tag
Skb
CVE-2026-31429
binary
MEDIUM
Linux Kernel KFENCE Cross-Cache Free of SKB Head via bpf_prog_test_run_skb — CVE-2026-31429
Linux's skbkfreehead() decides which slab cache to free an SKB's head buffer back to based solely on whether endoffset equals SKBSMALLHEADHEADROOM, relying on the fact that SKBSMALLHEADCACHESIZE is a non-power-of-2 value that normally never collides with a…
Patched
2026-07-05
CVE-2026-43503
binary
HIGH 8.8
DirtyClone — Linux Kernel LPE via Cloned Packet Page-Cache Overwrite (CVE-2026-43503)
DirtyClone (CVE-2026-43503, CVSS 8.8) is the fourth member of the DirtyFrag family of Linux kernel local privilege escalation vulnerabilities. Each member shares the same root failure: file-backed page-cache memory is exposed to network packet operations, and…
Patched
2026-06-28