CVE Vulnerability Advisory Database

[Affected Scope] Linux kernel systems utilizing UDPv6 sockets with MSG_MORE and MSG_SPLICE_PAGES flags

[Impact] Unprivileged local users can trigger a heap out-of-bounds write, leading to system crash (Denial of Service) or Local Privilege Escalation (LPE)

[Mitigation] Apply the latest stable kernel patches from upstream or your Linux distribution vendor, and restrict unprivileged user namespaces if immediate patching is not feasible

[Affected Scope] Linux systems utilizing ebtables SNAT targets within bridge netfilter configurations.

[Impact] Local attackers can trigger kernel memory corruption, leading to Denial of Service (DoS) or Privilege Escalation.

[Mitigation] Apply the latest kernel security patches provided by your distribution and reboot.

[Affected Scope] Linux kernel network stack (skbuff) and systems utilizing IPsec (ESP).

[Impact] Local attackers can exploit the packet coalescing process to overwrite kernel memory (e.g., page cache), potentially leading to privilege escalation.

[Mitigation] Immediately apply the latest kernel security patches provided by your distribution and reboot the system.

[Affected Scope] All systems and services utilizing the Linux Kernel Crypto API (AF_ALG) interface.

[Impact] Internal socket state inconsistency and potential Denial of Service (DoS) due to concurrent write operations.

[Mitigation] Update to the latest stable kernel version provided by your distribution and reboot.

[Affected Scope] Linux systems utilizing in-kernel TLS (ktls) offload or software implementation.

[Impact] Remote attackers can trigger memory corruption or kernel panic, potentially leading to full system compromise (RCE).

[Mitigation] Immediately update the Linux kernel to the latest stable version provided by your distribution.