54 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-90370
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7996: bound TLV walk in mt7996mcugetchipconfig The response TLV loop advanced by tlv-len without a minimum, so a theoretical firmware response...
AZL-102938 CVE-2026-90370 affecting package kernel for versions less than 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: bound TLV walk in mt7996mcugetchipconfig The response TLV loop advanced by tlv-len without a minimum, so a theoretical firmware response containing a zero-length TLV could spin forever, hanging the CPU during...
EUVD-2026-82031
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: bound TLV walk in mt7996mcugetchipconfig The response TLV loop advanced by tlv-len without a minimum, so a theoretical firmware response containing a zero-length TLV could spin forever, hanging the CPU during...
CVE-2026-90370 wifi: mt76: mt7996: bound TLV walk in mt7996_mcu_get_chip_config
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: bound TLV walk in mt7996mcugetchipconfig The response TLV loop advanced by tlv-len without a minimum, so a theoretical firmware response containing a zero-length TLV could spin forever, hanging the CPU during...
CVE-2026-90370 wifi: mt76: mt7996: bound TLV walk in mt7996_mcu_get_chip_config
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: bound TLV walk in mt7996mcugetchipconfig The response TLV loop advanced by tlv-len without a minimum, so a theoretical firmware response containing a zero-length TLV could spin forever, hanging the CPU during...
CVE-2026-90370
CVE-2026-90370 affects the Linux kernel in the mt76: mt7996 Wi-Fi driver. The vulnerability is in the TLV (Type-Length-Value) parsing loop within mt7996_mcu_get_chip_config, which processes firmware MCU chip-configuration responses. The loop advanced by tlv->len without enforcing a minimum, so...
SUSE CVE-2026-74504
In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix division by zero in initializetimer A userspace-driven ALSA timer SNDUTIMER lets an unprivileged user set the backing sndtimer's hardware resolution to an arbitrary 64-bit value via SNDRVTIMERIOCTLCREATE...
CVE-2026-74504
In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix division by zero in initializetimer A userspace-driven ALSA timer SNDUTIMER lets an unprivileged user set the backing sndtimer's hardware resolution to an arbitrary 64-bit value via SNDRVTIMERIOCTLCREATE...
CVE-2026-74504: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix division by zero in initializetimer A userspace-driven ALSA timer SNDUTIMER lets an unprivileged user set the backing sndtimer's hardware resolution to an arbitrary 64-bit value via SNDRVTIMERIOCTLCREATE...
EulerOS 2.0 SP13 : python-pillow (EulerOS-SA-2026-2992)
According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that causes the...
EulerOS 2.0 SP15 : python-pillow (EulerOS-SA-2026-2902)
According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, when Pillow...
EulerOS Virtualization 2.12.0 : python-pillow (EulerOS-SA-2026-2797)
According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that...
EulerOS 2.0 SP12 : python-pillow (EulerOS-SA-2026-2619)
According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that causes the...
CVE-2026-54417
CVE-2026-54417 affects rxi/microtar 0.1.0: mtar_next() uses 32‑bit arithmetic to compute the next record offset, and when header size is a multiple of 512 in 0xFFFFFC01–0xFFFFFE00, the offset addition wraps to 0. This causes mtar_next() to seek the current position instead of advancing, so mtar_f...
CVE-2026-47066 Infinite loop in Alt-Svc header parser in hackney
Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in benoitc hackney allows Excessive Allocation. The Alt-Svc response header parser in src/hackneyaltsvc.erl does not guarantee forward progress. When parsetoken/2 receives a non-token, non-whitespace, non-comma byte e.g. !, @, =, ...
EUVD-2017-18042
Malware in sbrugna...
EUVD-2018-19267
Malware in sbrugna...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-406366)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-406366 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Fix overflow in getfreeelt tracingmap-nextelt in getfreeelt is at risk of overflowing...