Tag
Linux Kernel MPLS NULL Pointer Dereference Vulnerability
2 TTPs 1 CVEA NULL pointer dereference vulnerability in the Linux kernel's MPLS subsystem, specifically affecting configurations where CONFIG_INET is disabled, can lead to a denial-of-service condition.
CVE-2026-45932 bpf: Fix tcx/netkit Detach Permissions
2 rules 1 CVECVE-2026-45932 is a vulnerability affecting the bpf component, related to tcx/netkit detach permissions when the prog fd isn't given, requiring a security update from Microsoft.
Linux BPF Program or Map Load for Persistence
3 rules 1 TTPAttackers can leverage Linux's Berkeley Packet Filter (BPF) functionality to establish persistence by loading malicious programs or maps, allowing for stealthy and persistent code execution within the kernel.
Linux BPF Program Tampering for Defense Evasion
2 rules 1 TTPAttackers can manipulate or tamper with Berkeley Packet Filter (BPF) programs on Linux systems to evade detection or analysis by security tools that rely on BPF for monitoring and security enforcement.