Security / Database
CVE database
Search official CVE identifiers and see Abora’s channel-level assessment. A missing score or an investigating status is shown explicitly rather than filled with a guess.
3 advisories
Linux kernel IPv4 TCP option lifetime use-after-free
A race in Linux kernel IPv4 TCP connection handling can free inet_opt data while another CPU is still reading it under RCU protection. The Ubuntu record describes possible use-after-free access while building a SYN-ACK packet; a similar race can occur during request-socket migration. The upstream fix changes the relevant frees to kfree_rcu().
Upstream affected versions: Linux kernel versions 4.4 and newer are affected until the fix is present. Compare each kernel against its own branch's fixed version below; branches without a listed fix remain affected upstream unless a vendor backport is confirmed.
Linux kernel nf_tables use-after-free
A use-after-free in the Linux kernel netfilter nf_tables component can cause a double free and allow local privilege escalation. CISA lists this vulnerability in its Known Exploited Vulnerabilities catalog.
Upstream affected versions: NVD lists affected upstream versions from 3.15 up to (but not including) 5.15.149; 6.1 up to 6.1.76; 6.2 up to 6.6.15; 6.7 up to 6.7.3; and 6.8-rc1.
Linux kernel nfnetlink extack initialization
The Linux kernel's nfnetlink code failed to initialize extended-acknowledgment data before acknowledging batch begin/end operations. NVD rates the issue High; the kernel.org record identifies the affected file as net/netfilter/nfnetlink.c.
Upstream affected versions: NVD lists Linux 6.10.0 through 6.10.6 and 6.11-rc1 through 6.11-rc3 as affected.