9639 matches found
CVE-2026-26742: Missing Authorization
PX4 Autopilot versions 1.12.x through 1.15.x contain a protection mechanism failure in the "Re-arm Grace Period" logic. The system incorrectly applies the in-air emergency re-arm logic to ground scenarios. If a pilot switches to Manual mode and re-arms within 5 seconds default configuration of an...
PT-2026-24435
Name of the Vulnerable Software and Affected Versions KVM versions affected versions not specified Description An out-of-bounds write issue exists in the hyp alloc function within arch/arm64/kvm/hyp/nvhe/alloc.c. This is due to insufficient input validation. Successful exploitation could lead to...
The vulnerability of the drivers/firmware/arm_scmi components of the Linux operating system, which allows a hacker to cause a service failure.
The vulnerability of the drivers/firmware/armscmi components of the Linux operating system is related to memory initialization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-26742
PX4 Autopilot versions 1.12.x through 1.15.x contain a protection mechanism failure in the "Re-arm Grace Period" logic. The system incorrectly applies the in-air emergency re-arm logic to ground scenarios. If a pilot switches to Manual mode and re-arms within 5 seconds default configuration of an...
Out-of-bounds Read
Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...
Stack-based Buffer Overflow
Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...
freerdp: FreeRDP global-buffer-overflow
A global buffer overflow flaw has been discovered in FreeRDP. This global-buffer-overflow was observed in FreeRDP's Base64 decoding path. The root cause appears to be implementation-defined char signedness: on Arm/AArch64 builds, plain char is treated as unsigned, so the guard c = 0 can be...
freerdp: FreeRDP global-buffer-overflow
A global buffer overflow flaw has been discovered in FreeRDP. This global-buffer-overflow was observed in FreeRDP's Base64 decoding path. The root cause appears to be implementation-defined char signedness: on Arm/AArch64 builds, plain char is treated as unsigned, so the guard c = 0 can be...
pyvex:irsb_fuzzer: Heap-buffer-overflow in libpyvex.so
Detailed Report: https://oss-fuzz.com/testcase?key=4798045517840384 Project: pyvex Fuzzing Engine: libFuzzer Fuzz Target: irsbfuzzer Job Type: libfuzzerasanpyvex Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x6160006566c9 Crash State: libpyvex.so disInstrARM bbtoIR...
Astra Linux - уязвимость в linux-5.10
In the Linux kernel, the following vulnerability has been resolved: iommu/io-pgtable-arm: fix sizet signedness bug in unmap path armlpaeunmap returns sizet but was returning -ENOENT negative error code when encountering an unmapped PTE. Since sizet is unsigned, -ENOENT typically -2 becomes a huge...
Astra Linux - уязвимость в linux-5.10
In the Linux kernel, the following vulnerability has been resolved: mm/slub: reset KASAN tag in deferfree before accessing freed memory When CONFIGSLUBTINY is enabled, kfreenolock calls kasanslabfree before deferfree. On ARM64 with MTE Memory Tagging Extension, kasanslabfree poisons the memory an...
CVE-2026-0995
An issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a TLBI+DSB might fail to ensure the completion of memory accesses related to SME...
PQC-LEO: An Evaluation Framework for Post-Quantum Cryptographic Algorithms
Advances in quantum computing threaten digital communication security by undermining the foundations of current public-key cryptography through Shor's quantum algorithm. This has driven the development of Post-Quantum Cryptography PQC, a new set of algorithms resistant to quantum attacks. While...
Vulnerability of the arm_smmu_device_probe() function in the drivers/iommu/arm/arm-smmu/arm-smmu.c file – This is a Linux kernel IOMMU driver that allows a hacker to cause a service failure.
Vulnerability of the armsmmudeviceprobe function in the drivers/iommu/arm/arm-smmu/arm-smmu.c file – The Linux kernel’s IOMMU support driver is vulnerable due to a NULL pointer dereferencing issue. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the hi3xxx_smp_prepare_cpus() function in the arch/arm/mach-hisi/platsmp.c module, which is part of the ARM platform support for the Linux operating system, allows a hacker to cause a service failure.
The vulnerability of the hi3xxxsmppreparecpus function in the arch/arm/mach-hisi/platsmp.c module, which is part of the Linux operating system’s ARM platform support, involves a memory leak. Exploiting this vulnerability can allow an attacker to cause a system failure...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005753)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005753 advisory. In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE Kunkun Jiang reported that there is a small...
USN-8074-2: Linux kernel (Azure FIPS) vulnerabilities
It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. CVE-2024-36331 Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt...
CVE-2026-0027
In smmudetachdev of arm-smmu-v3.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
pixel-tiktag-exploit
Memory Tagging Extension MTE and Speculative Execution Bypas...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005470)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005470 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: efi: Make efirtlock a rawspinlock Running a rt-kernel base on 6.2.0-rc3-rt1 on an Ampere...