155 matches found
CVE-2026-72075 Input: ims-pcu - fix race condition in reset_device sysfs callback
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix race condition in resetdevice sysfs callback The imspcuresetdevice sysfs callback calls imspcuexecutecommand without acquiring pcu-cmdmutex. This can lead to data races and corruption of the shared command...
PT-2026-72896
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/vmwgfx component where the vmw cmd draw function fails to properly validate the header-size variable before performing a division operation. Because header-siz...
Linux Distros Unpatched Vulnerability : CVE-2026-72075
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: ims-pcu - fix race condition in resetdevice sysfs callback The imspcuresetdevice sysfs callback calls imspcuexecutecommand without acquiring pcu-cmdmutex...
CVE-2026-68437
A flaw was found in the Linux kernel's PowerVR DRM driver. The driver incorrectly handles paired fragment jobs, leading to an erroneous check for available space in the command buffer. This issue can cause the system to experience kernel warnings and potentially job timeouts, resulting in a Denia...
CVE-2026-68437 drm/imagination: Fit paired fragment job in the correct CCCB
In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fit paired fragment job in the correct CCCB For geometry jobs with a paired fragment job, at the moment, the DRM scheduler's preparejob callback: - checks for internal driver dependencies for the geometry job; -...
CVE-2026-68281
In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Count paired job fence as dependency in preparejob The DRM scheduler's preparejob callback counts the remaining non-signaled native dependencies for a job, preventing job submission until those plus job data and...
CVE-2026-61893 MZ Automation lib60870 Out-of-bounds Read
A crafted IEC 60870-5-104 I-frame with TypeID 104 CTSNA1 and an inflated object count causes TestCommandgetFromBuffer to read one byte past the end of the heap-allocated message buffer...
CVE-2026-61893 MZ Automation lib60870 Out-of-bounds Read
A crafted IEC 60870-5-104 I-frame with TypeID 104 CTSNA1 and an inflated object count causes TestCommandgetFromBuffer to read one byte past the end of the heap-allocated message buffer...
CVE-2026-61893 MZ Automation lib60870 Out-of-bounds Read
A crafted IEC 60870-5-104 I-frame with TypeID 104 CTSNA1 and an inflated object count causes TestCommandgetFromBuffer to read one byte past the end of the heap-allocated message buffer...
CVE-2026-23424
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Validate command buffer payload count The count field in the command header is used to determine the valid payload size. Verify that the valid payload does not exceed the remaining buffer space...
CVE-2026-23424 accel/amdxdna: Validate command buffer payload count
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Validate command buffer payload count The count field in the command header is used to determine the valid payload size. Verify that the valid payload does not exceed the remaining buffer space...
CVE-2026-23424
The CVE-2026-23424 vulnerability affects the Linux kernel’s accel/amdxdna component, caused by insufficient validation of the command buffer payload count. The count field in the command header determines the payload size, and the data must not exceed the remaining buffer space. If not properly c...
CVE-2026-23424 accel/amdxdna: Validate command buffer payload count
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Validate command buffer payload count The count field in the command header is used to determine the valid payload size. Verify that the valid payload does not exceed the remaining buffer space...
Linux kernel 安全漏洞
The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from an unvalidated count of the payload in the command buffer, potentially leading to a buffer overflow...
CVE-2026-23424: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Validate command buffer payload count The count field in the command header is used to determine the valid payload size. Verify that the valid payload does not exceed the remaining buffer space...
PT-2026-30038
Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description The Linux kernel contains a flaw within the accel/amdxdna component. The issue involves insufficient validation of the command buffer payload count. Specifically, the count field in the...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003774)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003774 advisory. In nfcllcpbuildsdreqtlv of llcpcommands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege wi...
CVE-2025-53477
A NULL Pointer Dereference vulnerability exists in Apache NimBLE (versions through 1.8.0) within the NimBLE host HCI layer . The flaw is caused by a lack of validation of the HCI connection complete or HCI command TX buffers. Exploitation requires disabled asserts and a broken or bogus Bluetooth ...