408672 matches found
Linux kernel Set RQ Size Buffer Overflow
The vulnerability of the setrqsize function in the drivers/infiniband/hw/mlx5/qp.c component of the Linux kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
Linux Kernel BPF Buffer Overflow DoS
The vulnerability in the bpfprogmapcompatible function within kernel/bpf/core.c in the Linux operating system kernel is related to insufficient resource control during its existence. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the rtwpcirxnapi function in the drivers/net/wireless/realtek/rtw88/pci.c component of the Linux kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of...
Linux wcn36xx_smd_print_reg_info_ind Heap Buffer Overflow DoS
The vulnerability of the wcn36xxsmdprintreginfoind function in the drivers/net/wireless/ath/wcn36xx/smd.c component of the Linux operating system is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the athtxedmatasklet function in the drivers/net/wireless/ath/ath9k/xmit.c file of the Linux kernel is related to the occurrence of operations outside of memory buffers. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity,...
Linux kernel debug_lockres_open Heap Buffer Overflow DoS
The vulnerability of the debuglockresopen function in the fs/ocfs2/dlm/dlmdebug.c component of the Linux kernel is related to the pointer being reclaimed after its validity period has expired. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
Linux net/tipc/socket.c Heap Buffer Overflow DoS
The vulnerability of the tipcskconnprotorcv function in the net/tipc/socket.c component of the Linux operating system is related to the improper implementation of thread management. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Linux kernel addrconf_dad_failure() Buffer Overflow
The vulnerability of the addrconfdadfailure function in the net/ipv6/addrconf.c component of the Linux kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility ...
RHEL 10 : kernel (RHSA-2026:83707)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:83707 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Bluetooth: MGMT: validate LT...
Linux kernel Heap Buffer Overflow DoS
The vulnerability in the isvmareahugepages function within the include/linux/vmalloc.h component of the Linux kernel operating system is related to dereferencing pointers. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
Linux kernel Heap Buffer Overflow DoS
The vulnerability in the vdusedevopen function within the drivers/vdpa/vdpauser/vdusedev.c component of the Linux kernel system is related to an improper implementation of the control flow. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the getsrqwqe function in the drivers/infiniband/sw/rxe/rxeresp.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
SUSE CVE-2026-86562
A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with attacker-controlled content in the VDUSE control-queue handler...
SUSE CVE-2026-86849
A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in chain length checks, and missing length checks on the RSA path, can overflow a host buffer in the vhost-crypto backend...
SUSE CVE-2026-86856
A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue pair can be overflowed when more virtqueues are configured, leading to a host crash or memory corruption...
SUSE CVE-2026-110837
FreeRDP 2.0.0 before 3.32.0, when built with WITHLAME=ON and WITHDSPFFMPEG=OFF, has a heap-based buffer overflow in freerdpdspdecodemp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded sampl...
CVE-2026-15176
A flaw was found in nginx. A remote, unauthenticated attacker can trigger a heap-based buffer overflow by sending crafted HTTP requests to a server configured with specific alias and rewrite directives that reference the request filename variable. Successful exploitation may allow an attacker to...
DEBIAN-CVE-2026-111273
unarr through 1.1.1 contains an off-by-one heap-based buffer overflow in targetname in tar/parse-tar.c, reachable through the arentrygetname API. Attackers can supply a crafted TAR archive with a full ustar prefix and name to write a NUL byte past the allocation, corrupting heap memory and crashi...
CVE-2026-111273
unarr through 1.1.1 contains an off-by-one heap-based buffer overflow in targetname in tar/parse-tar.c, reachable through the arentrygetname API. Attackers can supply a crafted TAR archive with a full ustar prefix and name to write a NUL byte past the allocation, corrupting heap memory and crashi...
CVE-2026-111273
unarr through 1.1.1 contains an off-by-one heap-based buffer overflow in targetname in tar/parse-tar.c, reachable through the arentrygetname API. Attackers can supply a crafted TAR archive with a full ustar prefix and name to write a NUL byte past the allocation, corrupting heap memory and crashi...