Поиск уязвимостей
Количество 85
Количество 85
RLSA-2026:16062
Important: kernel security update
GHSA-mmw8-mxmc-8w2r
In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSG_SPLICE_PAGES can attach pages from a pipe directly to an skb. TCP marks such skbs with SKBFL_SHARED_FRAG after skb_splice_from_iter(), so later paths that may modify packet data can first make a private copy. The IPv4/IPv6 datagram append paths did not set this flag when splicing pages into UDP skbs. That leaves an ESP-in-UDP packet made from shared pipe pages looking like an ordinary uncloned nonlinear skb. ESP input then takes the no-COW fast path for uncloned skbs without a frag_list and decrypts in place over data that is not owned privately by the skb. Mark IPv4/IPv6 datagram splice frags with SKBFL_SHARED_FRAG, matching TCP. Also make ESP input fall back to skb_cow_data() when the flag is present, so ESP does not decrypt externally backed frags in place. Private nonlinear skb frags still use the existing fast path. This intentionally does not chang...
ELSA-2026-50258
ELSA-2026-50258: Unbreakable Enterprise kernel security update (IMPORTANT)
ELSA-2026-50257
ELSA-2026-50257: Unbreakable Enterprise kernel security update (IMPORTANT)
ELSA-2026-16206
ELSA-2026-16206: kernel security update (IMPORTANT)
ELSA-2026-16195
ELSA-2026-16195: kernel security update (IMPORTANT)
ELSA-2026-16062
ELSA-2026-16062: kernel security update (IMPORTANT)
BDU:2026-06439
Уязвимость компонента xfrm ядра операционной системы Linux, позволяющая нарушителю повысить свои привилегии до уровня root
ROS-20260516-80-0002
Уязвимость kernel-lt
ROS-20260516-73-0002
Уязвимость kernel-lt
ROS-20260516-80-0001
Уязвимость kernel-lt
ROS-20260516-73-0001
Уязвимость kernel-lt
ALT-PU-2026-7466
ALT-PU-2026-7466: package `kernel-image-rt` update to version 5.10.255-alt1.rt151
SUSE-SU-2026:1904-1
Security update for the Linux Kernel
ELSA-2026-19225
ELSA-2026-19225: kernel security update (IMPORTANT)
ELSA-2026-19074
ELSA-2026-19074: kernel security update (IMPORTANT)
ELSA-2026-50275
ELSA-2026-50275: Unbreakable Enterprise kernel security update (IMPORTANT)
ELSA-2026-50294
ELSA-2026-50294: Unbreakable Enterprise kernel security update (IMPORTANT)
ELSA-2026-50299
ELSA-2026-50299: Unbreakable Enterprise kernel security update (IMPORTANT)
ALT-PU-2026-7515
ALT-PU-2026-7515: package `kernel-image-6.18` update to version 6.18.29-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
RLSA-2026:16062 Important: kernel security update | 94% Критический | 6 месяцев назад | ||
GHSA-mmw8-mxmc-8w2r In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSG_SPLICE_PAGES can attach pages from a pipe directly to an skb. TCP marks such skbs with SKBFL_SHARED_FRAG after skb_splice_from_iter(), so later paths that may modify packet data can first make a private copy. The IPv4/IPv6 datagram append paths did not set this flag when splicing pages into UDP skbs. That leaves an ESP-in-UDP packet made from shared pipe pages looking like an ordinary uncloned nonlinear skb. ESP input then takes the no-COW fast path for uncloned skbs without a frag_list and decrypts in place over data that is not owned privately by the skb. Mark IPv4/IPv6 datagram splice frags with SKBFL_SHARED_FRAG, matching TCP. Also make ESP input fall back to skb_cow_data() when the flag is present, so ESP does not decrypt externally backed frags in place. Private nonlinear skb frags still use the existing fast path. This intentionally does not chang... | CVSS3: 7.8 | 94% Критический | 6 месяцев назад | |
ELSA-2026-50258 ELSA-2026-50258: Unbreakable Enterprise kernel security update (IMPORTANT) | 94% Критический | 6 месяцев назад | ||
ELSA-2026-50257 ELSA-2026-50257: Unbreakable Enterprise kernel security update (IMPORTANT) | 94% Критический | 6 месяцев назад | ||
ELSA-2026-16206 ELSA-2026-16206: kernel security update (IMPORTANT) | 94% Критический | 6 месяцев назад | ||
ELSA-2026-16195 ELSA-2026-16195: kernel security update (IMPORTANT) | 94% Критический | 6 месяцев назад | ||
ELSA-2026-16062 ELSA-2026-16062: kernel security update (IMPORTANT) | 94% Критический | 6 месяцев назад | ||
BDU:2026-06439 Уязвимость компонента xfrm ядра операционной системы Linux, позволяющая нарушителю повысить свои привилегии до уровня root | CVSS3: 8.8 | 94% Критический | 6 месяцев назад | |
ROS-20260516-80-0002 Уязвимость kernel-lt | CVSS3: 7.8 | 94% Критический | 6 месяцев назад | |
ROS-20260516-73-0002 Уязвимость kernel-lt | CVSS3: 7.8 | 94% Критический | 6 месяцев назад | |
ROS-20260516-80-0001 Уязвимость kernel-lt | CVSS3: 8.8 | 94% Критический | 6 месяцев назад | |
ROS-20260516-73-0001 Уязвимость kernel-lt | CVSS3: 8.8 | 94% Критический | 6 месяцев назад | |
ALT-PU-2026-7466 ALT-PU-2026-7466: package `kernel-image-rt` update to version 5.10.255-alt1.rt151 | CVSS3: 8.8 | 94% Критический | 6 месяцев назад | |
SUSE-SU-2026:1904-1 Security update for the Linux Kernel | 6 месяцев назад | |||
ELSA-2026-19225 ELSA-2026-19225: kernel security update (IMPORTANT) | 5 месяцев назад | |||
ELSA-2026-19074 ELSA-2026-19074: kernel security update (IMPORTANT) | 4 месяца назад | |||
ELSA-2026-50275 ELSA-2026-50275: Unbreakable Enterprise kernel security update (IMPORTANT) | 6 месяцев назад | |||
ELSA-2026-50294 ELSA-2026-50294: Unbreakable Enterprise kernel security update (IMPORTANT) | 5 месяцев назад | |||
ELSA-2026-50299 ELSA-2026-50299: Unbreakable Enterprise kernel security update (IMPORTANT) | 5 месяцев назад | |||
ALT-PU-2026-7515 ALT-PU-2026-7515: package `kernel-image-6.18` update to version 6.18.29-alt1 | CVSS3: 9.8 | 6 месяцев назад |
Уязвимостей на страницу