Linux Distros Unpatched Vulnerability : CVE-2026-6244

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libpcap BPF interpreter for the 'div k' and 'mod k' ALU instructions does not check whether the immediate value is zero. In particular uncommon use cases a...

Linux Distros Unpatched Vulnerability : CVE-2026-85458

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height. CVE-2026-85458 Note that Nessus relies on the presence of the package ...

AZL-99588 CVE-2026-80847 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: tcp: clamp route advmss to TCPMINMSS tcpselectinitialwindow assumes that callers never pass an MSS smaller than 1, but route-derived advmss values can violate that assumption. A too-small explicit RTAXADVMSS is one way to get...

CVE-2026-80847

In the Linux kernel, the following vulnerability has been resolved: tcp: clamp route advmss to TCPMINMSS tcpselectinitialwindow assumes that callers never pass an MSS smaller than 1, but route-derived advmss values can violate that assumption. A too-small explicit RTAXADVMSS is one way to get...

CVE-2026-80847 tcp: clamp route advmss to TCP_MIN_MSS

In the Linux kernel, the following vulnerability has been resolved: tcp: clamp route advmss to TCPMINMSS tcpselectinitialwindow assumes that callers never pass an MSS smaller than 1, but route-derived advmss values can violate that assumption. A too-small explicit RTAXADVMSS is one way to get...

EUVD-2026-71297

In the Linux kernel, the following vulnerability has been resolved: tcp: clamp route advmss to TCPMINMSS tcpselectinitialwindow assumes that callers never pass an MSS smaller than 1, but route-derived advmss values can violate that assumption. A too-small explicit RTAXADVMSS is one way to get...

CVE-2026-80847

CVE-2026-80847 affects the Linux kernel TCP subsystem. The root cause is a divide-by-zero in tcp_select_initial_window(), which assumes the advertised MSS (advmss) is at least 1. Route-derived advmss values can violate this assumption—either via an explicit too-small RTAX_ADVMSS or through the de...

CVE-2026-80847 tcp: clamp route advmss to TCP_MIN_MSS

In the Linux kernel, the following vulnerability has been resolved: tcp: clamp route advmss to TCPMINMSS tcpselectinitialwindow assumes that callers never pass an MSS smaller than 1, but route-derived advmss values can violate that assumption. A too-small explicit RTAXADVMSS is one way to get...

CVE-2026-80794 nfc: nci: fix uninit-value in the RF discover/activated NTF handlers

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix uninit-value in the RF discover/activated NTF handlers ncirfdiscoverntfpacket and ncirfintfactivatedntfpacket each parse a notification into an on-stack struct ncirfdiscoverntf / ncirfintfactivatedntf that is not...

CVE-2026-80794

This Linux kernel vulnerability affects the NFC NCI subsystem, specifically the nci_rf_discover_ntf_packet() and nci_rf_intf_activated_ntf_packet() handlers. The root cause is that on-stack notification structs are not zero-initialised before parsing. When a notification reports a zero rf_tech_sp...

Exploit for CVE-2026-85046

CVE-2026-85046 Chrome Zero-Day Vulnerability Exploited in the...

net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header

...

af_packet: Don't send zero-byte data in tpacket_snd().

...

GPT-6 Astra Scores 100% on ExploitBench as OpenAI Blocks PoC Exploit Requests

OpenAI on Thursday officially unveiled GPT‑6 Astra , which it described as the "world's most intelligent and aligned model." The development comes days after the artificial intelligence AI company said the model had reached the "Critical" cybersecurity capability threshold under its Preparedness...

kernel: iomap: fix out-of-bounds bitmap_set() with zero-length range

A flaw was found in the Linux kernel's iomap subsystem. An unsigned subtraction underflow occurs when ifssetrangedirty or ifssetrangeuptodate are called with a zero-length range. This can lead to an out-of-bounds write via bitmapset, potentially allowing a local attacker to cause memory corruptio...

kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr

A flaw was found in the Linux kernel's NFSv4/pNFS implementation. The nfs4decodempdsaddr function, responsible for decoding network address information, does not properly handle zero-length raddr opaque data. A malicious or compromised metadata server can exploit this by providing a zero-length...

kernel: iomap: fix out-of-bounds bitmap_set() with zero-length range

A flaw was found in the Linux kernel's iomap subsystem. An unsigned subtraction underflow occurs when ifssetrangedirty or ifssetrangeuptodate are called with a zero-length range. This can lead to an out-of-bounds write via bitmapset, potentially allowing a local attacker to cause memory corruptio...

PT-2026-85730

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.5-1.1 Description An out-of-bounds write exists in the tls append frag function within the Linux kernel. The issue occurs when tls push data fails to properly check for available space in an open record due t...

Linux Distros Unpatched Vulnerability : CVE-2026-80742

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afpacket: Don't send zero-byte data in tpacketsnd. syzbot reported a WARNING in devqueuexmit triggered via tpacketsnd: skbassertlen WARNING: at...

Linux Distros Unpatched Vulnerability : CVE-2026-80731

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: remove CAPSYSRAWIO zero-padding in devvalidateheader devvalidateheader reads dev-hardheaderlen directly when zero-padding short link layer headers for...