Количество 23
Количество 23
CVE-2026-46102
In the Linux kernel, the following vulnerability has been resolved: net: strparser: fix skb_head leak in strp_abort_strp() When the stream parser is aborted, for example after a message assembly timeout, it can still hold a reference to a partially assembled message in strp->skb_head. That skb is not released in strp_abort_strp(), which leaks the partially assembled message and can be triggered repeatedly to exhaust memory. Fix this by freeing strp->skb_head and resetting the parser state in the abort path. Leave strp_stop() unchanged so final cleanup still happens in strp_done() after the work and timer have been synchronized.
CVE-2026-46102
In the Linux kernel, the following vulnerability has been resolved: net: strparser: fix skb_head leak in strp_abort_strp() When the stream parser is aborted, for example after a message assembly timeout, it can still hold a reference to a partially assembled message in strp->skb_head. That skb is not released in strp_abort_strp(), which leaks the partially assembled message and can be triggered repeatedly to exhaust memory. Fix this by freeing strp->skb_head and resetting the parser state in the abort path. Leave strp_stop() unchanged so final cleanup still happens in strp_done() after the work and timer have been synchronized.
CVE-2026-46102
In the Linux kernel, the following vulnerability has been resolved: net: strparser: fix skb_head leak in strp_abort_strp() When the stream parser is aborted, for example after a message assembly timeout, it can still hold a reference to a partially assembled message in strp->skb_head. That skb is not released in strp_abort_strp(), which leaks the partially assembled message and can be triggered repeatedly to exhaust memory. Fix this by freeing strp->skb_head and resetting the parser state in the abort path. Leave strp_stop() unchanged so final cleanup still happens in strp_done() after the work and timer have been synchronized.
CVE-2026-46102
net: strparser: fix skb_head leak in strp_abort_strp()
CVE-2026-46102
In the Linux kernel, the following vulnerability has been resolved: n ...
GHSA-mr4j-h79v-vcp9
In the Linux kernel, the following vulnerability has been resolved: net: strparser: fix skb_head leak in strp_abort_strp() When the stream parser is aborted, for example after a message assembly timeout, it can still hold a reference to a partially assembled message in strp->skb_head. That skb is not released in strp_abort_strp(), which leaks the partially assembled message and can be triggered repeatedly to exhaust memory. Fix this by freeing strp->skb_head and resetting the parser state in the abort path. Leave strp_stop() unchanged so final cleanup still happens in strp_done() after the work and timer have been synchronized.
BDU:2026-15658
Уязвимость функции strp_abort_strp() модуля net/strparser/strparser.c ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20261014-80-0002
Уязвимость kernel-lt
ROS-20261014-73-0001
Уязвимость kernel-lt
ALT-PU-2026-7515
ALT-PU-2026-7515: package `kernel-image-6.18` update to version 6.18.29-alt1
SUSE-SU-2026:3594-1
Security update for the Linux Kernel
ALT-PU-2026-8600
ALT-PU-2026-8600: package `kernel-image-std-def` update to version 5.10.258-alt1
ALT-PU-2026-8598
ALT-PU-2026-8598: package `kernel-image-un-def` update to version 6.1.175-alt1
ELBA-2026-500163
ELBA-2026-500163: Unbreakable Enterprise kernel bug fix update (NA)
SUSE-SU-2026:3166-1
Security update for the Linux Kernel
SUSE-SU-2026:3130-1
Security update for the Linux Kernel
ALT-PU-2026-7584
ALT-PU-2026-7584: package `kernel-image-rpi-un` update to version 6.12.86-alt1
ELSA-2026-50372
ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)
openSUSE-SU-2026:21555-1
Security update for the Linux Kernel
ALT-PU-2026-9892
ALT-PU-2026-9892: package `kernel-image-6.12` update to version 6.12.94-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-46102 In the Linux kernel, the following vulnerability has been resolved: net: strparser: fix skb_head leak in strp_abort_strp() When the stream parser is aborted, for example after a message assembly timeout, it can still hold a reference to a partially assembled message in strp->skb_head. That skb is not released in strp_abort_strp(), which leaks the partially assembled message and can be triggered repeatedly to exhaust memory. Fix this by freeing strp->skb_head and resetting the parser state in the abort path. Leave strp_stop() unchanged so final cleanup still happens in strp_done() after the work and timer have been synchronized. | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
 | CVE-2026-46102 In the Linux kernel, the following vulnerability has been resolved: net: strparser: fix skb_head leak in strp_abort_strp() When the stream parser is aborted, for example after a message assembly timeout, it can still hold a reference to a partially assembled message in strp->skb_head. That skb is not released in strp_abort_strp(), which leaks the partially assembled message and can be triggered repeatedly to exhaust memory. Fix this by freeing strp->skb_head and resetting the parser state in the abort path. Leave strp_stop() unchanged so final cleanup still happens in strp_done() after the work and timer have been synchronized. | CVSS3: 5.5 | 1% Низкий | 5 месяцев назад |
 | CVE-2026-46102 In the Linux kernel, the following vulnerability has been resolved: net: strparser: fix skb_head leak in strp_abort_strp() When the stream parser is aborted, for example after a message assembly timeout, it can still hold a reference to a partially assembled message in strp->skb_head. That skb is not released in strp_abort_strp(), which leaks the partially assembled message and can be triggered repeatedly to exhaust memory. Fix this by freeing strp->skb_head and resetting the parser state in the abort path. Leave strp_stop() unchanged so final cleanup still happens in strp_done() after the work and timer have been synchronized. | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
 | CVE-2026-46102 net: strparser: fix skb_head leak in strp_abort_strp() | CVSS3: 5.5 | 1% Низкий | 5 месяцев назад |
| CVE-2026-46102 In the Linux kernel, the following vulnerability has been resolved: n ... | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
| GHSA-mr4j-h79v-vcp9 In the Linux kernel, the following vulnerability has been resolved: net: strparser: fix skb_head leak in strp_abort_strp() When the stream parser is aborted, for example after a message assembly timeout, it can still hold a reference to a partially assembled message in strp->skb_head. That skb is not released in strp_abort_strp(), which leaks the partially assembled message and can be triggered repeatedly to exhaust memory. Fix this by freeing strp->skb_head and resetting the parser state in the abort path. Leave strp_stop() unchanged so final cleanup still happens in strp_done() after the work and timer have been synchronized. | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
 | BDU:2026-15658 Уязвимость функции strp_abort_strp() модуля net/strparser/strparser.c ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | 7 месяцев назад |
 | ROS-20261014-80-0002 Уязвимость kernel-lt | CVSS3: 7.5 | 1% Низкий | 13 дней назад |
| ROS-20261014-73-0001 Уязвимость kernel-lt | CVSS3: 7.5 | 1% Низкий | 13 дней назад |
| ALT-PU-2026-7515 ALT-PU-2026-7515: package `kernel-image-6.18` update to version 6.18.29-alt1 | CVSS3: 9.8 | 6 месяцев назад | |
 | SUSE-SU-2026:3594-1 Security update for the Linux Kernel | 3 месяца назад | ||
| ALT-PU-2026-8600 ALT-PU-2026-8600: package `kernel-image-std-def` update to version 5.10.258-alt1 | CVSS3: 9.8 | 4 месяца назад | |
| ALT-PU-2026-8598 ALT-PU-2026-8598: package `kernel-image-un-def` update to version 6.1.175-alt1 | CVSS3: 9.8 | 4 месяца назад | |
| ELBA-2026-500163 ELBA-2026-500163: Unbreakable Enterprise kernel bug fix update (NA) | 3 месяца назад | ||
| SUSE-SU-2026:3166-1 Security update for the Linux Kernel | 3 месяца назад | ||
| SUSE-SU-2026:3130-1 Security update for the Linux Kernel | 3 месяца назад | ||
| ALT-PU-2026-7584 ALT-PU-2026-7584: package `kernel-image-rpi-un` update to version 6.12.86-alt1 | CVSS3: 9.8 | 6 месяцев назад | |
| ELSA-2026-50372 ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 4 месяца назад | ||
| openSUSE-SU-2026:21555-1 Security update for the Linux Kernel | 3 месяца назад | ||
| ALT-PU-2026-9892 ALT-PU-2026-9892: package `kernel-image-6.12` update to version 6.12.94-alt1 | CVSS3: 10 | 4 месяца назад |
Уязвимостей на страницу