifically, a timer might be rearmed after the associated socket has been deallocated, causing the system to access freed memory. This could...
AZL-97077 CVE-2026-74628 affecting package kernel for versions less than 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free of the socket by its timers The x25 timers are armed with modtimer and cancelled with timerdelete, so a pending timer holds no reference on the socket and a cancel does not wait for a callback already...
CVE-2026-74628
In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free of the socket by its timers The x25 timers are armed with modtimer and cancelled with timerdelete, so a pending timer holds no reference on the socket and a cancel does not wait for a callback already...
UBUNTU-CVE-2026-74628
In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free of the socket by its timers The x25 timers are armed with modtimer and cancelled with timerdelete, so a pending timer holds no reference on the socket and a cancel does not wait for a callback already...
CVE-2026-74628
In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free of the socket by its timers The x25 timers are armed with modtimer and cancelled with timerdelete, so a pending timer holds no reference on the socket and a cancel does not wait for a callback already...
CVE-2026-74628 net/x25: fix use-after-free of the socket by its timers
In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free of the socket by its timers The x25 timers are armed with modtimer and cancelled with timerdelete, so a pending timer holds no reference on the socket and a cancel does not wait for a callback already...
EUVD-2026-64565
In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free of the socket by its timers The x25 timers are armed with modtimer and cancelled with timerdelete, so a pending timer holds no reference on the socket and a cancel does not wait for a callback already...
CVE-2026-74628
CVE-2026-74628 is a use-after-free in the Linux kernel's net/x25 (X.25 protocol) subsystem. The root cause is that x25 timers are armed with mod_timer() and cancelled with timer_delete(), meaning a pending timer holds no reference on the socket. Because x25_heartbeat_expiry() rearms unconditional...
CVE-2026-74628 net/x25: fix use-after-free of the socket by its timers
In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free of the socket by its timers The x25 timers are armed with modtimer and cancelled with timerdelete, so a pending timer holds no reference on the socket and a cancel does not wait for a callback already...
PT-2026-79633
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the x25 network protocol implementation. The x25 timers are managed using mod timer and timer delete, which does not ensure a reference is held on the...
Linux Distros Unpatched Vulnerability : CVE-2026-74628
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/x25: fix use-after-free of the socket by its timers The x25 timers are armed with modtimer and cancelled with timerdelete, so a pending timer holds no...
CVE-2026-74628: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free of the socket by its timers The x25 timers are armed with modtimer and cancelled with timerdelete, so a pending timer holds no reference on the socket and a cancel does not wait for a callback already...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100154)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100154 advisory. In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix potential double free of skb When allocskb fails in x25queuerxframe it calls...
