https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 14:56:44 +0000 https://cve.radiocsirt.org/vuln/cve-2026-80738 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie</p> <p>bpf_tcp_gen_syncookie and bpf_tcp_check_syncookie accept a socket pointer &#39;sk&#39; with argument type ARG_PTR_TO_BTF_ID_SOCK_COMMON. However, they access sk-&gt;sk_protocol without validating whether &#39;sk&#39; represents a full socket.</p> <p>Fix this issue by checking sk-&gt;sk_state != TCP_LISTEN before inspecting sk-&gt;sk_protocol in both bpf_tcp_gen_syncookie and bpf_tcp_check_syncookie. Since mini-sockets are never in the TCP_LISTEN state, the condition short-circuits and prevents dereferencing fullsock-specific fields.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie</p> <p>bpf_tcp_gen_syncookie and bpf_tcp_check_syncookie accept a socket pointer &#39;sk&#39; with argument type ARG_PTR_TO_BTF_ID_SOCK_COMMON. However, they access sk-&gt;sk_protocol without validating whether &#39;sk&#39; represents a full socket.</p> <p>Fix this issue by checking sk-&gt;sk_state != TCP_LISTEN before inspecting sk-&gt;sk_protocol in both bpf_tcp_gen_syncookie and bpf_tcp_check_syncookie. Since mini-sockets are never in the TCP_LISTEN state, the condition short-circuits and prevents dereferencing fullsock-specific fields.</p> https://cve.radiocsirt.org/vuln/cve-2026-80738