Lucene search
+L

373 matches found

Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•24 views

PT-2026-90203

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the openvswitch module where the queue userspace packet function incorrectly handles packet socket buffers skb. When an error occurs, the do execute actions function...

7.8CVSS5.9AI score0.00129EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•4 views

PT-2026-96373

In the Linux kernel, the following vulnerability has been resolved: xdp: fix zero-copy frame layout xdp convert zc to xdp frame clones an XSK packet into an order-0 page and advertises PAGE SIZE as its frame size. It allows the copied frame to occupy the page tail needed by skb shared info and...

9.8CVSS7.5AI score0.00514EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/11 12:00 a.m.•4 views

CVE-2026-81002: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xdp: fix zero-copy frame layout xdpconvertzctoxdpframe clones an XSK packet into an order-0 page and advertises PAGESIZE as its frame size. It allows the copied frame to occupy the page tail needed by skbsharedinfo and records ze...

9.8CVSS7.5AI score0.00514EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/04 12:00 a.m.•20 views

PT-2026-85730

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.5-1.1 Description An out-of-bounds write exists in the tls append frag function within the Linux kernel. The issue occurs when tls push data fails to properly check for available space in an open record due t...

6.5AI score0.00161EPSS
SaveExploits0
NVD
NVD
•added 2026/08/28 8:16 a.m.•26 views

CVE-2026-80715

In the Linux kernel, the following vulnerability has been resolved: igc: remove napisynchronize in igcdown When an AFXDP zero-copy application is killed abruptly, the XSK pool is torn down but NAPI keeps polling. igccleanrxirqzc then returns the full budget on every poll, so napicompletedone neve...

0.00161EPSS
SaveExploits0References7
osv_azl
osv_azl
•added 2026/08/28 8:16 a.m.•18 views

AZL-98112 CVE-2026-80715 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: igc: remove napisynchronize in igcdown When an AFXDP zero-copy application is killed abruptly, the XSK pool is torn down but NAPI keeps polling. igccleanrxirqzc then returns the full budget on every poll, so napicompletedone neve...

5.9AI score0.00161EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/08/28 8:16 a.m.•16 views

UBUNTU-CVE-2026-80715

In the Linux kernel, the following vulnerability has been resolved: igc: remove napisynchronize in igcdown When an AFXDP zero-copy application is killed abruptly, the XSK pool is torn down but NAPI keeps polling. igccleanrxirqzc then returns the full budget on every poll, so napicompletedone neve...

6.7CVSS6.2AI score0.00161EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2026/08/28 8:16 a.m.•21 views

CVE-2026-80715

In the Linux kernel, the following vulnerability has been resolved: igc: remove napisynchronize in igcdown When an AFXDP zero-copy application is killed abruptly, the XSK pool is torn down but NAPI keeps polling. igccleanrxirqzc then returns the full budget on every poll, so napicompletedone neve...

5.9AI score0.00161EPSS
SaveExploits0References9
CVE
CVE
•added 2026/08/28 6:53 a.m.•45 views

CVE-2026-80715

In the Linux kernel igc (Intel Gigabit Ethernet controller) driver, an AF_XDP zero-copy application killed abruptly leaves NAPI polling in a stuck state: napi_complete_done() never clears NAPI_STATE_SCHED. Because igc_down() calls napi_synchronize() before napi_disable(), it spins indefinitely, c...

5.9AI score0.00161EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/08/28 6:53 a.m.•52 views

CVE-2026-80715 igc: remove napi_synchronize() in igc_down()

In the Linux kernel, the following vulnerability has been resolved: igc: remove napisynchronize in igcdown When an AFXDP zero-copy application is killed abruptly, the XSK pool is torn down but NAPI keeps polling. igccleanrxirqzc then returns the full budget on every poll, so napicompletedone neve...

0.00161EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/08/28 6:53 a.m.•20 views

EUVD-2026-67450

In the Linux kernel, the following vulnerability has been resolved: igc: remove napisynchronize in igcdown When an AFXDP zero-copy application is killed abruptly, the XSK pool is torn down but NAPI keeps polling. igccleanrxirqzc then returns the full budget on every poll, so napicompletedone neve...

5.9AI score0.00161EPSS
SaveExploits0References7
osv_cve
osv_cve
•added 2026/08/28 6:53 a.m.•16 views

CVE-2026-80715 igc: remove napi_synchronize() in igc_down()

In the Linux kernel, the following vulnerability has been resolved: igc: remove napisynchronize in igcdown When an AFXDP zero-copy application is killed abruptly, the XSK pool is torn down but NAPI keeps polling. igccleanrxirqzc then returns the full budget on every poll, so napicompletedone neve...

5.8AI score0.00161EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2026/08/28 12:00 a.m.•25 views

Linux Distros Unpatched Vulnerability : CVE-2026-80715

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - igc: remove napisynchronize in igcdown When an AFXDP zero-copy application is killed abruptly, the XSK pool is torn down but NAPI keeps polling. igccleanrxirqzc...

5.8AI score0.00161EPSS
SaveExploits0References3
AstraLinux
AstraLinux
•added 2026/08/24 10:19 a.m.•13 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: xsk: Reclaim invalid Tx descriptors in ZC batch path The zero-copy Tx batch parser stops when it encounters an invalid descriptor. If this happens after one or more continuation descriptors, the Tx consumer can be advanced past...

5.9AI score0.00206EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2026/08/23 12:04 a.m.•21 views

SUSE CVE-2026-74707

In the Linux kernel, the following vulnerability has been resolved: xsk: validate metadata when processing requests The zero-copy path validates TX metadata while obtaining the descriptor context, then reads it again later when preparing the hardware request. User space can change the metadata...

7.8CVSS5.8AI score0.00184EPSS
SaveExploits0References3
NVD
NVD
•added 2026/08/22 4:16 p.m.•25 views

CVE-2026-74707

In the Linux kernel, the following vulnerability has been resolved: xsk: validate metadata when processing requests The zero-copy path validates TX metadata while obtaining the descriptor context, then reads it again later when preparing the hardware request. User space can change the metadata...

7.8CVSS0.00184EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2026/08/22 4:16 p.m.•14 views

UBUNTU-CVE-2026-74707

In the Linux kernel, the following vulnerability has been resolved: xsk: validate metadata when processing requests The zero-copy path validates TX metadata while obtaining the descriptor context, then reads it again later when preparing the hardware request. User space can change the metadata...

7.8CVSS6.1AI score0.00184EPSS
SaveExploits0References5
osv_ubuntu
osv_ubuntu
•added 2026/08/22 4:16 p.m.•13 views

UBUNTU-CVE-2026-74611

In the Linux kernel, the following vulnerability has been resolved: tls: rx: restore msgiter before TLS 1.3 optimistic retry tlsdecryptsg advances msg-msgiter when it maps user pages for the optimistic TLS 1.3 zero-copy path. If the decrypted record turns out not to be unpadded application data,...

9.8CVSS6.2AI score0.00649EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2026/08/22 4:16 p.m.•15 views

CVE-2026-74707

In the Linux kernel, the following vulnerability has been resolved: xsk: validate metadata when processing requests The zero-copy path validates TX metadata while obtaining the descriptor context, then reads it again later when preparing the hardware request. User space can change the metadata...

7.8CVSS5.8AI score0.00184EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/08/22 3:33 p.m.•20 views

EUVD-2026-64394

In the Linux kernel, the following vulnerability has been resolved: xsk: validate metadata when processing requests The zero-copy path validates TX metadata while obtaining the descriptor context, then reads it again later when preparing the hardware request. User space can change the metadata...

5.8AI score0.00184EPSS
SaveExploits0References3
Rows per page
Query Builder