https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:04:38 +0000 https://db.gcve.eu/vuln/cve-2026-53074 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb</p> <p>bpf_prog_test_run_skb() calls eth_type_trans() first and then uses skb-&gt;protocol to initialize sk family and address fields for the test run.</p> <p>For IPv4 and IPv6 packets, it may access ip_hdr(skb) or ipv6_hdr(skb) even when the provided test input only contains an Ethernet header.</p> <p>Reject the input earlier if the Ethernet frame carries IPv4/IPv6 EtherType but the L3 header is too short.</p> <p>Fold the IPv4/IPv6 header length checks into the existing protocol switch and return -EINVAL before accessing the network headers.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb</p> <p>bpf_prog_test_run_skb() calls eth_type_trans() first and then uses skb-&gt;protocol to initialize sk family and address fields for the test run.</p> <p>For IPv4 and IPv6 packets, it may access ip_hdr(skb) or ipv6_hdr(skb) even when the provided test input only contains an Ethernet header.</p> <p>Reject the input earlier if the Ethernet frame carries IPv4/IPv6 EtherType but the L3 header is too short.</p> <p>Fold the IPv4/IPv6 header length checks into the existing protocol switch and return -EINVAL before accessing the network headers.</p> https://db.gcve.eu/vuln/cve-2026-53074