Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 24

Количество 24

ubuntu логотип

CVE-2026-23172

9 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: fix potential skb->frags overflow in RX path When receiving data in the DPMAIF RX path, the t7xx_dpmaif_set_frag_to_skb() function adds page fragments to an skb without checking if the number of fragments has exceeded MAX_SKB_FRAGS. This could lead to a buffer overflow in skb_shinfo(skb)->frags[] array, corrupting adjacent memory and potentially causing kernel crashes or other undefined behavior. This issue was identified through static code analysis by comparing with a similar vulnerability fixed in the mt76 driver commit b102f0c522cf ("mt76: fix array overflow on receiving too many fragments for a packet"). The vulnerability could be triggered if the modem firmware sends packets with excessive fragments. While under normal protocol conditions (MTU 3080 bytes, BAT buffer 3584 bytes), a single packet should not require additional fragments, the kernel should not blindly trust firmware behavior. Mali...

CVSS3: 5.5
EPSS: Низкий
redhat логотип

CVE-2026-23172

9 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: fix potential skb->frags overflow in RX path When receiving data in the DPMAIF RX path, the t7xx_dpmaif_set_frag_to_skb() function adds page fragments to an skb without checking if the number of fragments has exceeded MAX_SKB_FRAGS. This could lead to a buffer overflow in skb_shinfo(skb)->frags[] array, corrupting adjacent memory and potentially causing kernel crashes or other undefined behavior. This issue was identified through static code analysis by comparing with a similar vulnerability fixed in the mt76 driver commit b102f0c522cf ("mt76: fix array overflow on receiving too many fragments for a packet"). The vulnerability could be triggered if the modem firmware sends packets with excessive fragments. While under normal protocol conditions (MTU 3080 bytes, BAT buffer 3584 bytes), a single packet should not require additional fragments, the kernel should not blindly trust firmware behavior. Mali...

CVSS3: 7.4
EPSS: Низкий
nvd логотип

CVE-2026-23172

9 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: fix potential skb->frags overflow in RX path When receiving data in the DPMAIF RX path, the t7xx_dpmaif_set_frag_to_skb() function adds page fragments to an skb without checking if the number of fragments has exceeded MAX_SKB_FRAGS. This could lead to a buffer overflow in skb_shinfo(skb)->frags[] array, corrupting adjacent memory and potentially causing kernel crashes or other undefined behavior. This issue was identified through static code analysis by comparing with a similar vulnerability fixed in the mt76 driver commit b102f0c522cf ("mt76: fix array overflow on receiving too many fragments for a packet"). The vulnerability could be triggered if the modem firmware sends packets with excessive fragments. While under normal protocol conditions (MTU 3080 bytes, BAT buffer 3584 bytes), a single packet should not require additional fragments, the kernel should not blindly trust firmware behavior. Mal

CVSS3: 5.5
EPSS: Низкий
debian логотип

CVE-2026-23172

9 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: n ...

CVSS3: 5.5
EPSS: Низкий
github логотип

GHSA-m5mw-gf4c-pwc3

9 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: fix potential skb->frags overflow in RX path When receiving data in the DPMAIF RX path, the t7xx_dpmaif_set_frag_to_skb() function adds page fragments to an skb without checking if the number of fragments has exceeded MAX_SKB_FRAGS. This could lead to a buffer overflow in skb_shinfo(skb)->frags[] array, corrupting adjacent memory and potentially causing kernel crashes or other undefined behavior. This issue was identified through static code analysis by comparing with a similar vulnerability fixed in the mt76 driver commit b102f0c522cf ("mt76: fix array overflow on receiving too many fragments for a packet"). The vulnerability could be triggered if the modem firmware sends packets with excessive fragments. While under normal protocol conditions (MTU 3080 bytes, BAT buffer 3584 bytes), a single packet should not require additional fragments, the kernel should not blindly trust firmware behavior. ...

CVSS3: 5.5
EPSS: Низкий
fstec логотип

BDU:2026-11597

10 месяцев назад

Уязвимость ядра операционной системы Linux, связанная с неправильным освобождением памяти перед удалением последней ссылки, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 8.4
EPSS: Низкий
redos логотип

ROS-20260918-80-0064

около 2 месяцев назад

Уязвимость kernel-lt

CVSS3: 8.4
EPSS: Низкий
redos логотип

ROS-20260918-73-0059

около 2 месяцев назад

Уязвимость kernel-lt

CVSS3: 8.4
EPSS: Низкий
rocky логотип

RLSA-2026:68507

около 2 месяцев назад

Important: kernel security, bug fix, and enhancement update

EPSS: Низкий
oracle-oval логотип

ELSA-2026-68507

около 2 месяцев назад

ELSA-2026-68507: kernel security, bug fix, and enhancement update (IMPORTANT)

EPSS: Низкий
rocky логотип

RLSA-2026:68570

около 2 месяцев назад

Important: kernel security, bug fix, and enhancement update

EPSS: Низкий
oracle-oval логотип

ELSA-2026-68570

около 2 месяцев назад

ELSA-2026-68570: kernel security, bug fix, and enhancement update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2026-50160

8 месяцев назад

ELSA-2026-50160: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:0962-1

8 месяцев назад

Security update for the Linux Kernel

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:1081-1

8 месяцев назад

Security update for the Linux Kernel

EPSS: Низкий
altlinux логотип

ALT-PU-2026-5135

8 месяцев назад

ALT-PU-2026-5135: package `kernel-image-6.18` update to version 6.18.20-alt1

CVSS3: 9.8
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:20416-1

8 месяцев назад

Security update for the Linux Kernel

EPSS: Низкий
altlinux логотип

ALT-PU-2026-3309

8 месяцев назад

ALT-PU-2026-3309: package `kernel-image-rt` update to version 6.12.74-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-3243

8 месяцев назад

ALT-PU-2026-3243: package `kernel-image-6.12` update to version 6.12.74-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-3750

8 месяцев назад

ALT-PU-2026-3750: package `kernel-image-un-def` update to version 6.1.163-alt1

CVSS3: 9.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2026-23172

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: fix potential skb->frags overflow in RX path When receiving data in the DPMAIF RX path, the t7xx_dpmaif_set_frag_to_skb() function adds page fragments to an skb without checking if the number of fragments has exceeded MAX_SKB_FRAGS. This could lead to a buffer overflow in skb_shinfo(skb)->frags[] array, corrupting adjacent memory and potentially causing kernel crashes or other undefined behavior. This issue was identified through static code analysis by comparing with a similar vulnerability fixed in the mt76 driver commit b102f0c522cf ("mt76: fix array overflow on receiving too many fragments for a packet"). The vulnerability could be triggered if the modem firmware sends packets with excessive fragments. While under normal protocol conditions (MTU 3080 bytes, BAT buffer 3584 bytes), a single packet should not require additional fragments, the kernel should not blindly trust firmware behavior. Mali...

CVSS3: 5.5
0%
Низкий
9 месяцев назад
redhat логотип
CVE-2026-23172

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: fix potential skb->frags overflow in RX path When receiving data in the DPMAIF RX path, the t7xx_dpmaif_set_frag_to_skb() function adds page fragments to an skb without checking if the number of fragments has exceeded MAX_SKB_FRAGS. This could lead to a buffer overflow in skb_shinfo(skb)->frags[] array, corrupting adjacent memory and potentially causing kernel crashes or other undefined behavior. This issue was identified through static code analysis by comparing with a similar vulnerability fixed in the mt76 driver commit b102f0c522cf ("mt76: fix array overflow on receiving too many fragments for a packet"). The vulnerability could be triggered if the modem firmware sends packets with excessive fragments. While under normal protocol conditions (MTU 3080 bytes, BAT buffer 3584 bytes), a single packet should not require additional fragments, the kernel should not blindly trust firmware behavior. Mali...

CVSS3: 7.4
0%
Низкий
9 месяцев назад
nvd логотип
CVE-2026-23172

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: fix potential skb->frags overflow in RX path When receiving data in the DPMAIF RX path, the t7xx_dpmaif_set_frag_to_skb() function adds page fragments to an skb without checking if the number of fragments has exceeded MAX_SKB_FRAGS. This could lead to a buffer overflow in skb_shinfo(skb)->frags[] array, corrupting adjacent memory and potentially causing kernel crashes or other undefined behavior. This issue was identified through static code analysis by comparing with a similar vulnerability fixed in the mt76 driver commit b102f0c522cf ("mt76: fix array overflow on receiving too many fragments for a packet"). The vulnerability could be triggered if the modem firmware sends packets with excessive fragments. While under normal protocol conditions (MTU 3080 bytes, BAT buffer 3584 bytes), a single packet should not require additional fragments, the kernel should not blindly trust firmware behavior. Mal

CVSS3: 5.5
0%
Низкий
9 месяцев назад
debian логотип
CVE-2026-23172

In the Linux kernel, the following vulnerability has been resolved: n ...

CVSS3: 5.5
0%
Низкий
9 месяцев назад
github логотип
GHSA-m5mw-gf4c-pwc3

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: fix potential skb->frags overflow in RX path When receiving data in the DPMAIF RX path, the t7xx_dpmaif_set_frag_to_skb() function adds page fragments to an skb without checking if the number of fragments has exceeded MAX_SKB_FRAGS. This could lead to a buffer overflow in skb_shinfo(skb)->frags[] array, corrupting adjacent memory and potentially causing kernel crashes or other undefined behavior. This issue was identified through static code analysis by comparing with a similar vulnerability fixed in the mt76 driver commit b102f0c522cf ("mt76: fix array overflow on receiving too many fragments for a packet"). The vulnerability could be triggered if the modem firmware sends packets with excessive fragments. While under normal protocol conditions (MTU 3080 bytes, BAT buffer 3584 bytes), a single packet should not require additional fragments, the kernel should not blindly trust firmware behavior. ...

CVSS3: 5.5
0%
Низкий
9 месяцев назад
fstec логотип
BDU:2026-11597

Уязвимость ядра операционной системы Linux, связанная с неправильным освобождением памяти перед удалением последней ссылки, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 8.4
0%
Низкий
10 месяцев назад
redos логотип
ROS-20260918-80-0064

Уязвимость kernel-lt

CVSS3: 8.4
0%
Низкий
около 2 месяцев назад
redos логотип
ROS-20260918-73-0059

Уязвимость kernel-lt

CVSS3: 8.4
0%
Низкий
около 2 месяцев назад
rocky логотип
RLSA-2026:68507

Important: kernel security, bug fix, and enhancement update

около 2 месяцев назад
oracle-oval логотип
ELSA-2026-68507

ELSA-2026-68507: kernel security, bug fix, and enhancement update (IMPORTANT)

около 2 месяцев назад
rocky логотип
RLSA-2026:68570

Important: kernel security, bug fix, and enhancement update

около 2 месяцев назад
oracle-oval логотип
ELSA-2026-68570

ELSA-2026-68570: kernel security, bug fix, and enhancement update (IMPORTANT)

около 2 месяцев назад
oracle-oval логотип
ELSA-2026-50160

ELSA-2026-50160: Unbreakable Enterprise kernel security update (IMPORTANT)

8 месяцев назад
suse-cvrf логотип
SUSE-SU-2026:0962-1

Security update for the Linux Kernel

8 месяцев назад
suse-cvrf логотип
SUSE-SU-2026:1081-1

Security update for the Linux Kernel

8 месяцев назад
altlinux логотип
ALT-PU-2026-5135

ALT-PU-2026-5135: package `kernel-image-6.18` update to version 6.18.20-alt1

CVSS3: 9.8
8 месяцев назад
suse-cvrf логотип
openSUSE-SU-2026:20416-1

Security update for the Linux Kernel

8 месяцев назад
altlinux логотип
ALT-PU-2026-3309

ALT-PU-2026-3309: package `kernel-image-rt` update to version 6.12.74-alt1

CVSS3: 9.8
8 месяцев назад
altlinux логотип
ALT-PU-2026-3243

ALT-PU-2026-3243: package `kernel-image-6.12` update to version 6.12.74-alt1

CVSS3: 9.8
8 месяцев назад
altlinux логотип
ALT-PU-2026-3750

ALT-PU-2026-3750: package `kernel-image-un-def` update to version 6.1.163-alt1

CVSS3: 9.8
8 месяцев назад

Уязвимостей на страницу