[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-22979":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T03:17:55.401Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":78,"related":79,"reserved_at":9,"published_at":90,"modified_at":91,"state":92,"summary":93,"references_raw":102,"kevs":129,"epss":130,"epss_history":133,"metrics":400,"affected":406},"CVE-2026-22979","In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix memory leak in skb_segment_list for GRO packets\n\nWhen skb_segment_list() is called during packet forwarding, it handles\npackets that were aggregated by the GRO engine.\n\nHistorically, the segmentation logic in skb_segment_list assumes that\nindividual segments are split from a parent SKB and may need to carry\ntheir own socket memory accounting. Accordingly, the code transfers\ntruesize from the parent to the newly created segments.\n\nPrior to commit ed4cccef64c1 (\"gro: fix ownership transfer\"), this\ntruesize subtraction in skb_segment_list() was valid because fragments\nstill carry a reference to the original socket.\n\nHowever, commit ed4cccef64c1 (\"gro: fix ownership transfer\") changed\nthis behavior by ensuring that fraglist entries are explicitly\norphaned (skb->sk = NULL) to prevent illegal orphaning later in the\nstack. This change meant that the entire socket memory charge remained\nwith the head SKB, but the corresponding accounting logic in\nskb_segment_list() was never updated.\n\nAs a result, the current code unconditionally adds each fragment's\ntruesize to delta_truesize and subtracts it from the parent SKB. Since\nthe fragments are no longer charged to the socket, this subtraction\nresults in an effective under-count of memory when the head is freed.\nThis causes sk_wmem_alloc to remain non-zero, preventing socket\ndestruction and leading to a persistent memory leak.\n\nThe leak can be observed via KMEMLEAK when tearing down the networking\nenvironment:\n\nunreferenced object 0xffff8881e6eb9100 (size 2048):\n  comm \"ping\", pid 6720, jiffies 4295492526\n  backtrace:\n    kmem_cache_alloc_noprof+0x5c6/0x800\n    sk_prot_alloc+0x5b/0x220\n    sk_alloc+0x35/0xa00\n    inet6_create.part.0+0x303/0x10d0\n    __sock_create+0x248/0x640\n    __sys_socket+0x11b/0x1d0\n\nSince skb_segment_list() is exclusively used for SKB_GSO_FRAGLIST\npackets constructed by GRO, the truesize adjustment is removed.\n\nThe call to skb_release_head_state() must be preserved. As documented in\ncommit cf673ed0e057 (\"net: fix fraglist segmentation reference count\nleak\"), it is still required to correctly drop references to SKB\nextensions that may be overwritten during __copy_skb_header().",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-401","Missing Release of Memory after Effective Lifetime","The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.","weakness","Draft","Variant","Medium",[],[],[],[],[24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76],{"_key":25},"DLA-4476-1",{"_key":27},"DSA-6126-1",{"_key":29},"DSA-6127-1",{"_key":31},"SUSE-SU-2026:20667-1",{"_key":33},"SUSE-SU-2026:20720-1",{"_key":35},"SUSE-SU-2026:0962-1",{"_key":37},"SUSE-SU-2026:1081-1",{"_key":39},"SUSE-SU-2026:20838-1",{"_key":41},"SUSE-SU-2026:20845-1",{"_key":43},"OPENSUSE-SU-2026:20416-1",{"_key":45},"SUSE-SU-2026:20876-1",{"_key":47},"SUSE-SU-2026:20931-1",{"_key":49},"MGASA-2026-0097",{"_key":51},"MGASA-2026-0098",{"_key":53},"USN-8278-1",{"_key":55},"USN-8289-1",{"_key":57},"USN-8296-1",{"_key":59},"USN-8278-2",{"_key":61},"USN-8289-2",{"_key":63},"USN-8296-2",{"_key":65},"USN-8393-1",{"_key":67},"DEBIAN-CVE-2026-22979",{"_key":69},"USN-8440-1",{"_key":71},"SUSE-SU-2026:20873-1",{"_key":73},"RHSA-2026:38491",{"_key":75},"UBUNTU-CVE-2026-22979",{"_key":77},"USN-8570-1",[],[80,81,82,83,84,85,86,87,88,89],{"_key":31},{"_key":33},{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":43},{"_key":45},{"_key":47},{"_key":71},"2026-01-23T15:24:01.340Z","2026-07-14T12:45:36.942Z","Analyzed",{"cisa_kev":94,"cisa_ransomware":94,"cisa_vendor":9,"epss_severity":95,"epss_score":96,"severity":97,"severity_score":98,"severity_version":99,"severity_source":100,"severity_vector":101,"severity_status":92},false,"low",0.0012,"medium",5.5,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",[103,109,113,117,121,125],{"url":104,"sources":105,"tags":107},"https://git.kernel.org/stable/c/0b27828ebd1ed3107d7929c3737adbe862e99e74",[106,100],"cve.org",[108],"Patch",{"url":110,"sources":111,"tags":112},"https://git.kernel.org/stable/c/88bea149db2057112af3aaf63534b24fab5858ab",[106,100],[108],{"url":114,"sources":115,"tags":116},"https://git.kernel.org/stable/c/3264881431e308b9c72cb8a0159d57a56d67dd79",[106,100],[108],{"url":118,"sources":119,"tags":120},"https://git.kernel.org/stable/c/c114a32a2e70b82d447f409f7ffcfa3058f9d5bd",[106,100],[108],{"url":122,"sources":123,"tags":124},"https://git.kernel.org/stable/c/238e03d0466239410b72294b79494e43d4fabe77",[106,100],[108],{"url":126,"sources":127,"tags":128},"https://cert-portal.siemens.com/productcert/html/ssa-019113.html",[106],[],[],{"date":131,"score":96,"percentile":132},"2026-07-05",0.0218,[134,138,141,144,147,150,154,157,160,163,166,169,172,175,178,181,184,187,190,193,196,199,202,205,208,211,214,217,220,223,226,229,233,236,239,243,246,249,252,255,258,261,264,267,270,273,276,279,281,284,286,289,291,294,297,299,302,305,308,311,314,317,320,323,326,329,331,334,337,340,343,346,349,352,355,358,361,364,367,370,373,375,378,381,383,385,388,391,394,397],{"date":135,"score":136,"percentile":137},"2026-01-24",0.00018,0.03762,{"date":139,"score":136,"percentile":140},"2026-01-25",0.03741,{"date":142,"score":136,"percentile":143},"2026-01-26",0.03724,{"date":145,"score":136,"percentile":146},"2026-01-27",0.03712,{"date":148,"score":136,"percentile":149},"2026-01-28",0.03699,{"date":151,"score":152,"percentile":153},"2026-01-29",0.00024,0.05616,{"date":155,"score":152,"percentile":156},"2026-01-30",0.05615,{"date":158,"score":152,"percentile":159},"2026-01-31",0.05582,{"date":161,"score":152,"percentile":162},"2026-02-01",0.0565,{"date":164,"score":152,"percentile":165},"2026-02-02",0.05634,{"date":167,"score":152,"percentile":168},"2026-02-03",0.05644,{"date":170,"score":152,"percentile":171},"2026-02-04",0.05659,{"date":173,"score":152,"percentile":174},"2026-02-05",0.05716,{"date":176,"score":152,"percentile":177},"2026-02-06",0.05739,{"date":179,"score":152,"percentile":180},"2026-02-07",0.05749,{"date":182,"score":152,"percentile":183},"2026-02-08",0.05742,{"date":185,"score":152,"percentile":186},"2026-02-09",0.05715,{"date":188,"score":152,"percentile":189},"2026-02-10",0.0571,{"date":191,"score":152,"percentile":192},"2026-02-11",0.05761,{"date":194,"score":152,"percentile":195},"2026-02-12",0.05786,{"date":197,"score":152,"percentile":198},"2026-02-13",0.05796,{"date":200,"score":152,"percentile":201},"2026-02-14",0.05785,{"date":203,"score":152,"percentile":204},"2026-02-15",0.05797,{"date":206,"score":152,"percentile":207},"2026-02-16",0.05791,{"date":209,"score":152,"percentile":210},"2026-02-17",0.05765,{"date":212,"score":152,"percentile":213},"2026-02-18",0.06091,{"date":215,"score":152,"percentile":216},"2026-02-19",0.06159,{"date":218,"score":152,"percentile":219},"2026-02-20",0.06142,{"date":221,"score":152,"percentile":222},"2026-02-21",0.06153,{"date":224,"score":152,"percentile":225},"2026-02-22",0.0616,{"date":227,"score":152,"percentile":228},"2026-02-23",0.06163,{"date":230,"score":231,"percentile":232},"2026-02-24",0.00026,0.06981,{"date":234,"score":231,"percentile":235},"2026-02-25",0.06915,{"date":237,"score":231,"percentile":238},"2026-02-26",0.06858,{"date":240,"score":241,"percentile":242},"2026-02-27",0.00015,0.02956,{"date":244,"score":241,"percentile":245},"2026-02-28",0.02952,{"date":247,"score":241,"percentile":248},"2026-03-01",0.02985,{"date":250,"score":241,"percentile":251},"2026-03-02",0.03006,{"date":253,"score":241,"percentile":254},"2026-03-03",0.03028,{"date":256,"score":241,"percentile":257},"2026-03-04",0.02963,{"date":259,"score":241,"percentile":260},"2026-03-05",0.03005,{"date":262,"score":241,"percentile":263},"2026-03-06",0.03002,{"date":265,"score":241,"percentile":266},"2026-03-07",0.03008,{"date":268,"score":241,"percentile":269},"2026-03-08",0.03009,{"date":271,"score":241,"percentile":272},"2026-03-09",0.02994,{"date":274,"score":241,"percentile":275},"2026-03-10",0.02988,{"date":277,"score":241,"percentile":278},"2026-03-11",0.02991,{"date":280,"score":241,"percentile":260},"2026-03-12",{"date":282,"score":241,"percentile":283},"2026-03-13",0.03001,{"date":285,"score":241,"percentile":248},"2026-03-14",{"date":287,"score":241,"percentile":288},"2026-03-15",0.02955,{"date":290,"score":241,"percentile":288},"2026-03-16",{"date":292,"score":241,"percentile":293},"2026-03-17",0.02941,{"date":295,"score":241,"percentile":296},"2026-03-18",0.02939,{"date":298,"score":241,"percentile":293},"2026-03-19",{"date":300,"score":241,"percentile":301},"2026-03-20",0.02946,{"date":303,"score":241,"percentile":304},"2026-03-21",0.03112,{"date":306,"score":241,"percentile":307},"2026-03-22",0.03123,{"date":309,"score":241,"percentile":310},"2026-03-23",0.03122,{"date":312,"score":241,"percentile":313},"2026-03-24",0.03116,{"date":315,"score":241,"percentile":316},"2026-03-25",0.03114,{"date":318,"score":241,"percentile":319},"2026-03-26",0.03117,{"date":321,"score":241,"percentile":322},"2026-03-27",0.03124,{"date":324,"score":241,"percentile":325},"2026-03-28",0.0313,{"date":327,"score":241,"percentile":328},"2026-03-29",0.03121,{"date":330,"score":241,"percentile":304},"2026-03-30",{"date":332,"score":241,"percentile":333},"2026-03-31",0.03096,{"date":335,"score":136,"percentile":336},"2026-04-01",0.04249,{"date":338,"score":136,"percentile":339},"2026-04-02",0.0429,{"date":341,"score":136,"percentile":342},"2026-04-03",0.04311,{"date":344,"score":136,"percentile":345},"2026-04-04",0.04312,{"date":347,"score":136,"percentile":348},"2026-04-05",0.04305,{"date":350,"score":136,"percentile":351},"2026-04-06",0.04309,{"date":353,"score":136,"percentile":354},"2026-04-07",0.04323,{"date":356,"score":136,"percentile":357},"2026-04-08",0.04355,{"date":359,"score":136,"percentile":360},"2026-04-09",0.04371,{"date":362,"score":136,"percentile":363},"2026-04-10",0.04379,{"date":365,"score":136,"percentile":366},"2026-04-11",0.04364,{"date":368,"score":136,"percentile":369},"2026-04-12",0.04351,{"date":371,"score":136,"percentile":372},"2026-04-13",0.04331,{"date":374,"score":136,"percentile":339},"2026-04-14",{"date":376,"score":136,"percentile":377},"2026-04-15",0.04289,{"date":379,"score":136,"percentile":380},"2026-04-16",0.04302,{"date":382,"score":136,"percentile":351},"2026-04-17",{"date":384,"score":136,"percentile":351},"2026-04-18",{"date":386,"score":136,"percentile":387},"2026-04-19",0.04301,{"date":389,"score":136,"percentile":390},"2026-04-20",0.04285,{"date":392,"score":136,"percentile":393},"2026-04-21",0.04439,{"date":395,"score":136,"percentile":396},"2026-04-22",0.04447,{"date":398,"score":136,"percentile":399},"2026-04-23",0.04457,[401],{"source":100,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":402,"cvss_v4_0":9},{"baseScore":98,"baseSeverity":403,"vectorString":101,"impactScore":404,"exploitabilityScore":405},"MEDIUM",6,4.6,[407,454],{"ecosystem":9,"name":408,"vendor":409,"product":409,"cpe_part":410,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":411},"Linux","linux","a",[412,419,423,427,430,433,435,437,441,445,449,453],{"version":413,"is_range":414,"range_type":106,"version_start":415,"version_start_type":416,"version_end":417,"version_end_type":418,"fixed_in":9},">= 2eeab8c47c3c0276e0746bc382f405c9a236a5ad, \u003C 0b27828ebd1ed3107d7929c3737adbe862e99e74",true,"2eeab8c47c3c0276e0746bc382f405c9a236a5ad","including","0b27828ebd1ed3107d7929c3737adbe862e99e74","excluding",{"version":420,"is_range":414,"range_type":106,"version_start":421,"version_start_type":416,"version_end":422,"version_end_type":418,"fixed_in":9},">= fc126c1d51e9552eacd2d717b9ffe9262a8a4cd6, \u003C 88bea149db2057112af3aaf63534b24fab5858ab","fc126c1d51e9552eacd2d717b9ffe9262a8a4cd6","88bea149db2057112af3aaf63534b24fab5858ab",{"version":424,"is_range":414,"range_type":106,"version_start":425,"version_start_type":416,"version_end":426,"version_end_type":418,"fixed_in":9},">= ed4cccef64c1d0d5b91e69f7a8a6697c3a865486, \u003C 3264881431e308b9c72cb8a0159d57a56d67dd79","ed4cccef64c1d0d5b91e69f7a8a6697c3a865486","3264881431e308b9c72cb8a0159d57a56d67dd79",{"version":428,"is_range":414,"range_type":106,"version_start":425,"version_start_type":416,"version_end":429,"version_end_type":418,"fixed_in":9},">= ed4cccef64c1d0d5b91e69f7a8a6697c3a865486, \u003C c114a32a2e70b82d447f409f7ffcfa3058f9d5bd","c114a32a2e70b82d447f409f7ffcfa3058f9d5bd",{"version":431,"is_range":414,"range_type":106,"version_start":425,"version_start_type":416,"version_end":432,"version_end_type":418,"fixed_in":9},">= ed4cccef64c1d0d5b91e69f7a8a6697c3a865486, \u003C 238e03d0466239410b72294b79494e43d4fabe77","238e03d0466239410b72294b79494e43d4fabe77",{"version":434,"is_range":94,"range_type":106,"version_start":434,"version_start_type":416,"version_end":434,"version_end_type":416,"fixed_in":9},"d225b0ac96dc40d7e8ae2bc227eb2c56e130975f",{"version":436,"is_range":94,"range_type":106,"version_start":436,"version_start_type":416,"version_end":436,"version_end_type":416,"fixed_in":9},"5b3b67f731296027cceb3efad881ae281213f86f",{"version":438,"is_range":414,"range_type":106,"version_start":439,"version_start_type":416,"version_end":440,"version_end_type":418,"fixed_in":9},">= 6.1.85, \u003C 6.1.161","6.1.85","6.1.161",{"version":442,"is_range":414,"range_type":106,"version_start":443,"version_start_type":416,"version_end":444,"version_end_type":418,"fixed_in":9},">= 6.6.26, \u003C 6.6.121","6.6.26","6.6.121",{"version":446,"is_range":414,"range_type":106,"version_start":447,"version_start_type":416,"version_end":448,"version_end_type":418,"fixed_in":9},">= 5.15.154, \u003C 5.16","5.15.154","5.16",{"version":450,"is_range":414,"range_type":106,"version_start":451,"version_start_type":416,"version_end":452,"version_end_type":418,"fixed_in":9},">= 6.8.5, \u003C 6.9","6.8.5","6.9",{"version":452,"is_range":94,"range_type":106,"version_start":452,"version_start_type":416,"version_end":452,"version_end_type":416,"fixed_in":9},{"ecosystem":9,"name":455,"vendor":409,"product":456,"cpe_part":410,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":457},"Linux Kernel","linux kernel",[458,461,463,465,467,471,475,476,478,480,482,484,486,488,490,492],{"version":459,"is_range":414,"range_type":460,"version_start":447,"version_start_type":416,"version_end":448,"version_end_type":418,"fixed_in":9},"gte5.15.154_lt5.16","cpe",{"version":462,"is_range":414,"range_type":460,"version_start":439,"version_start_type":416,"version_end":440,"version_end_type":418,"fixed_in":9},"gte6.1.85_lt6.1.161",{"version":464,"is_range":414,"range_type":460,"version_start":443,"version_start_type":416,"version_end":444,"version_end_type":418,"fixed_in":9},"gte6.6.26_lt6.6.121",{"version":466,"is_range":414,"range_type":460,"version_start":451,"version_start_type":416,"version_end":452,"version_end_type":418,"fixed_in":9},"gte6.8.5_lt6.9",{"version":468,"is_range":414,"range_type":460,"version_start":469,"version_start_type":416,"version_end":470,"version_end_type":418,"fixed_in":9},"gte6.9.1_lt6.12.66","6.9.1","6.12.66",{"version":472,"is_range":414,"range_type":460,"version_start":473,"version_start_type":416,"version_end":474,"version_end_type":418,"fixed_in":9},"gte6.13_lt6.18.6","6.13","6.18.6",{"version":452,"is_range":94,"range_type":460,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":477,"is_range":94,"range_type":460,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.9:rc3",{"version":479,"is_range":94,"range_type":460,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.9:rc4",{"version":481,"is_range":94,"range_type":460,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.9:rc5",{"version":483,"is_range":94,"range_type":460,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.9:rc6",{"version":485,"is_range":94,"range_type":460,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.9:rc7",{"version":487,"is_range":94,"range_type":460,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.19:rc1",{"version":489,"is_range":94,"range_type":460,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.19:rc2",{"version":491,"is_range":94,"range_type":460,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.19:rc3",{"version":493,"is_range":94,"range_type":460,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.19:rc4"]