14721 matches found
CVE-2026-72238 x86/boot: Validate console=uart8250 baud rate to fix early boot hang
In the Linux kernel, the following vulnerability has been resolved: x86/boot: Validate console=uart8250 baud rate to fix early boot hang When the baud rate is empty, 0, invalid, or overflows to 0 when stored as an int, the system will hang during early boot because of a division by zero in...
CVE-2026-72238
CVE-2026-72238 affects the Linux kernel in the x86/boot path, where an empty/0/invalid baud rate for uart8250 could lead to a division by zero in early_serial_init() and cause a hang during early boot. The documented fix is to fall back to DEFAULT_BAUD when the computed baud rate is 0. The connec...
CVE-2026-72238 x86/boot: Validate console=uart8250 baud rate to fix early boot hang
In the Linux kernel, the following vulnerability has been resolved: x86/boot: Validate console=uart8250 baud rate to fix early boot hang When the baud rate is empty, 0, invalid, or overflows to 0 when stored as an int, the system will hang during early boot because of a division by zero in...
EUVD-2026-58973
In the Linux kernel, the following vulnerability has been resolved: MIPS: DEC: Ensure 32-bit stack location for o32 promprintf In 64-bit configurations calling any firmware entry points from a kernel thread other than the initial one will result in a situation where the stack has been placed in t...
PT-2026-72426
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A division by zero occurs in the early serial init function during early boot. This happens when the baud rate for console=uart8250 is empty, 0, invalid, or overflows to 0 when stored as...
Oracle Linux 8 : dracut (ELSA-2026-54575)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-54575 advisory. 049-246.git20260728.0.1 - Refactor getucodefile Orabug: 36989953 - Revert the fixes for bugs 33676753 and 33888951 due to regressions Orabug: 35656614 - Fix ty...
CVE-2026-72238: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: x86/boot: Validate console=uart8250 baud rate to fix early boot hang When the baud rate is empty, 0, invalid, or overflows to 0 when stored as an int, the system will hang during early boot because of a division by zero in...
Improper Certificate Validation
Spring Boot is vulnerable to Improper Certificate Validation. The vulnerability is due to hostname verification being disabled in Mail auto-configuration, which allows an attacker capable of intercepting the SMTP connection to impersonate the intended mail server and potentially access or...
Insecure Temporary File
Spring Boot is vulnerable to Insecure Temporary File. The vulnerability is due to the use of a predictable static directory for the embedded Artemis broker's data, which allows a local attacker to pre-create or replace the directory with a symlink and potentially redirect broker file operations t...
SUSE CVE-2026-68185
In the Linux kernel, the following vulnerability has been resolved: LoongArch: Move jumplabelinit before parseearlyparam When enabling both CONFIGMEMALLOCPROFILING=y and CONFIGMEMALLOCPROFILINGENABLEDBYDEFAULT=y, then diabling memory profiling by adding the boot parameter 'sysctl.vm.memprofiling=...
dracut-112+suse.29.gc0c5e1d-1.1 on GA media (moderate)
dracut-112+suse.29.gc0c5e1d-1.1 on GA media Announcement ID: openSUSE-SU-2026:11504-1 Rating: moderate Cross-References: CVE-2026-15816 CVSS scores: CVE-2026-15816 SUSE : 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerabilit...
Oracle Linux 9 : dracut (ELSA-2026-54571)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-54571 advisory. 057-120.git20260728.0.1 - Skip the default FIPS logic on special UEK kernels where the FIPS module is linked directly into the kernel. Orabug: 38705580 - Ship...
io.zerows:zero-boot-actor (1.0.50), io.zerows:zero-boot-cloud-actor (1.0.50) +17 more potentially affected by CVE-2026-72645 via org.elasticsearch:elasticsearch (>=9.0.0, <=9.4.4)
org.elasticsearch:elasticsearch MAVEN version =9.0.0, =0.102.0, =9.4.0, =9.4.0, =9.0.0, =9.4.4 and more Source cves: CVE-2026-72645 Source advisory: MEND:CVE-2026-72645...
dracut security update
049-246.git20260728.0.1 - Refactor getucodefile Orabug: 36989953 - Revert the fixes for bugs 33676753 and 33888951 due to regressions Orabug: 35656614 - Fix typo in orabug33888951-dracut-Enable-the-code-to-create-ifcfg-file.patch Orabug: 35268918 - Enable the code to create ifcfg file Orabug:...
ALSA-2026:54571 Important: dracut security update
The dracut packages contain an event-driven initial RAM file system initramfs generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition...
CVE-2025-59319
CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to certify the integrity of the intended boot partition and selects the first partition index matching a hardcoded type value. A crafted Linux partition could be inserted ahead of this intended target, allowing for code execution in the...
CVE-2026-6484
In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution...
CVE-2026-6484 Lack of verified boot to certain FV may cause arbitrary code execution
In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution...
