Linux kernel x25_queue_rx_frame Heap Buffer Overflow DoS

The vulnerability of the functions x25queuerxframe and x25clearqueues in the net/x25/x25in.c module, which are part of the networking functions in the Linux kernel, involves copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability...

Smb Kernel Heap Buffer Overflow DoS

The vulnerability of the senddone function in the fs/smb/server/transportrdma.c file of the Smb kernel of the Linux operating system is related to improper handling of the absence of a special element. Exploiting this vulnerability can allow an attacker, acting remotely, to compromise the...

Linux kernel bcache cached_dev_free Heap Buffer Overflow DoS

The vulnerability of the cacheddevfree function in the drivers/md/bcache/super.c module of the Linux operating system’s software RAID/LVM kernel driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

Linux ct_vm_map Heap Buffer Overflow DoS

The vulnerability of the ctvmmap function in the sound/pci/ctxfi/ctvmem.c module of the Linux kernel is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Btrfs File System Heap Buffer Overflow DoS

The vulnerability of the lookupextentdataref function in the fs/btrfs/extent-tree.c file of the Btrfs file system in the Linux operating system is related to the return of incorrect code states. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity,...

I2C driver Heap Buffer Overflow DoS

The vulnerability of the i2cimxmasterisr function in the drivers/i2c/busses/i2c-imx.c module of the I2C driver for the Linux operating system is related to the use of a pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...

InfiniBand driver RCE

The vulnerability of the savestate, rollbackstate, and rxerequester functions in the drivers/infiniband/sw/rxe/rxereq.c module of the InfiniBand driver for Linux operating systems is related to the violation of data format agreements. Exploiting this vulnerability can allow a remote attacker to...

netfilter SIP Help TCP Buffer Overflow

The vulnerability of the siphelptcp function in the net/netfilter/nfconntracksip.c module of the netfilter component of the Linux operating system is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a remote attacker to compromise the...

Linux io_uring Heap Buffer Overflow DoS

The vulnerability of the ioregisterresizerings function in the iouring/register.c module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

Linux kernel Bluetooth L2CAP Buffer Overflow DoS

The vulnerabilities of the functions l2capdisconnectreq and l2capdisconnectrsp in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem are related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting these vulnerabilities coul...

ad3552r_hs_write_data_source() Function Use-After-Free

The vulnerability of the ad3552rhswritedatasource function in the drivers/iio/dac/ad3552r-hs.c driver for various types of built-in sensors in the Linux operating system is related to the issue of data being written outside of the buffer in memory. Exploiting this vulnerability could allow an...

Linux IOMMU Driver Use-After-Free

The vulnerability of the iommuallocmmdata function in the drivers/iommu/iommu-sva.c module of the Linux IOMMU driver is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected informatio...

ROS-20260825-73-0008

The vulnerability of the ieee80211registerhw function in the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality,...

ROS-20260825-73-0001

The vulnerability of the recvdone function in the fs/smb/server/transportrdma.c module of the SMB server support in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

mpu3050_common_remove Heap Buffer Overflow DoS

The vulnerability of the mpu3050commonremove function in the iio/gyro/mpu3050-core.c driver of various types of embedded sensors in the Linux operating system is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to compromise the...

Linux kernel TCP SYN recv Data Compromise

The vulnerability of the tcpv6synrecvsock and tcpv4synrecvsock functions in the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

GLSA-202608-22 : needrestart: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202608-22 needrestart: Multiple vulnerabilities Multiple vulnerabilities have been discovered in needrestart. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block...

CVE-2026-18849

IBM OpenBMC firmware (FW1060.00–FW1060.80) on Power 10 systems is vulnerable to arbitrary code execution via the BMC firmware update process. The root cause is CWE-22 (Path Traversal) . An attacker with authenticated administrator-level access to the BMC over an adjacent network can exploit this ...

CVE-2026-16707

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox...

CVE-2026-16707 Power System Out-of-bounds Read

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox...