3856 matches found
CVE-2026-99232
A flaw was found in the Linux kernel. A local attacker can trigger this issue by invoking faultable system calls with non-user memory addresses while tracing is active. Because the kernel fails to verify that the source address resides in user space before copying data into trace buffers, this fl...
SUSE CVE-2026-99164
In the Linux kernel, the following vulnerability has been resolved: spi: imx: fix slab corruption from undersized DMA bounce buffers Since commit faa8e404ad8e "spi: imx: support dynamic burst length for ECSPI DMA mode", the driver allocates its private DMA TX/RX buffers with kzallocdmalen, where...
CVE-2026-99264
In the Linux kernel, the following vulnerability has been resolved: iouring/net: don't retry recv on uncommitted buffers Commit 41b70df5b38b "iouring/net: commit partial buffers on retry" commits ring provided buffers when a receive is going to be retried after a partial transfer, so that another...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: media: rtl2832sdr: Return queued buffers on startstreaming failure The vb2 framework passes buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffer...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: make releasescratchbuffers idempotent brcmfpciereleasescratchbuffers frees the shared.scratch and shared.ringupd DMA buffers using dmafreecoherent, but does not clear the pointers afterward—unlike the sibling...
CVE-2021-21401_nanopb-c_AOSP10_R33
Nanopb - Protocol Buffers for Embedded Systems Nanopb is a small code-size Protocol Buffers implementation in ansi C. It is especially suitable for use in microcontrollers, but fits any memory restricted system. Homepage: https://jpa.kapsi.fi/nanopb/ Documentation: https://jpa.kapsi.fi/nanopb/doc...
boringssl
BoringSSL BoringSSL is a fork of OpenSSL that is designed to meet Google's needs. Although BoringSSL is an open source project, it is not intended for general use, as OpenSSL is. We don't recommend that third parties depend upon it. Doing so is likely to be frustrating because there are no...
CVE-2026-43494-PinTheft-PoC
SLEY — PinTheft PoC CVE-2026-43494 Proof of concept — uid=1000raken → uid=0root after ./sley on WSL2 6.6.87.2-microsoft-standard-WSL2 Single-file proof-of-concept for CVE-2026-43494 PinTheft: a Linux kernel local privilege escalation that chains an RDS zerocopy reference-count bug with iouring...
CLEANSTART-2024-XM96157 Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access
Security vulnerability affects the xen package. Incomplete cleanup of microarchitectural fill buffers on some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2026-43494-PinTheft-PoC
SLEY — PinTheft PoC CVE-2026-43494 Proof of concept — uid=1000raken → uid=0root after ./sley on WSL2 6.6.87.2-microsoft-standard-WSL2 Single-file proof-of-concept for CVE-2026-43494 PinTheft: a Linux kernel local privilege escalation that chains an RDS zerocopy reference-count bug with iouring...
CLEANSTART-2026-HU05701 Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i
CVE-2024-7254 affects multiple packages. Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i. See references for individual vulnerability details...
CVE-2026-119132
A flaw was found in wasmtime. This vulnerability allows an untrusted WebAssembly Wasm guest program to cause a Denial of Service DoS by triggering an unhandled host process crash. When converting text between components using overlapping memory buffers, the runtime panics and terminates the host...
CVE-2026-104016
A flaw was found in jackson-dataformat-protobuf. This vulnerability allows a remote attacker to cause a Denial of Service DoS by sending specially crafted Protocol Buffers data. Due to an integer overflow during bounds checking for length-prefixed string and byte fields, the parser bypasses...
CVE-2026-99047
A flaw was found in the Google Virtual Ethernet gve driver in the Linux kernel. When stopping network queues and resetting the ring state, the driver fails to release eXpress Data Path socket XSK buffers posted to the network interface. A local user with network administrative privileges can...
CVE-2026-99046
A flaw was found in the Linux kernel's Google Virtual Ethernet gve driver. A remote attacker could cause a Denial of Service DoS by generating network traffic that triggers receive errors on interfaces configured with zero-copy packet buffers. Because the driver fails to release the associated...
CVE-2026-99028
A flaw was found in the Linux kernel's Xilinx Axi Ethernet driver. During network interface shutdown, the driver fails to unmap and release active Direct Memory Access DMA buffers and suffers from a race condition during teardown. A privileged local user could exploit this vulnerability by...
CVE-2026-99164
In the Linux kernel, the following vulnerability has been resolved: spi: imx: fix slab corruption from undersized DMA bounce buffers Since commit faa8e404ad8e "spi: imx: support dynamic burst length for ECSPI DMA mode", the driver allocates its private DMA TX/RX buffers with kzallocdmalen, where...
DEBIAN-CVE-2026-99164
In the Linux kernel, the following vulnerability has been resolved: spi: imx: fix slab corruption from undersized DMA bounce buffers Since commit faa8e404ad8e "spi: imx: support dynamic burst length for ECSPI DMA mode", the driver allocates its private DMA TX/RX buffers with kzallocdmalen, where...
CVE-2026-99164
In the Linux kernel, the following vulnerability has been resolved: spi: imx: fix slab corruption from undersized DMA bounce buffers Since commit faa8e404ad8e "spi: imx: support dynamic burst length for ECSPI DMA mode", the driver allocates its private DMA TX/RX buffers with kzallocdmalen, where...