VYPR

rpm package

almalinux/bpftool

pkg:rpm/almalinux/bpftool

Vulnerabilities (1,073)

  • CVE-2026-53223HigJun 25, 2026
    affected < 4.18.0-553.164.1.el8_10fixed 4.18.0-553.164.1.el8_10

    In the Linux kernel, the following vulnerability has been resolved: net: guard timestamp cmsgs to real error queue skbs skb_is_err_queue() treats PACKET_OUTGOING as the sole marker for an skb from sk_error_queue. That assumption is not true for AF_PACKET sockets: outgoing packe

  • CVE-2026-53192HigJun 25, 2026
    affected < 4.18.0-553.164.1.el8_10fixed 4.18.0-553.164.1.el8_10

    In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Fix UAF at snd_timer_user_params() At releasing a timer object, e.g. when a userspace timer (CONFIG_SND_UTIMER) gets closed and snd_timer_free() is called, it tries to detach the timer instances an

  • CVE-2026-53189HigJun 25, 2026
    affected < 4.18.0-553.157.1.el8_10fixed 4.18.0-553.157.1.el8_10

    In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: update file PMD counter before folio_put() __split_huge_pmd_locked() updates the file/shmem RSS counter after dropping the PMD mapping's folio reference. If folio_put() drops the last reference

  • CVE-2026-53185HigJun 25, 2026
    affected < 4.18.0-553.159.1.el8_10fixed 4.18.0-553.159.1.el8_10

    In the Linux kernel, the following vulnerability has been resolved: zram: fix use-after-free in zram_bvec_write_partial() zram_read_page() picks the sync or async backing device read path based on whether the parent bio is NULL. zram_bvec_write_partial() passes its parent bio

  • CVE-2026-53182HigJun 25, 2026
    affected < 4.18.0-553.163.1.el8_10fixed 4.18.0-553.163.1.el8_10

    In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject oversized EMA RNR lists nl80211_parse_rnr_elems() stores the parsed element count in a u8-backed cfg80211_rnr_elems::cnt field and uses that count to size the flexible array allocation. R

  • CVE-2026-53176CriJun 25, 2026
    affected < 4.18.0-553.164.1.el8_10fixed 4.18.0-553.164.1.el8_10

    In the Linux kernel, the following vulnerability has been resolved: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN In drivers/infiniband/ulp/isert/ib_isert.c, isert_login_recv_done() computes the login request payload length as wc->byte_len minus ISER_HEADERS_LEN wit

  • CVE-2026-53136HigJun 25, 2026
    affected < 4.18.0-553.156.1.el8_10fixed 4.18.0-553.156.1.el8_10

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size [Why & How] The VBIOS integrated info tables (v1_11 and v2_1) contain HdmiRegNum and Hdmi6GRegNum fields that are used as loop bounds when

  • CVE-2026-53131CriJun 25, 2026
    affected < 4.18.0-553.164.1.el8_10fixed 4.18.0-553.164.1.el8_10

    In the Linux kernel, the following vulnerability has been resolved: netfilter: require Ethernet MAC header before using eth_hdr() `ip6t_eui64`, `xt_mac`, the `bitmap:ip,mac`, `hash:ip,mac`, and `hash:mac` ipset types, and `nf_log_syslog` access `eth_hdr(skb)` after either assum

  • CVE-2026-53091HigJun 24, 2026
    affected < 4.18.0-553.162.1.el8_10fixed 4.18.0-553.162.1.el8_10

    In the Linux kernel, the following vulnerability has been resolved: net: pull headers in qdisc_pkt_len_segs_init() Most ndo_start_xmit() methods expects headers of gso packets to be already in skb->head. net/core/tso.c users are particularly at risk, because tso_build_hdr() do

  • CVE-2026-53075HigJun 24, 2026
    affected < 4.18.0-553.164.1.el8_10fixed 4.18.0-553.164.1.el8_10

    In the Linux kernel, the following vulnerability has been resolved: ppp: require CAP_NET_ADMIN in target netns for unattached ioctls /dev/ppp open is currently authorized against file->f_cred->user_ns, while unattached administrative ioctls operate on current->nsproxy->net_ns.

  • CVE-2026-53071HigJun 24, 2026
    affected < 4.18.0-553.146.1.el8_10fixed 4.18.0-553.146.1.el8_10

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp l2cap_ecred_reconf_rsp() calls l2cap_chan_del() without holding l2cap_chan_lock(). Every other l2cap_chan_del() caller in the file acquires the

  • CVE-2026-53059HigJun 24, 2026
    affected < 4.18.0-553.147.1.el8_10fixed 4.18.0-553.147.1.el8_10

    In the Linux kernel, the following vulnerability has been resolved: dm log: fix out-of-bounds write due to region_count overflow The local variable region_count in create_log_context() is declared as unsigned int (32-bit), but dm_sector_div_up() returns sector_t (64-bit). When

  • CVE-2026-53016HigJun 24, 2026
    affected < 4.18.0-553.156.1.el8_10fixed 4.18.0-553.156.1.el8_10

    In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AF_ALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver. ccp_aes_complete() restores AES_BLOCK_SIZE bytes into the caller's IV buffer while RFC3686 skcip

  • CVE-2026-53009HigJun 24, 2026
    affected < 4.18.0-553.155.1.el8_10fixed 4.18.0-553.155.1.el8_10

    In the Linux kernel, the following vulnerability has been resolved: ice: fix double-free of tx_buf skb If ice_tso() or ice_tx_csum() fail, the error path in ice_xmit_frame_ring() frees the skb, but the 'first' tx_buf still points to it and is marked as valid (ICE_TX_BUF_SKB). '

  • CVE-2026-53006CriJun 24, 2026
    affected < 4.18.0-553.148.1.el8_10fixed 4.18.0-553.148.1.el8_10

    In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6_rcv() Caching saddr and daddr before pskb_pull() is problematic since skb->head can change. Remove these temporary variables: - We only access &ipv6_hdr(skb)->saddr and &ipv6_

  • CVE-2026-53002CriJun 24, 2026
    affected < 4.18.0-553.160.1.el8_10fixed 4.18.0-553.160.1.el8_10

    In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: remove sprintf usage Replace it with scnprintf, the buffer sizes are expected to be large enough to hold the result, no need for snprintf+overflow check. Increase buffer size in mangle_co

  • CVE-2026-52993CriJun 24, 2026
    affected < 4.18.0-553.147.1.el8_10fixed 4.18.0-553.147.1.el8_10

    In the Linux kernel, the following vulnerability has been resolved: tipc: fix double-free in tipc_buf_append() tipc_msg_validate() can potentially reallocate the skb it is validating, freeing the old one. In tipc_buf_append(), it was being called with a pointer to a local vari

  • CVE-2026-52991HigJun 24, 2026
    affected < 4.18.0-553.157.1.el8_10fixed 4.18.0-553.157.1.el8_10

    In the Linux kernel, the following vulnerability has been resolved: sched/psi: fix race between file release and pressure write A potential race condition exists between pressure write and cgroup file release regarding the priv member of struct kernfs_open_file, which triggers

  • CVE-2026-52986CriJun 24, 2026
    affected < 4.18.0-553.162.1.el8_10fixed 4.18.0-553.162.1.el8_10

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: don't use simple_strtoul Replace unsafe port parsing in epaddr_len(), ct_sip_parse_header_uri(), and ct_sip_parse_request() with a new sip_parse_port() helper that validates each di

  • CVE-2026-52947HigJun 24, 2026
    affected < 4.18.0-553.163.1.el8_10fixed 4.18.0-553.163.1.el8_10

    In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove In qrtr_port_remove(), the socket reference count is decremented via __sock_put() before the port is removed from the qrtr_ports XArray a

Page 4 of 54