The vulnerability of the ethosu_gem_cmdstream_copy_and_validate() function in the drivers/accel/ethosu/ethosu_gem.c driver for Linux kernel acceleration devices allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ethosugemcmdstreamcopyandvalidate function in the drivers/accel/ethosu/ethosugem.c driver for Linux computing devices involves the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the build_i2c_fw_hdr() function in the drivers/usb/serial/io_ti.c file of the Linux device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the buildi2cfwhdr function in the drivers/usb/serial/ioti.c file of the Linux device driver for USB devices is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

SUSE CVE-2026-80754

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter electrode count typo During F55 sensor detection, the transmitter TX electrode count was incorrectly assigned the value of the receiver RX electrode count due to copy-paste typos. This...

AZL-99032 CVE-2026-80754 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter electrode count typo During F55 sensor detection, the transmitter TX electrode count was incorrectly assigned the value of the receiver RX electrode count due to copy-paste typos. This...

CVE-2026-80754

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter electrode count typo During F55 sensor detection, the transmitter TX electrode count was incorrectly assigned the value of the receiver RX electrode count due to copy-paste typos. This...

CVE-2026-80754

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter electrode count typo During F55 sensor detection, the transmitter TX electrode count was incorrectly assigned the value of the receiver RX electrode count due to copy-paste typos. This...

CVE-2026-80754 Input: synaptics-rmi4 - fix F55 transmitter electrode count typo

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter electrode count typo During F55 sensor detection, the transmitter TX electrode count was incorrectly assigned the value of the receiver RX electrode count due to copy-paste typos. This...

EUVD-2026-70358

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter electrode count typo During F55 sensor detection, the transmitter TX electrode count was incorrectly assigned the value of the receiver RX electrode count due to copy-paste typos. This...

CVE-2026-80754

CVE-2026-80754 affects the Linux kernel synaptics-rmi4 input driver. During F55 sensor detection , the transmitter (TX) electrode count was incorrectly assigned the receiver (RX) value due to copy-paste typos . On devices where RX exceeds TX electrode counts, this inflated perceived TX count prop...

CVE-2026-84968: Out-of-bounds Read

An out-of-bounds read in the BSON decoding component of the MongoDB PHP driver may allow an unauthenticated party who supplies specially formed input to have a small amount of adjacent process memory copied into an error message that is returned to application code. This may result in unintended...

CVE-2026-80754: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter electrode count typo During F55 sensor detection, the transmitter TX electrode count was incorrectly assigned the value of the receiver RX electrode count due to copy-paste typos. This...

The vulnerability of the __ftrace_event_enable_disable() function in the kernel/trace/traceevents.c module, which supports Linux operating system kernel tracing, allows a attacker to cause a service failure.

The vulnerability of the ftraceeventenabledisable function in the kernel/trace/traceevents.c module, which supports Linux operating system’s kernel tracing, is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service...

GO-2026-6318 Incus has a project restriction bypass for custom volume copy across projects in github.com/lxc/incus

Incus has a project restriction bypass for custom volume copy across projects in github.com/lxc/incus...

GO-2026-6319 Incus has a project restriction bypass in instance copy across projects in github.com/lxc/incus

Incus has a project restriction bypass in instance copy across projects in github.com/lxc/incus...

GO-2026-6327 SeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object read in github.com/seaweedfs/seaweedfs

SeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object read in github.com/seaweedfs/seaweedfs...

humanfs: Recursive copy follows symlinked files and copies data from outside the source tree

Summary @humanfs/node does not treat symlinks as a separate case during copy operations. A symlink placed inside an attacker-controlled source tree can make copyAll read and copy the contents of any file readable by the process, even when that file is outside the directory being copied. Details T...

GHSA-P498-V437-472G humanfs: Recursive copy follows symlinked files and copies data from outside the source tree

Summary @humanfs/node does not treat symlinks as a separate case during copy operations. A symlink placed inside an attacker-controlled source tree can make copyAll read and copy the contents of any file readable by the process, even when that file is outside the directory being copied. Details T...

The vulnerability of the `iris_hfi_gen1_session_unset_buffers()` function in the `drivers/media/platform/qcom/iris/iris_hfi_gen1_command.c` driver for multimedia devices in the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the irishfigen1sessionunsetbuffers function in the drivers/media/platform/qcom/iris/irishfigen1command.c driver for multimedia devices in the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow...

The vulnerability of the ReadJeffsImage() function in the Gimp image processing library allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the ReadJeffsImage function in the Gimp image processing library is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause service failures or execute arbitrary code...

CVE-2026-84374

Laravel Excel provides supercharged Excel exports and imports in Laravel. From 3.1.8 until 3.1.70, in src/Files/Disk.php the Maatwebsite\Excel\Files\Disk::copy method resolves the caller-controlled $destination supplied through Excel::store, $export-store, or storeExcel against the process workin...