Important: Red Hat Security Advisory: kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_143_1, and kpatch-patch-4_18_0-477_97_1 security update

An update for multiple packages is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete

A flaw was found in the Linux kernel's xfrm IPSec framework subsystem. This vulnerability, a use-after-free, occurs when the system incorrectly manages memory related to security policies, specifically during the deletion of xfrmstate lists. An attacker with local access could exploit this flaw b...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: xfrm: Validates the prefix length of new SA entries using the SA family, when sel.family is unset. This extends the validation introduced in commit 07bf7908950a “xfrm: Validates address prefix lengths in the xfrm selector”. The...

DirtyFrag-go

dirtyfrag-go Due bug. Una shell. Nessuna scrittura su disco. Porting Go di dirtyfrag CVE-2026-43284 / CVE-2026-43500. Come funziona tl;dr La classe di bug risiede nel sottosistema XFRM del kernel Linux. Quando una pagina di un file viene passata con splice in una pipe e poi in un socket...

Fragnesia-go

fragnesia-go Una SA. Un byte alla volta. Nessuna race. Porting Go di fragnesia CVE-2026-46300. Membro della classe di vulnerabilità Dirty Frag - bug separato, stessa superficie, patch propria. Come funziona tl;dr Il bug si trova nel sottosistema Linux XFRM ESP-in-TCP. Quando TCPULP espintcp viene...

CVE-2026-46300_Fragnesia

🧨 Fragnesia — CVE-2026-46300 Toolkit di Audit ed Exploit LPE per Linux Kernel · Regressione Page-Cache / XFRM ESP-in-TCP espintcp Audit interattivo → Rilevamento dei prerequisiti LPE → Esecuzione automatica dell'exploit dopo conferma ⚠️ Avvertenze etiche e legali Questo strumento è solo per test d...

MINI-738P-XFRM-V3Q8

Bulletin has no description...

CVE-2026-72451

A flaw was found in the Linux kernel's xfrm IPSec framework component. A race condition exists in the xfrm state cache insertion logic. This occurs because the validity of a state is checked before a global lock is acquired, allowing another process to invalidate the state before it is added to t...

CVE-2026-72463

A flaw was found in the Linux kernel's xfrm IP eXtensible FRamework for IPsec subsystem. This vulnerability occurs during asynchronous resumption where the xfrmrcvcb function can modify a network device without properly managing its reference count. This improper handling leads to a use-after-fre...

CVE-2026-72450

A flaw was found in the Linux kernel's xfrm subsystem. This vulnerability, a shift-out-of-bounds error, occurs when an unspecified address family AFUNSPEC selector with a large prefix length is incorrectly matched against an IPv4 flow. An attacker could potentially exploit this by sending special...

CVE-2026-72137

A flaw was found in the xfrm subsystem of the Linux kernel, specifically within the natkeepalive component. This vulnerability occurs when the natkeepalivesend function attempts to free a network packet buffer skb that may have already been freed by the networking stack. This double free can lead...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101968)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101968 advisory. In the Linux kernel, the following vulnerability has been resolved: net: afkey: initialize algkeylen for IPComp states pfkeymsg2xfrmstate handles the IPComp...

Linux Distros Unpatched Vulnerability : CVE-2026-72137

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: natkeepalive: avoid double free on send error natkeepalivesend frees the keepalive skb whenever the IPv4 or IPv6 send helper reports an error. That cleanu...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102003)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102003 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: always flush state and policy upon NETDEVUNREGISTER event syzbot is reporting that struct...

Linux Distros Unpatched Vulnerability : CVE-2026-72451

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: Fix xfrm state cache insertion race The xfrm input state cache insertion code checks the validity of the state before acquiring the global xfrmstatelock...

Linux Distros Unpatched Vulnerability : CVE-2026-72450

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: validate selector family and prefixlen during match syzbot reported a shift-out-of-bounds in xfrmselectormatch due to AFUNSPEC selector with large prefixl...

Linux Distros Unpatched Vulnerability : CVE-2026-72136

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: xfrminterface: require CAPNETADMIN in the device netns for changelink xfrmichangelink operates on at most two netns, devnetdev and the interface link netn...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100097)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100097 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: restore combined single-frag length gate The ESP out-of-place fast path appends the...

CVE-2026-72463

In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix dev use-after-free in xfrm async resumption xfrm async resumption hold skb-dev refcnt until after transportfinish. However, xfrmrcvcb may modify skb-dev to tunnel dev without taking device reference, such as vtircvcb. T...

CVE-2026-72451

In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix xfrm state cache insertion race The xfrm input state cache insertion code checks the validity of the state before acquiring the global xfrmstatelock. Thus it's possible for someone else to kill the state after it passed...