Linux kernel Heap Buffer Overflow DoS

The vulnerability of the ivpumsgetinfoioctl function in the drivers/accel/ivpu/ivpums.c kernel module of the Linux operating system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability may allow an attacker to access protected information...

PT-2026-85610

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the HID rapoo driver where the to usb interface function is called without first verifying if the device is actually a USB device using the hid is usb check. This is...

PT-2026-85614

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.5-1.1 Description A flaw exists in the HID huawei module where the to usb interface function is called without first verifying if the device is actually a USB device using hid is usb. This is problematic...

PT-2026-85615

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.5-1.1 Description A flaw exists in the HID asus module where the to usb interface function is called without first verifying if the device is actually a USB device using hid is usb. This is problematic becaus...

PT-2026-85618

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the private futex implementation during the exec process. The check to verify if the waiter's memory management mm is the same as the owner's mm is insufficien...

PT-2026-85622

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the HID core. The hid set field function passes field-usage + offset to hid dump input before verifying if the offset is within the allowed bounds of...

PT-2026-85646

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system where the xfs attr3 leaf verify entry function accesses lentry/rentry fields, specifically namelen and valuelen, before verifying if the entry...

PT-2026-85687

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mailbox mchp-ipc-sbi component where the mchp ipc get cluster aggr irq function fails to verify if the devm kasprintf function returns a NULL value. This lack of a...

PT-2026-85705

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab out-of-bounds read exists in the interrupt URB callback of the USB serial option driver. The issue occurs when a USB device declares wMaxPacketSize as 8 on its interrupt IN...

Direct Rendering Infrastructure Heap Buffer Overflow DoS

The vulnerability of the sun4ibackendatomiccheck function in the drivers/gpu/drm/sun4i/sun4ibackend.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service...

netfilter Module Heap Buffer Overflow DoS

The vulnerability of the matchpolicyin function in the net/netfilter/xtpolicy.c module of the netfilter component of the Linux operating system is related to an incorrect order of authentication checks before syntactic analysis and canonization. Exploiting this vulnerability could allow a remote...

Linux kernel decode_choose_args Heap Buffer Overflow DoS

The vulnerability of the decodechooseargs function in the net/ceph/osdmap.c module, which is part of the networking functions of the Linux kernel, stems from an improper check of the specified index, position, or offset in the input data. Exploiting this vulnerability could allow a malicious acto...

BPF Kernel Heap Buffer Overflow DoS

The vulnerability of the arenaallocpages function in the kernel/bpf/arena.c module, which is part of the Linux kernel’s BPF interpreter support, relates to the comparison of numerical ranges without any minimum checks during request processing. Exploiting this vulnerability could allow an attacke...

PT-2026-85487

phpMyFAQ before 4.1.8 enforces incorrect permission checks on admin content pages, allowing lesser-privileged editors to read draft and inactive content. Attackers with only add permissions can access news edit and FAQ translate endpoints to view unpublished content invisible to the public...

PT-2026-85442

Name of the Vulnerable Software and Affected Versions Corosync affected versions not specified Description A heap-based buffer overflow exists in the Totem Process Group totempg message reassembly of Corosync. The issue occurs during the processing of fragmented multicast messages because the...

PT-2026-86195

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/tls component where the tls sw splice read function fails to check for errors after a failed asynchronous decryption. While tls sw recvmsg and tls sw read sock...

PT-2026-85455

MISP contains a cross-site request forgery CSRF vulnerability in the sharing group quick-edit functionality. The addOrg, removeOrg, addServer, and removeServer actions share the initialiseSGQuickEdit helper, where the HTTP method validation intended to restrict these operations to POST requests w...

CVE-2026-80814: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: rndishost: add overflow check in rndisrxfixup Add an overflow check to ensure that dataoffset + datalen + 8 does not wrap, which would enable an OOB read of the USB data buffer...

PT-2026-91369

In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: Add null check for devm kasprintf Add a check to see if devm kasprintf is not NULL in mchp ipc get cluster aggr irq, returning -ENOMEM if the function failed...

Linux Distros Unpatched Vulnerability : CVE-2026-80772

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: nintendo: fix out-of-bounds read in joyconctlrreadhandler joyconctlrreadhandler casts an incoming HID input report to struct joyconinputreport and parses...