Поиск уязвимостей
Количество 29
Количество 29
CVE-2026-23455
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() In DecodeQ931(), the UserUserIE code path reads a 16-bit length from the packet, then decrements it by 1 to skip the protocol discriminator byte before passing it to DecodeH323_UserInformation(). If the encoded length is 0, the decrement wraps to -1, which is then passed as a large value to the decoder, leading to an out-of-bounds read. Add a check to ensure len is positive after the decrement.
CVE-2026-23455
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() In DecodeQ931(), the UserUserIE code path reads a 16-bit length from the packet, then decrements it by 1 to skip the protocol discriminator byte before passing it to DecodeH323_UserInformation(). If the encoded length is 0, the decrement wraps to -1, which is then passed as a large value to the decoder, leading to an out-of-bounds read. Add a check to ensure len is positive after the decrement.
CVE-2026-23455
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() In DecodeQ931(), the UserUserIE code path reads a 16-bit length from the packet, then decrements it by 1 to skip the protocol discriminator byte before passing it to DecodeH323_UserInformation(). If the encoded length is 0, the decrement wraps to -1, which is then passed as a large value to the decoder, leading to an out-of-bounds read. Add a check to ensure len is positive after the decrement.
CVE-2026-23455
In the Linux kernel, the following vulnerability has been resolved: n ...
GHSA-gm78-p64f-gx97
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() In DecodeQ931(), the UserUserIE code path reads a 16-bit length from the packet, then decrements it by 1 to skip the protocol discriminator byte before passing it to DecodeH323_UserInformation(). If the encoded length is 0, the decrement wraps to -1, which is then passed as a large value to the decoder, leading to an out-of-bounds read. Add a check to ensure len is positive after the decrement.
BDU:2026-12238
Уязвимость функции DecodeQ931() модуля net/netfilter/nf_conntrack_h323_asn1.c компонента netfilter ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
ROS-20260929-80-0117
Уязвимость kernel-lt
ROS-20260929-73-0095
Уязвимость kernel-lt
ELSA-2026-500375
ELSA-2026-500375: Unbreakable Enterprise kernel security update (IMPORTANT)
RLSA-2026:21706
Important: kernel security update
RLSA-2026:21557
Important: kernel security update
ELSA-2026-21706
ELSA-2026-21706: kernel security update (IMPORTANT)
ELSA-2026-21557
ELSA-2026-21557: kernel security update (IMPORTANT)
RLSA-2026:21556
Important: kernel security update
ELSA-2026-21556
ELSA-2026-21556: kernel security update (IMPORTANT)
SUSE-SU-2026:2068-1
Security update for the Linux Kernel
ALT-PU-2026-6774
ALT-PU-2026-6774: package `kernel-image-6.18` update to version 6.18.20-alt1
SUSE-SU-2026:2217-1
Security update for the Linux Kernel
SUSE-SU-2026:2238-1
Security update for the Linux Kernel
openSUSE-SU-2026:20826-1
Security update for the Linux Kernel
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2026-23455 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() In DecodeQ931(), the UserUserIE code path reads a 16-bit length from the packet, then decrements it by 1 to skip the protocol discriminator byte before passing it to DecodeH323_UserInformation(). If the encoded length is 0, the decrement wraps to -1, which is then passed as a large value to the decoder, leading to an out-of-bounds read. Add a check to ensure len is positive after the decrement. | CVSS3: 9.1 | 2% Низкий | 7 месяцев назад | |
CVE-2026-23455 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() In DecodeQ931(), the UserUserIE code path reads a 16-bit length from the packet, then decrements it by 1 to skip the protocol discriminator byte before passing it to DecodeH323_UserInformation(). If the encoded length is 0, the decrement wraps to -1, which is then passed as a large value to the decoder, leading to an out-of-bounds read. Add a check to ensure len is positive after the decrement. | CVSS3: 7.1 | 2% Низкий | 7 месяцев назад | |
CVE-2026-23455 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() In DecodeQ931(), the UserUserIE code path reads a 16-bit length from the packet, then decrements it by 1 to skip the protocol discriminator byte before passing it to DecodeH323_UserInformation(). If the encoded length is 0, the decrement wraps to -1, which is then passed as a large value to the decoder, leading to an out-of-bounds read. Add a check to ensure len is positive after the decrement. | CVSS3: 9.1 | 2% Низкий | 7 месяцев назад | |
CVE-2026-23455 In the Linux kernel, the following vulnerability has been resolved: n ... | CVSS3: 9.1 | 2% Низкий | 7 месяцев назад | |
GHSA-gm78-p64f-gx97 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() In DecodeQ931(), the UserUserIE code path reads a 16-bit length from the packet, then decrements it by 1 to skip the protocol discriminator byte before passing it to DecodeH323_UserInformation(). If the encoded length is 0, the decrement wraps to -1, which is then passed as a large value to the decoder, leading to an out-of-bounds read. Add a check to ensure len is positive after the decrement. | CVSS3: 9.1 | 2% Низкий | 7 месяцев назад | |
BDU:2026-12238 Уязвимость функции DecodeQ931() модуля net/netfilter/nf_conntrack_h323_asn1.c компонента netfilter ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации | CVSS3: 9.1 | 2% Низкий | 8 месяцев назад | |
ROS-20260929-80-0117 Уязвимость kernel-lt | CVSS3: 9.1 | 2% Низкий | около 1 месяца назад | |
ROS-20260929-73-0095 Уязвимость kernel-lt | CVSS3: 9.1 | 2% Низкий | около 1 месяца назад | |
ELSA-2026-500375 ELSA-2026-500375: Unbreakable Enterprise kernel security update (IMPORTANT) | около 1 месяца назад | |||
RLSA-2026:21706 Important: kernel security update | 5 месяцев назад | |||
RLSA-2026:21557 Important: kernel security update | 5 месяцев назад | |||
ELSA-2026-21706 ELSA-2026-21706: kernel security update (IMPORTANT) | 5 месяцев назад | |||
ELSA-2026-21557 ELSA-2026-21557: kernel security update (IMPORTANT) | 3 месяца назад | |||
RLSA-2026:21556 Important: kernel security update | 5 месяцев назад | |||
ELSA-2026-21556 ELSA-2026-21556: kernel security update (IMPORTANT) | 4 месяца назад | |||
SUSE-SU-2026:2068-1 Security update for the Linux Kernel | 6 месяцев назад | |||
ALT-PU-2026-6774 ALT-PU-2026-6774: package `kernel-image-6.18` update to version 6.18.20-alt1 | CVSS3: 9.8 | 7 месяцев назад | ||
SUSE-SU-2026:2217-1 Security update for the Linux Kernel | 5 месяцев назад | |||
SUSE-SU-2026:2238-1 Security update for the Linux Kernel | 4 месяца назад | |||
openSUSE-SU-2026:20826-1 Security update for the Linux Kernel | 5 месяцев назад |
Уязвимостей на страницу