85 matches found
Astra Linux – Vulnerability in Linux
A heap out-of-bounds write that affects Linux since v2.6.19-rc1 was discovered in net/netfilter/xtables.c. This vulnerability allows an attacker to gain privileges or cause a Denial-of-Service attack through heap memory corruption by manipulating the user name space...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: restricting xtcheckmatch/xtchecktarget extensions for NFPROTOARP Weiming Shi states that: The xtmatch and xttarget structures registered with NFPROTOUNSPEC can be loaded by any protocol family through nftcompa...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: netfilter: In the xtables function, there are walkers that attempt to read the last byte of options. When the last byte is a non-single-byte option type, these walkers may read opi + 1 beyond the end of the option area. A explici...
Important: kernel6.12
Issue Overview: An issue in the Linux kernel's virtio-net/TAP networking path could allow an actor with privileged access inside a guest virtual machine to send specially crafted network packets that corrupt host kernel memory on KVM-based hypervisors running unpatched Linux kernel versions 4.4...
Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-3196)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3196 advisory. An issue in the Linux kernel's virtio-net/TAP networking path could allow an actor with privileged access inside a guest virtual machine to send specially crafted network packets that corrupt...
ROS-20261009-73-0001
The vulnerability of the netfilter xtables component in Linux operating systems is related to errors that occur when a line or array ends with a zero character. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and accessibility of protected information...
kernel: netfilter: x_tables: add and use xtables_unregister_table_exit
A flaw was found in the Linux kernel's netfilter xtables component. This vulnerability occurs when a userspace process attempts to re-instantiate a netfilter table after the module has been removed. Due to an incomplete unregistration process, the table cannot be properly re-established,...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: Ensure that the names are null-terminated. Reject names that lack a \0 character before passing them to functions that expect c-string parameters. The fixes tag indicates the most recent commit that requires...
EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-3345)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : dlm: validate length in dlmsearchrsbtreeCVE-2026-43125 net: annotate data-races around sk-skdataready,writespaceCVE-2026-23302 netfilter: ctnetlin...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001504)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001504 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: fix LED ID check in ledtgcheck Syzbot has reported the following BUG detected...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100549)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100549 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: guard option walkers against 1-byte tail reads When the last byte of options ...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099966)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099966 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: avoid leaking percpu counter pointers The native and compat get-entries paths...
CVE-2026-64079
A flaw was found in the Linux kernel's netfilter xtables component. A race condition occurs when a network namespace netns table is registered, making it visible with a null operations ops pointer. If a pernet exit operation runs concurrently, it can attempt to unregister the table using this nul...
CVE-2026-64078
A flaw was found in the Linux kernel's netfilter xtables component. This vulnerability occurs when a userspace process attempts to re-instantiate a netfilter table after the module has been removed. Due to an incomplete unregistration process, the table cannot be properly re-established,...
AZL-92724 CVE-2026-64079 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: allocate hook ops while under mutex arp/ip6tregistertable add the table to the per-netns list via xtregistertable before allocating the per-netns hook ops copy via kmemduparray. This leaves a window where the...
AZL-92763 CVE-2026-64078 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: add and use xtablesunregistertableexit Previous change added xtablesunregistertablepreexit to detach the table from the packetpath and to unlink it from the active table list. In case of rmmod, userspace that ...
CVE-2026-64079 netfilter: x_tables: allocate hook ops while under mutex
In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: allocate hook ops while under mutex arp/ip6tregistertable add the table to the per-netns list via xtregistertable before allocating the per-netns hook ops copy via kmemduparray. This leaves a window where the...
CVE-2026-64079
In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: allocate hook ops while under mutex arp/ip6tregistertable add the table to the per-netns list via xtregistertable before allocating the per-netns hook ops copy via kmemduparray. This leaves a window where the...
CVE-2026-64078 netfilter: x_tables: add and use xtables_unregister_table_exit
In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: add and use xtablesunregistertableexit Previous change added xtablesunregistertablepreexit to detach the table from the packetpath and to unlink it from the active table list. In case of rmmod, userspace that ...
CVE-2026-64079: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: allocate hook ops while under mutex arp/ip6tregistertable add the table to the per-netns list via xtregistertable before allocating the per-netns hook ops copy via kmemduparray. This leaves a window where the...