62 matches found
CVE-2026-103513
The Apache DataSketches C++ library (repository: datasketches-cpp ) is vulnerable to out-of-bounds read and write during CPC sketch deserialization. The root cause is a failure to validate the read position during decoding and a lack of validation for decoded row indices and header fields (includ...
EUVD-2026-96307
Out-of-bounds read and write in the CPC sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. A crafted serialized CPC sketch passed to cpcsketch::deserialize, from either a byte buffer or a stream, can cause the decompressor to read past the end of the compressed data, becaus...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: - For MIPS architecture: In mipscpcdefaultphysbase, a refcount leak was fixed. - The function ofnodeput was added to release the refcount incremented by offindcompatiblenode...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Fixed NULL pointer dereferencing when nosmp is used When nosmp is used in the command line, other CPUs are not brought up, leaving their cpcdescptr NULL. CPU0’s iteration via foreachpossiblecpu dereferences these NULL...
CVE-2026-74460
A flaw was found in the Linux kernel's emsusb module. This vulnerability occurs because the emsusbreadbulkcallback function, which processes Controller Area Network CAN Protocol Converter CPC messages from a USB receive buffer, does not properly validate the lengths of these messages. An attacker...
CVE-2026-74460
In the Linux kernel, the following vulnerability has been resolved: can: emsusb: validate CPC message lengths emsusbreadbulkcallback walks CPC messages packed in one USB receive buffer. Check that each declared message fits in the URB payload. Also require the type-specific payload to cover the...
CVE-2026-74460
The CVE-2026-74460 issue affects the Linux kernel’s ems_usb path for CPC messages. The vulnerability arises in can: ems_usb: validate CPC message lengths, where ems_usb_read_bulk_callback() processes CPC messages in a USB receive buffer. The fix enforces that each declared CPC message fits within...
MINI-PX64-G76C-9CPC
Bulletin has no description...
Linux MIPS Architecture Heap Buffer Overflow DoS
The vulnerability of the mipscpcdefaultphysbase function in the arch/mips/kernel/mips-cpc.c module of the Linux operating system’s MIPS architecture support module is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause a system failure...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990599)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990599 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Avoid out of bounds access when parsing CPC data If the NumEntries field in the CPC...
Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990013)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990013 advisory. In the Linux kernel, the following vulnerability has been resolved: mips: cpc: Fix refcount leak in mipscpcdefaultphysbase Add the missing ofnodeput to release the...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989665)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989665 advisory. In the Linux kernel, the following vulnerability has been resolved: mips: cpc: Fix refcount leak in mipscpcdefaultphysbase Add the missing ofnodeput to release the...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988992)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988992 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Avoid out of bounds access when parsing CPC data If the NumEntries field in the CPC...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986921)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986921 advisory. In the Linux kernel, the following vulnerability has been resolved: mips: cpc: Fix refcount leak in mipscpcdefaultphysbase Add the missing ofnodeput to release the...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986417)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986417 advisory. In the Linux kernel, the following vulnerability has been resolved: mips: cpc: Fix refcount leak in mipscpcdefaultphysbase Add the missing ofnodeput to release the...
EUVD-2024-29364
Malicious code in bioql PyPI...
EUVD-2024-54156
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2022-49750
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpufreq: CPPC: Add u64 casts to avoid overflowing The fields of the CPC object are unsigned 32-bits values. To avoid overflows while using CPC's values, add 'u6...
AZL-60322 CVE-2022-49750 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: cpufreq: CPPC: Add u64 casts to avoid overflowing The fields of the CPC object are unsigned 32-bits values. To avoid overflows while using CPC's values, add 'u64' casts...