Количество 74
Количество 74
GHSA-3x6f-vm7x-cgm7
In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In __ip6_append_data(), when the paged-allocation branch is taken (MSG_MORE / NETIF_F_SG / large fraglen), alloclen and pagedlen are computed as alloclen = fragheaderlen + transhdrlen; pagedlen = datalen - transhdrlen; datalen already includes fraggap (datalen = length + fraggap). When fraggap is non-zero, this is not the first skb and transhdrlen is zero. The fraggap bytes carried over from the previous skb are copied just past the fragment headers in the new skb's linear area. The linear area is therefore undersized by fraggap bytes while pagedlen is overstated by the same amount, and the copy writes past skb->end into the trailing skb_shared_info. An unprivileged user can trigger this via a UDPv6 socket using MSG_MORE together with MSG_SPLICE_PAGES. The bad accounting was introduced by commit 773ba4fe9104 ("ipv6: avoid partial copy for zc"). Before co...
BDU:2026-09713
Уязвимость компонента net/ipv6/ip6_output.c ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260828-80-0001
Уязвимость kernel-lt
ROS-20260916-80-0002
Уязвимость kernel-lt
ROS-20260916-73-0002
Уязвимость kernel-lt
RLSA-2026:68531
Important: kernel security update
ELSA-2026-68531
ELSA-2026-68531: kernel security update (IMPORTANT)
SUSE-SU-2026:3008-1
Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise 15 SP6)
RLSA-2026:67471
Important: kernel security, bug fix, and enhancement update
ELSA-2026-67471-0
ELSA-2026-67471-0: kernel security, bug fix, and enhancement update (IMPORTANT)
openSUSE-SU-2026:21388-1
Security update for the Linux Kernel
RLSA-2026:68570
Important: kernel security, bug fix, and enhancement update
ELSA-2026-68570
ELSA-2026-68570: kernel security, bug fix, and enhancement update (IMPORTANT)
SUSE-SU-2026:3083-1
Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP7)
SUSE-SU-2026:3002-1
Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP6)
SUSE-SU-2026:2863-1
Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 15 SP7)
RLSA-2026:36018
Important: kernel security, bug fix, and enhancement update
ELSA-2026-36018
ELSA-2026-36018: kernel security, bug fix, and enhancement update (IMPORTANT)
SUSE-SU-2026:3369-1
Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise 15 SP7)
SUSE-SU-2026:3075-1
Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP7)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
GHSA-3x6f-vm7x-cgm7 In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In __ip6_append_data(), when the paged-allocation branch is taken (MSG_MORE / NETIF_F_SG / large fraglen), alloclen and pagedlen are computed as alloclen = fragheaderlen + transhdrlen; pagedlen = datalen - transhdrlen; datalen already includes fraggap (datalen = length + fraggap). When fraggap is non-zero, this is not the first skb and transhdrlen is zero. The fraggap bytes carried over from the previous skb are copied just past the fragment headers in the new skb's linear area. The linear area is therefore undersized by fraggap bytes while pagedlen is overstated by the same amount, and the copy writes past skb->end into the trailing skb_shared_info. An unprivileged user can trigger this via a UDPv6 socket using MSG_MORE together with MSG_SPLICE_PAGES. The bad accounting was introduced by commit 773ba4fe9104 ("ipv6: avoid partial copy for zc"). Before co... | CVSS3: 7.8 | 1% Низкий | 4 месяца назад | |
BDU:2026-09713 Уязвимость компонента net/ipv6/ip6_output.c ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.8 | 1% Низкий | 4 месяца назад | |
ROS-20260828-80-0001 Уязвимость kernel-lt | CVSS3: 7 | 0% Низкий | около 2 месяцев назад | |
ROS-20260916-80-0002 Уязвимость kernel-lt | CVSS3: 7.8 | 1% Низкий | около 1 месяца назад | |
ROS-20260916-73-0002 Уязвимость kernel-lt | CVSS3: 7.8 | 1% Низкий | около 1 месяца назад | |
RLSA-2026:68531 Important: kernel security update | около 1 месяца назад | |||
ELSA-2026-68531 ELSA-2026-68531: kernel security update (IMPORTANT) | около 1 месяца назад | |||
SUSE-SU-2026:3008-1 Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise 15 SP6) | 3 месяца назад | |||
RLSA-2026:67471 Important: kernel security, bug fix, and enhancement update | около 1 месяца назад | |||
ELSA-2026-67471-0 ELSA-2026-67471-0: kernel security, bug fix, and enhancement update (IMPORTANT) | около 1 месяца назад | |||
openSUSE-SU-2026:21388-1 Security update for the Linux Kernel | 3 месяца назад | |||
RLSA-2026:68570 Important: kernel security, bug fix, and enhancement update | около 1 месяца назад | |||
ELSA-2026-68570 ELSA-2026-68570: kernel security, bug fix, and enhancement update (IMPORTANT) | около 1 месяца назад | |||
SUSE-SU-2026:3083-1 Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP7) | 3 месяца назад | |||
SUSE-SU-2026:3002-1 Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP6) | 3 месяца назад | |||
SUSE-SU-2026:2863-1 Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 15 SP7) | 4 месяца назад | |||
RLSA-2026:36018 Important: kernel security, bug fix, and enhancement update | 4 месяца назад | |||
ELSA-2026-36018 ELSA-2026-36018: kernel security, bug fix, and enhancement update (IMPORTANT) | 4 месяца назад | |||
SUSE-SU-2026:3369-1 Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise 15 SP7) | 3 месяца назад | |||
SUSE-SU-2026:3075-1 Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP7) | 3 месяца назад |
Уязвимостей на страницу