Lucene search
+L

257094 matches found

OSV
OSV
added 2 days ago5 views

ROOT-OS-DEBIAN-11-CVE-2025-49506 CVE-2025-49506 in apr-util - Patched by Root

Root has patched CVE-2025-49506 in the apr-util package for Root:Debian:11. Multiple fixed versions available...

7.5CVSS5.2AI score0.00394EPSS
SaveExploits0
OSV
OSV
added 2 days ago4 views

DEBIAN-CVE-2026-68368

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fncm: validate datagram bounds in ncmunwrapntb When unpacking host-supplied NTBs, ncmunwrapntb checks datagram length against framemax but does not verify that the datagram fits within the declared block length...

5.5AI score0.002EPSS
SaveExploits0References1
OSV
OSV
added 2 days ago4 views

DEBIAN-CVE-2026-68293

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads The MCIA register can return up to 32 dwords 128 bytes when the device advertises the mcia32dwords capability, but struct mlx5ifcmciaregbits only defines dword0..11,...

5.6AI score0.00185EPSS
SaveExploits0References1
NVD
NVD
added 2 days ago5 views

CVE-2026-68293

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads The MCIA register can return up to 32 dwords 128 bytes when the device advertises the mcia32dwords capability, but struct mlx5ifcmciaregbits only defines dword0..11,...

0.00185EPSS
SaveExploits0References4
OSV
OSV
added 2 days ago4 views

DEBIAN-CVE-2026-68253

In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: check streams bounds before overflow The data-streams overflow check is done after the buffer overflow has already happened. Move the overflow check before the write. Side note, emitting a warning splat with a...

5.5AI score0.00185EPSS
SaveExploits0References1
OSV
OSV
added 2 days ago3 views

DEBIAN-CVE-2026-68229

In the Linux kernel, the following vulnerability has been resolved: media: cedrus: skip invalid H.264 reference list entries Cedrus consumes H.264 refpiclist0/refpiclist1 entries from the stateless slice control and later uses their indices to look up decode-dpb in cedruswritereflist. Rejecting...

5.1AI score0.002EPSS
SaveExploits0References1
OSV
OSV
added 2 days ago4 views

DEBIAN-CVE-2026-68224

In the Linux kernel, the following vulnerability has been resolved: media: mali-c55: Fix possible ERRPTR in enablestreams The mediapadremotepadunique function returns either a valid pointer or an ERRPTR on failure -ENOTUNIQ if multiple links are enabled, -ENOLINK if no connected pad is found. The...

5.2AI score0.00198EPSS
SaveExploits0References1
OSV
OSV
added 2 days ago5 views

DEBIAN-CVE-2026-68130

In the Linux kernel, the following vulnerability has been resolved: ksmbd: defer destroyprevioussession until after NTLM authentication In ntlmauthenticate, destroyprevioussession is called using a user pointer resolved from the client-supplied NTLM blob username field before the NTLMv2 response ...

5.2AI score0.0021EPSS
SaveExploits0References1
NVD
NVD
added 2 days ago8 views

CVE-2026-68124

In the Linux kernel, the following vulnerability has been resolved: mctp: serial: handle zero-length frames to prevent rx buffer overflow The MCTP serial receive state machine reads a frame length byte in mctpserialpushheader case 2 and validates it upper-bound-only: if c MCTPSERIALFRAMEMTU...

0.00193EPSS
SaveExploits0References5
OSV
OSV
added 2 days ago5 views

CVE-2026-18370 Heap-based buffer overflow in entr

entr is vulnerable to Heap-based buffer overflow in runutility function. The function allocates a fixed-size heap buffer using mallocARGMAX and copies command-line arguments into it. It advances the destination pointer based on the return value of strlcpy, which returns the total length of the...

4.8CVSS5.7AI score
SaveExploits0References6
OSV
OSV
added 2 days ago4 views

ROOT-OS-DEBIAN-12-CVE-2026-34501 CVE-2026-34501 in apr-util - Patched by Root

Root has patched CVE-2026-34501 in the apr-util package for Root:Debian:12. Multiple fixed versions available...

7.5CVSS5.2AI score0.00528EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2 days ago5 views

CVE-2026-68416

In the Linux kernel, the following vulnerability has been resolved: mtd: fix double free and WARNON in addmtddevice error paths When deviceregister or mtdnvmemadd fails inside addmtddevice for a partition, the error handling triggers mtdrelease via putdevice or deviceunregister. mtdrelease calls...

5.3AI score0.00156EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2 days ago6 views

CVE-2026-68403

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: initialize SDIO data work before cleanup brcmfsdioprobe stores the newly allocated bus in sdiodev-bus before allocating the ordered workqueue. If that allocation fails, the function jumps to fail and calls...

5.3AI score0.00168EPSS
SaveExploits0
OSV
OSV
added 2 days ago4 views

CVE-2026-68388 smb/client: handle overlapping allocated ranges in fallocate

In the Linux kernel, the following vulnerability has been resolved: smb/client: handle overlapping allocated ranges in fallocate smb3simplefallocaterange can skip holes when an allocated range returned by the server starts before the current fallocate offset. The skipped hole is not zero-filled,...

5.5AI score
SaveExploits0References8
Debian CVE
Debian CVE
added 2 days ago6 views

CVE-2026-68387

In the Linux kernel, the following vulnerability has been resolved: can: raw: add locking for raw flags bitfield With commit 890e5198a6e5 "can: raw: use bitfields to store flags in struct rawsock" the formerly separate integer values have been integrated into a single bitfield. This led to a...

5.3AI score0.00206EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2 days ago5 views

CVE-2026-68379

In the Linux kernel, the following vulnerability has been resolved: tcp: fix TIMEWAIT socket reference leak on PSP policy failure Release the TIMEWAIT socket reference and jump to discardit upon PSP policy failure in both IPv4 and IPv6 receive paths. This prevents a memory leak of tcptwbucket...

5.2AI score0.00206EPSS
SaveExploits0
OSV
OSV
added 2 days ago3 views

CVE-2026-68376 sctp: fix auth_hmacs array size in struct sctp_cookie

In the Linux kernel, the following vulnerability has been resolved: sctp: fix authhmacs array size in struct sctpcookie The authhmacs array in struct sctpcookie is supposed to store a complete SCTPAUTHHMACALGO parameter, which consists of a struct sctpparamhdr followed by N HMAC identifiers...

5.6AI score
SaveExploits0References8
CVE
CVE
added 2 days ago21 views

CVE-2026-68376

CVE-2026-68376 involves the Linux kernel SCTP implementation. The bug is in the auth_hmacs array within struct sctp_cookie: its size was computed using an extra 2 bytes instead of the full SCTP parameter header size, which is sizeof(struct sctp_paramhdr) = 4 bytes. When four HMAC identifiers are ...

5.5AI score0.00168EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2 days ago7 views

CVE-2026-68370

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: dummyhcd: prevent fiforeq reuse during giveback dummyhcd embeds a single shared usbrequest dum-fiforeq that the "emulated single-request FIFO" fast-path in dummyqueue reuses for small IN transfers: it copies the...

5.2AI score0.00175EPSS
SaveExploits0
OSV
OSV
added 2 days ago3 views

CVE-2026-68368 usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb()

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fncm: validate datagram bounds in ncmunwrapntb When unpacking host-supplied NTBs, ncmunwrapntb checks datagram length against framemax but does not verify that the datagram fits within the declared block length...

5.6AI score
SaveExploits0References8
Rows per page
Query Builder