3 reportsPriority Medium
Linux kernel vulnerability disclosure
A newly disclosed vulnerability in the Linux kernel could allow attackers to exploit packet validation flaws, potentially compromising system security for UK organisations using affected versions.
First report Latest
What is going on
- A vulnerability in the Linux kernel was resolved involving validation of checksum_start before completing checksum for packets with bad metadata.
- A separate vulnerability allowing SSH access to Linux devices is being actively exploited, raising concerns about ongoing security risks.
- A separate event reported on OffSec celebrating 20 years of training development, unrelated to the security vulnerabilities.
- What to watch: Confirmation of whether the actively exploited SSH vulnerability has been patched or if there are indications of widespread exploitation attempts.
Reports in this story
Newest first. Each one is a separate event with its own sources and evidence.
- Priority LowType Research & news
OffSec Celebrates 20 Years of Practitioner-Built Training From the Creators of Kali Linux and OSCP
- Priority LowType Vulnerability
Vulnerability that lets hackers SSH into Linux devices is under active exploitation
- Priority MediumType VulnerabilityLead report
In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the i…