#wsl2

2 pages tagged with "wsl2"

infosec

june 2026 patch tuesday: a patch-diff campaign — reverse-engineering microsoft's record june 2026 patch tuesday: localizing the headline network and kernel cves, and two systemic observations (velocity-flag-gated fixes, and a reachability correction on the wormable tcp/ip rce)
tcpip.sys Fse/port-tracker per-message length underflow (kernel OOB read, SEH-caught) — a confirmed integer underflow in the windows tcp/ip Fse/port-tracker (WSL2 mirrored-networking) transport hands a ~4GB declared length to the MIDL/NDR decoder over a <32-byte buffer. the kernel out-of-bounds read executes on a live kernel but is caught by an RPC structured-exception handler; the one possible escalation (an info-leak to the peer) is refuted by static analysis. real but benign, on an opt-in surface.