Количество 20
Количество 20
GHSA-hf2p-g3jq-w2mx
In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_eui64: reject invalid MAC header for all packets `eui64_mt6()` derives a modified EUI-64 from the Ethernet source address and compares it with the low 64 bits of the IPv6 source address. The existing guard only rejects an invalid MAC header when `par->fragoff != 0`. For packets with `par->fragoff == 0`, `eui64_mt6()` can still reach `eth_hdr(skb)` even when the MAC header is not valid. Fix this by removing the `par->fragoff != 0` condition so that packets with an invalid MAC header are rejected before accessing `eth_hdr(skb)`.
CVE-2026-31685
In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_eui64: reject invalid MAC header for all packets `eui64_mt6()` derives a modified EUI-64 from the Ethernet source address and compares it with the low 64 bits of the IPv6 source address. The existing guard only rejects an invalid MAC header when `par->fragoff != 0`. For packets with `par->fragoff == 0`, `eui64_mt6()` can still reach `eth_hdr(skb)` even when the MAC header is not valid. Fix this by removing the `par->fragoff != 0` condition so that packets with an invalid MAC header are rejected before accessing `eth_hdr(skb)`.
CVE-2026-31685
In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_eui64: reject invalid MAC header for all packets `eui64_mt6()` derives a modified EUI-64 from the Ethernet source address and compares it with the low 64 bits of the IPv6 source address. The existing guard only rejects an invalid MAC header when `par->fragoff != 0`. For packets with `par->fragoff == 0`, `eui64_mt6()` can still reach `eth_hdr(skb)` even when the MAC header is not valid. Fix this by removing the `par->fragoff != 0` condition so that packets with an invalid MAC header are rejected before accessing `eth_hdr(skb)`.
CVE-2026-31685
In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_eui64: reject invalid MAC header for all packets `eui64_mt6()` derives a modified EUI-64 from the Ethernet source address and compares it with the low 64 bits of the IPv6 source address. The existing guard only rejects an invalid MAC header when `par->fragoff != 0`. For packets with `par->fragoff == 0`, `eui64_mt6()` can still reach `eth_hdr(skb)` even when the MAC header is not valid. Fix this by removing the `par->fragoff != 0` condition so that packets with an invalid MAC header are rejected before accessing `eth_hdr(skb)`.
CVE-2026-31685
netfilter: ip6t_eui64: reject invalid MAC header for all packets
CVE-2026-31685
In the Linux kernel, the following vulnerability has been resolved: n ...
BDU:2026-08760
Уязвимость функции eui64_mt6() ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании
SUSE-SU-2026:2317-1
Security update for the Linux Kernel
RLSA-2026:21706
Important: kernel security update
RLSA-2026:21557
Important: kernel security update
ELSA-2026-21706
ELSA-2026-21706: kernel security update (IMPORTANT)
RLSA-2026:21556
Important: kernel security update
ELSA-2026-21556
ELSA-2026-21556: kernel security update (IMPORTANT)
SUSE-SU-2026:2202-1
Security update for the Linux Kernel
SUSE-SU-2026:2215-1
Security update for the Linux Kernel
SUSE-SU-2026:2195-1
Security update for the Linux Kernel
SUSE-SU-2026:2068-1
Security update for the Linux Kernel
SUSE-SU-2026:2217-1
Security update for the Linux Kernel
SUSE-SU-2026:2238-1
Security update for the Linux Kernel
openSUSE-SU-2026:20826-1
Security update for the Linux Kernel
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-hf2p-g3jq-w2mx In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_eui64: reject invalid MAC header for all packets `eui64_mt6()` derives a modified EUI-64 from the Ethernet source address and compares it with the low 64 bits of the IPv6 source address. The existing guard only rejects an invalid MAC header when `par->fragoff != 0`. For packets with `par->fragoff == 0`, `eui64_mt6()` can still reach `eth_hdr(skb)` even when the MAC header is not valid. Fix this by removing the `par->fragoff != 0` condition so that packets with an invalid MAC header are rejected before accessing `eth_hdr(skb)`. | CVSS3: 9.4 | 0% Низкий | 3 месяца назад |
 | CVE-2026-31685 In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_eui64: reject invalid MAC header for all packets `eui64_mt6()` derives a modified EUI-64 from the Ethernet source address and compares it with the low 64 bits of the IPv6 source address. The existing guard only rejects an invalid MAC header when `par->fragoff != 0`. For packets with `par->fragoff == 0`, `eui64_mt6()` can still reach `eth_hdr(skb)` even when the MAC header is not valid. Fix this by removing the `par->fragoff != 0` condition so that packets with an invalid MAC header are rejected before accessing `eth_hdr(skb)`. | CVSS3: 9.4 | 0% Низкий | 3 месяца назад |
 | CVE-2026-31685 In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_eui64: reject invalid MAC header for all packets `eui64_mt6()` derives a modified EUI-64 from the Ethernet source address and compares it with the low 64 bits of the IPv6 source address. The existing guard only rejects an invalid MAC header when `par->fragoff != 0`. For packets with `par->fragoff == 0`, `eui64_mt6()` can still reach `eth_hdr(skb)` even when the MAC header is not valid. Fix this by removing the `par->fragoff != 0` condition so that packets with an invalid MAC header are rejected before accessing `eth_hdr(skb)`. | CVSS3: 7.1 | 0% Низкий | 3 месяца назад |
 | CVE-2026-31685 In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_eui64: reject invalid MAC header for all packets `eui64_mt6()` derives a modified EUI-64 from the Ethernet source address and compares it with the low 64 bits of the IPv6 source address. The existing guard only rejects an invalid MAC header when `par->fragoff != 0`. For packets with `par->fragoff == 0`, `eui64_mt6()` can still reach `eth_hdr(skb)` even when the MAC header is not valid. Fix this by removing the `par->fragoff != 0` condition so that packets with an invalid MAC header are rejected before accessing `eth_hdr(skb)`. | CVSS3: 9.4 | 0% Низкий | 3 месяца назад |
 | CVE-2026-31685 netfilter: ip6t_eui64: reject invalid MAC header for all packets | CVSS3: 5.5 | 0% Низкий | 3 месяца назад |
| CVE-2026-31685 In the Linux kernel, the following vulnerability has been resolved: n ... | CVSS3: 9.4 | 0% Низкий | 3 месяца назад |
 | BDU:2026-08760 Уязвимость функции eui64_mt6() ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 9.4 | 0% Низкий | 4 месяца назад |
 | SUSE-SU-2026:2317-1 Security update for the Linux Kernel | около 2 месяцев назад | ||
 | RLSA-2026:21706 Important: kernel security update | 2 месяца назад | ||
| RLSA-2026:21557 Important: kernel security update | 2 месяца назад | ||
| ELSA-2026-21706 ELSA-2026-21706: kernel security update (IMPORTANT) | 2 месяца назад | ||
| RLSA-2026:21556 Important: kernel security update | 2 месяца назад | ||
| ELSA-2026-21556 ELSA-2026-21556: kernel security update (IMPORTANT) | около 1 месяца назад | ||
| SUSE-SU-2026:2202-1 Security update for the Linux Kernel | 2 месяца назад | ||
| SUSE-SU-2026:2215-1 Security update for the Linux Kernel | 2 месяца назад | ||
| SUSE-SU-2026:2195-1 Security update for the Linux Kernel | 2 месяца назад | ||
| SUSE-SU-2026:2068-1 Security update for the Linux Kernel | 2 месяца назад | ||
| SUSE-SU-2026:2217-1 Security update for the Linux Kernel | 2 месяца назад | ||
| SUSE-SU-2026:2238-1 Security update for the Linux Kernel | 2 месяца назад | ||
| openSUSE-SU-2026:20826-1 Security update for the Linux Kernel | 2 месяца назад |
Уязвимостей на страницу