ROS-20260929-73-0094

The vulnerability of the decodeint function in the net/netfilter/nfconntrackh323asn1.c module of the netfilter component in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality...

ROS-20260929-73-0054

The vulnerability of the q54sj108a2debugfsread function in the drivers/hwmon/pmbus/q54sj108a2.c file, a driver for hardware monitoring in the Linux operating system, involves copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerabilit...

Joern 4.0.641

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

ROS-20260929-73-0024

The vulnerability of the multiq3attach function in the drivers/comedi/drivers/multiq3.c module, which supports Linux kernel-based data collection devices, is related to the improper disabling or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service...

ROS-20260929-73-0202

The vulnerability of the adv7842cplogstatus function in the drivers/media/i2c/adv7842.c file of the Linux kernel-based multimedia device driver involves a lack of checking for the return value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20260929-73-0204

The vulnerability of the tpm2loadcmd function in the security/keys/trusted-keys/trustedtpm2.c module of the Linux kernel’s key management component is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to trigger a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-97399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may cras...

xmlrpc-c security update

1.32.5-1905.0.1.svn2451 - Backport fix for CVE-2026-15928 Orabug: 39957695...

ROS-20260929-73-0128

The vulnerability of the getmeterlevelsfromurb function in the sound/usb/mixerus16x08.c file of the Linux kernel is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260929-73-0084

The vulnerability of the pcl818detach function in the drivers/comedi/drivers/pcl818.c module, which supports Linux kernel-based data collection devices, is related to the pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

ROS-20260929-73-0052

The vulnerability of the processmessageheader function in the net/ceph/messengerv2.c module of the Linux kernel involves reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain access to protected information or cause service failures...

ROS-20260929-73-0151

The vulnerability of the dtv5100i2cmsg function in the drivers/media/usb/dvb-usb/dtv5100.c file of the Linux operating system’s multimedia device driver framework is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...

ROS-20260929-73-0095

The vulnerability of the DecodeQ931 function in the net/netfilter/nfconntrackh323asn1.c module of the netfilter component in the Linux operating system is related to the issue of operations going beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to compromi...

ROS-20260929-73-0022

The vulnerability of the rtwgetie function in the drivers/staging/rtl8723bs/core/rtwieee80211.c module, which supports additional devices in the Linux operating system, is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain...

ROS-20260929-73-0096

The vulnerability of the aqc111suspend function in the drivers/net/usb/aqc111.c module of the Linux USB network adapter driver leads to mutual locking. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2026-102828: Improper Neutralization of Special Elements used in an OS Command

simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. From 3.15.0 until 4.0.1, the default blockUnsafeOperationsPlugin does not classify trailer. .cmd as unsafe configuration. An application that passes...

Oracle Linux 7 : ELSA-2026-61234-0: / xmlrpc-c (ELSA-2026-612340)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-612340 advisory. 1.32.5-1905.0.1.svn2451 - Backport fix for CVE-2026-15928 Orabug: 39957695 Tenable has extracted the preceding description block directly from the Oracle Linu...

PT-2026-102745

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized connection.tune.frame max value during amqp login, and rabbitmq-c accepts the value in amqp login inner in librabbitmq/amqp socket.c. amqp tune connection in librabbitmq/am...

EUVD-2026-88473

ieee802154send in subsys/net/l2/ieee802154/ieee802154.c copies the outgoing packet into a single fixed 125-byte transmit buffer txframebufpool, sized IEEE802154MTU. In builds with CONFIGNETL2IEEE802154FRAGMENT enabled the default whenever CONFIGNET6LO is set, the branch taken when 6LoWPAN...

CVE-2026-18414 Out-of-bounds write in the ADI MAX32 ADC driver due to incorrect adc_sequence buffer size validation

The ADC API requires each driver to reject a sampling sequence whose destination buffer is too small: the buffersize field of struct adcsequence in include/zephyr/drivers/adc.h documents that "the driver must ensure that samples are not written beyond the limit and it must return an error if the...