Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: - BPF: The rcureadlockTraceheld function in bpfmaplookuppercpuelem needs to be checked. The bpfmaplookuppercpuelem helper function is also available for sleepable BPF programs. When BPF JIT is disabled or on a 32-bit host,...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, the MAT decoder used 32-bit arithmetic due to incorrect parenthesization, resulting in a heap over-read. This vulnerability has been fixed in versions 7.1.2-16...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: “mm/writeback: fix possible divide-by-zero in wbdirtylimits, again” This issue was addressed by reverting to the previous behavior. The patch series “mm: Avoid possible overflows in dirty throttling” also addresses this issue. Th...

EUVD-2026-77126

A weakness has been identified in embedded-graphics up to 0.8.2 on 32-bit. Impacted is the function ImageRaw::new/bytesperrow of the file src/image/imageraw.rs. This manipulation causes integer overflow. The attack is possible to be carried out remotely. Upgrading the affected component is...

UBUNTU-CVE-2026-89579

In the Linux kernel, the following vulnerability has been resolved: bpf: Harden bloom filter sizing and indexing on 32-bit kernels bloommapalloc has two 32-bit-specific problems when the computed bitmap reaches the U32MAX fallback case. First, BITSTOBYTESU32MAX is evaluated with 32-bit arithmetic...

CVE-2026-90648

wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does not check the return value of calloc in wasmrtallocatefuncreftable wasm2c/wasm-rt-impl-tableops.inc. When the funcref table allocation...

CVE-2026-89568

In the Linux kernel, the following vulnerability has been resolved: kho: fix size calculation in khopreservedmemoryreserve khopreservedmemoryreserve calculates the size of a preservation by doing 1 order + PAGESHIFT. Since the '1' is a 32-bit integer, it can only be shifted by 31. That is, it wil...

CVE-2026-89579

In the Linux kernel, the following vulnerability has been resolved: bpf: Harden bloom filter sizing and indexing on 32-bit kernels bloommapalloc has two 32-bit-specific problems when the computed bitmap reaches the U32MAX fallback case. First, BITSTOBYTESU32MAX is evaluated with 32-bit arithmetic...

UBUNTU-CVE-2026-89640

In the Linux kernel, the following vulnerability has been resolved: cifs: fix lofft underflow in cifsremapfilerange when len == 0 With len == 0 clone to EOF, the effective length is computed as: len = srcinode-isize - off; If off isize, this is a negative lofft, corrupting the ByteCount in the...

CVE-2026-89490

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix readdir position truncation on 32-bit kernels In ocfs2dirforeachblkel, the directory cookie position is rebuilt with ctx-pos = ctx-pos & sb-sblocksize - 1 | offset; ctx-pos is lofft signed 64-bit, while sb-sblocksize i...

CVE-2026-90596

A weakness has been identified in embedded-graphics up to 0.8.2 on 32-bit. Impacted is the function ImageRaw::new/bytesperrow of the file src/image/imageraw.rs. This manipulation causes integer overflow. The attack is possible to be carried out remotely. Upgrading the affected component is...

CVE-2026-90596 embedded-graphics image_raw.rs new/bytes_per_row integer overflow

A weakness has been identified in embedded-graphics up to 0.8.2 on 32-bit. Impacted is the function ImageRaw::new/bytesperrow of the file src/image/imageraw.rs. This manipulation causes integer overflow. The attack is possible to be carried out remotely. Upgrading the affected component is...

CVE-2026-90596

embedded-graphics (Rust library) up to 0.8.2 is affected by an integer overflow in the ImageRaw::new/bytes_per_row function (src/image/image_raw.rs) on 32-bit platforms. The flaw can be triggered remotely without authentication or user interaction. Per CVSS 3.1, the impact is rated MEDIUM (6.5) w...

CVE-2026-90596 embedded-graphics image_raw.rs new/bytes_per_row integer overflow

A weakness has been identified in embedded-graphics up to 0.8.2 on 32-bit. Impacted is the function ImageRaw::new/bytesperrow of the file src/image/imageraw.rs. This manipulation causes integer overflow. The attack is possible to be carried out remotely. Upgrading the affected component is...

cve-2021-3490-ebpf-analysis

cve-2021-3490-ebpf-analysis Research implementation demonstrating interaction with Linux eBPF subsystem related to CVE-2021-3490. Includes BPF map creation, syscall wrappers, namespace setup, and verifier analysis. For educational and security research purposes only. CVE-2021-3490 – eBPF Verifier...

CVE-2023-33802

CVE-2023-33802 SumatraPDF 3.4.6 - 32ビット サービス拒否 DoS 説明 このバグでは、SumatraPDF 32ビットに入力として2つの大きなサイズのテキストファイル（first.txt & second.txt）を開いたときに現れるクラッシュに対処します。 以下のコマンドを実行するか、SumatraPDF 32ビット3.4.6で手動で両方のファイルを開くことができます。 root@kitploit: SumatraPDF.exe first.txt second.txt WinDBGを使用した32ビット版3.4.6アプリケーションのクラッシュレポート...

CVE-2026-90783 MKVToolNix through 101.0 Heap Buffer Overflow via avilib ODML Superindex Integer Wraparound

MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file with oversized entry counts that cause an undersized heap allocation, allowing a heap buffer...

EUVD-2026-76923

wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does not check the return value of calloc in wasmrtallocatefuncreftable wasm2c/wasm-rt-impl-tableops.inc. When the funcref table allocation...

CVE-2026-90648

wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does not check the return value of calloc in wasmrtallocatefuncreftable wasm2c/wasm-rt-impl-tableops.inc. When the funcref table allocation...

CVE-2026-90648

wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does not check the return value of calloc in wasmrtallocatefuncreftable wasm2c/wasm-rt-impl-tableops.inc. When the funcref table allocation...