CVE-2026-74603

A flaw was found in the Linux kernel's ptp: ocp module. This vulnerability occurs because the EEPROM board ID, a fixed-size field, is not guaranteed to be null-terminated. When this ID is processed as a C string, it may lead to an over-read beyond its intended memory boundary. This memory...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: qca – fixed an issue where information was leaked when retrieving the board ID. A missing sanity check was added when retrieving the board ID to prevent the leakage of slab data when later requesting the firmware...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ath11k: pci: fix crash on suspend if board file is not found Mario reported that the kernel crashed during suspension if ath11k failed to locate the board file: 473.693286 PM: Suspending system s2idle 473.693291 printk:...

SUSE CVE-2026-74603

In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix board ID over-read The EEPROM board ID is a fixed 13-byte field and is not guaranteed to contain a NUL terminator. Passing it directly to devlinkinfoversionfixedput treats it as a C string and may read beyond the...

CVE-2026-74603

In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix board ID over-read The EEPROM board ID is a fixed 13-byte field and is not guaranteed to contain a NUL terminator. Passing it directly to devlinkinfoversionfixedput treats it as a C string and may read beyond the...

UBUNTU-CVE-2026-74603

In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix board ID over-read The EEPROM board ID is a fixed 13-byte field and is not guaranteed to contain a NUL terminator. Passing it directly to devlinkinfoversionfixedput treats it as a C string and may read beyond the...

CVE-2026-74603 ptp: ocp: Fix board ID over-read

In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix board ID over-read The EEPROM board ID is a fixed 13-byte field and is not guaranteed to contain a NUL terminator. Passing it directly to devlinkinfoversionfixedput treats it as a C string and may read beyond the...

CVE-2026-74603

CVE-2026-74603 is an over-read vulnerability in the Linux kernel's ptp: ocp module. The EEPROM board ID is a fixed 13-byte field not guaranteed to contain a NUL terminator; passing it directly to devlink_info_version_fixed_put() treats it as a C string, potentially reading beyond its intended mem...

CVE-2026-74603 ptp: ocp: Fix board ID over-read

In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix board ID over-read The EEPROM board ID is a fixed 13-byte field and is not guaranteed to contain a NUL terminator. Passing it directly to devlinkinfoversionfixedput treats it as a C string and may read beyond the...

EUVD-2026-64540

In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix board ID over-read The EEPROM board ID is a fixed 13-byte field and is not guaranteed to contain a NUL terminator. Passing it directly to devlinkinfoversionfixedput treats it as a C string and may read beyond the...

PT-2026-79608

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An over-read issue exists in the PTP OCP component. The EEPROM board ID is a fixed 13-byte field that may lack a NUL terminator. When this field is passed to the devlink info version fix...

CVE-2026-74603: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix board ID over-read The EEPROM board ID is a fixed 13-byte field and is not guaranteed to contain a NUL terminator. Passing it directly to devlinkinfoversionfixedput treats it as a C string and may read beyond the...

Linux Distros Unpatched Vulnerability : CVE-2026-74603

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ptp: ocp: Fix board ID over-read The EEPROM board ID is a fixed 13-byte field and is not guaranteed to contain a NUL terminator. Passing it directly to...

[SECURITY] Fedora 44 Update: i2c-display-0.5.4-1.fc44

A Go application for Single Board Computers Raspberry Pi 3/4, Rock 3C that controls I2C OLED displays SSD1306, SH1106, etc. showing system stats and network information with rotating pages. Features: - System monitoring disk, RAM, CPU temperature - Network interface information - Automatic page...

[SECURITY] Fedora 43 Update: i2c-display-0.5.4-1.fc43

A Go application for Single Board Computers Raspberry Pi 3/4, Rock 3C that controls I2C OLED displays SSD1306, SH1106, etc. showing system stats and network information with rotating pages. Features: - System monitoring disk, RAM, CPU temperature - Network interface information - Automatic page...

PT-2026-79094

Name of the Vulnerable Software and Affected Versions django CMS versions prior to 5.0.9 Description The render object structure function fails to properly authorize non-PageContent objects that utilize PlaceholderRelationField. An active staff user lacking cms.use structure or model-level view o...

Mattermost Server 10.11.x < 10.11.22 / 11.7.x < 11.7.7 Multiple Vulnerabilities (MMSA-2026-00672, MMSA-2026-00675, MMSA-2026-00704)

The version of Mattermost Server installed on the remote host is affected by multiple vulnerabilities as referenced in the MMSA-2026-00672, MMSA-2026-00675, MMSA-2026-00704 advisories. - Mattermost versions 11.7.x = 11.7.6, 10.11.x = 10.11.21 fail to prevent guest users from receiving Board Admin...

CVE-2026-68900

Wekan is open source kanban built with Meteor. From 8.72 until 10.23, addBoardHTMLToZip in client/lib/exportHTML.js read a card title and body through textContent, which decoded entity-encoded markup, and then interpolated titleText and allText into content.innerHTML in the exported index.html. A...

CVE-2026-68561

Wekan is open source kanban built with Meteor. Prior to 9.89, the second Boards.allow update rule in server/permissions/boards.js called canUpdateBoardSort in server/lib/utils.js, which authorized any board member whenever fieldNames included sort. Because Meteor combines allow rules with OR...

EUVD-2026-62710

Wekan is open source kanban built with Meteor. From 8.72 until 10.23, addBoardHTMLToZip in client/lib/exportHTML.js read a card title and body through textContent, which decoded entity-encoded markup, and then interpolated titleText and allText into content.innerHTML in the exported index.html. A...