CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Linux Kernel IPv6 Socket Memory Corruption Vulnerability (CVE-2026-53362) Analysis and Mitigation Guide
[Affected Scope] Linux kernel systems utilizing UDPv6 sockets with MSG_MORE and MSG_SPLICE_PAGES flags
[Impact] Unprivileged local users can trigger a heap out-of-bounds write, leading to system crash (Denial of Service) or Local Privilege Escalation (LPE)
[Mitigation] Apply the latest stable kernel patches from upstream or your Linux distribution vendor, and restrict unprivileged user namespaces if immediate patching is not feasible
Treck TCP/IP Stack IPv6 Out-of-bounds Read Vulnerability (CVE-2020-11899, Ripple20)
[Affected Scope] IoT, medical devices, industrial control systems, and network equipment utilizing Treck TCP/IP embedded protocol stack versions prior to 6.0.1.66
[Impact] An adjacent attacker can send specially crafted IPv6 packets to trigger an out-of-bounds read, leading to information disclosure or system crash/denial of service (DoS)
[Mitigation] Apply the latest firmware updates provided by your device vendors (incorporating Treck 6.0.1.66 or higher) and restrict unnecessary IPv6 traffic at the network boundary