https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 06:32:23 +0000 https://vulnerability.circl.lu/vuln/cve-2026-74668 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>packet: use consistent hard_header_len in TX_RING send path</p> <p>tpacket_snd() reads dev-&gt;hard_header_len independently for skb allocation and header construction in tpacket_fill_skb(). Concurrent netdevice reconfiguration can therefore make the reserved headroom smaller than the amount later pushed, or make copylen - hard_header_len negative.</p> <p>Snapshot hard_header_len once before processing ring frames and use it for the frame limit, headroom allocation, copy length, and skb construction. Pass the snapshot to tpacket_fill_skb().</p> <p>The separate SOCK_DGRAM consistency problem between hard_header_len and header_ops-&gt;create is not addressed here.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>packet: use consistent hard_header_len in TX_RING send path</p> <p>tpacket_snd() reads dev-&gt;hard_header_len independently for skb allocation and header construction in tpacket_fill_skb(). Concurrent netdevice reconfiguration can therefore make the reserved headroom smaller than the amount later pushed, or make copylen - hard_header_len negative.</p> <p>Snapshot hard_header_len once before processing ring frames and use it for the frame limit, headroom allocation, copy length, and skb construction. Pass the snapshot to tpacket_fill_skb().</p> <p>The separate SOCK_DGRAM consistency problem between hard_header_len and header_ops-&gt;create is not addressed here.</p> https://vulnerability.circl.lu/vuln/cve-2026-74668