CVE-2026-97995

A flaw was found in the virtioconsole driver in the Linux kernel. When unbinding or removing a virtio console device while control messages remain queued, the driver misidentifies internal control buffers and attempts to release them as standard data buffers. This issue results in an out-of-bound...

CVE-2026-97500

A flaw was found in the Linux kernel's Realtek Wi-Fi driver rtw89. The driver fails to validate the length of physical layer PHY status information elements before parsing received data. A malicious or malfunctioning wireless device could exploit this flaw by providing status data with an...

CVE-2026-102509

Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits, and Uncontrolled Recursion in the Java implementation of Apache PLC4X PLC4J allow a malicious or impersonated device to exhaust the memory or stack of the client application, causing a denial of service. In the O...

CVE-2026-97991

A flaw was found in the Linux kernel's vDPA vHost Data Path Acceleration block simulator driver. Due to improper input validation, the driver logs out-of-range starting sector requests but fails to reject them, causing an arithmetic underflow and an invalid buffer offset. An attacker with access ...

CVE-2026-97990

A flaw was found in the Linux kernel's vHost Data Path Acceleration vDPA network simulator driver. When a packet transmission pull operation fails, a negative error code is improperly treated as an unsigned value, resulting in an excessively large buffer length during receive processing. A local...

CVE-2026-97987

A flaw was found in the Linux kernel's virtioinput driver. When device registration fails during initialization, the driver removes communication queues without first resetting the device. This allows the virtual device to continue Direct Memory Access DMA operations on memory that has already be...

CVE-2026-97495

A flaw was found in the Linux kernel's AMD GPU driver amdkfd. A local user could exploit this vulnerability to cause a Denial of Service DoS or kernel memory corruption by supplying an out-of-bounds doorbell identifier during queue allocation. The issue occurs because the doorbell allocation...

CVE-2026-97496

A flaw was found in the Linux kernel's AMD GPU driver amdkfd. A local attacker can trigger this vulnerability during process restoration by supplying manipulated queue descriptor values that lack proper boundary validation. This issue results in an out-of-bounds memory read, potentially exposing...

CVE-2026-102508

Improper Verification of Cryptographic Signature and Improper Certificate Validation in the OPC UA driver of Apache PLC4X PLC4J allows an attacker in a network position between client and server to impersonate the OPC UA server and to read, forge or modify secure-channel traffic, including user...

CVE-2026-97494

A flaw was found in the Linux kernel's AMD GPU driver. The driver fails to validate the size of firmware images before copying them into the Platform Security Processor PSP private buffer. A local user could exploit this vulnerability by loading an oversized or malformed firmware image, triggerin...

nl.basjes.modbus:modbus-api-plc4j (>=0.1.0, <=0.15.0), org.apache.camel.karaf:camel-plc4x (>=4.7.0, <=4.18.4) +14 more potentially affected by CVE-2026-102511 via org.apache.plc4x:plc4j-driver-modbus (>=0.10.0, <=0.13.1)

org.apache.plc4x:plc4j-driver-modbus MAVEN version =0.10.0, =0.1.0, =4.7.0, =3.20.0, =3.20.0, =0.10.0, =0.10.0, =0.12.0, =0.13.0, =0.10.0, =0.10.0, =0.93.0, =0.98.0 - org.connectorio.plc4x.extras.features:org.connectorio.plc4x.extras.feature.decorator 0.12.0 and more Source cves: CVE-2026-102511...

org.apache.camel.karaf:camel-plc4x (>=4.7.0, <=4.18.4), org.apache.camel.springboot:camel-plc4x-starter (>=4.2.0, <=4.23.0) +12 more potentially affected by CVE-2026-102511 via org.apache.plc4x:plc4j-driver-eip (>=0.11.0, <=0.13.1)

org.apache.plc4x:plc4j-driver-eip MAVEN version =0.11.0, =4.7.0, =4.2.0, =4.2.0, =0.12.0, =0.12.0, =0.12.0, =0.13.0, =0.12.0, =0.11.0, =0.95.0, =0.98.0 - org.connectorio.plc4x.extras.features:org.connectorio.plc4x.extras.feature.decorator 0.12.0 -...

org.apache.camel.karaf:camel-plc4x (>=4.7.0, <=4.18.4), org.apache.camel.springboot:camel-plc4x-starter (>=3.20.0, <=4.23.0) +13 more potentially affected by CVE-2026-102511 via org.apache.plc4x:plc4j-driver-ads (>=0.10.0, <=0.13.1)

org.apache.plc4x:plc4j-driver-ads MAVEN version =0.10.0, =4.7.0, =3.20.0, =3.20.0, =0.10.0, =0.10.0, =0.12.0, =0.13.0, =0.10.0, =0.10.0, =0.95.0, =0.98.0 - org.connectorio.plc4x.extras.features:org.connectorio.plc4x.extras.feature.decorator 0.12.0 -...

org.apache.camel.karaf:camel-plc4x (>=4.7.0, <=4.18.4), org.apache.camel.springboot:camel-plc4x-starter (>=3.20.0, <=4.23.0) +12 more potentially affected by CVE-2026-102509 via org.apache.plc4x:plc4j-driver-opcua (>=0.10.0, <=0.13.1)

org.apache.plc4x:plc4j-driver-opcua MAVEN version =0.10.0, =4.7.0, =3.20.0, =3.20.0, =0.10.0, =0.10.0, =0.12.0, =0.13.0, =0.10.0, =0.10.0, =0.12.0 - org.connectorio.plc4x.extras.features:org.connectorio.plc4x.extras.feature.decorator 0.12.0 -...

CVE-2026-102509 Apache PLC4X, Apache PLC4X: Pre-authentication resource exhaustion in the OPC UA driver and the Java SPI parser

Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits, and Uncontrolled Recursion in the Java implementation of Apache PLC4X PLC4J allow a malicious or impersonated device to exhaust the memory or stack of the client application, causing a denial of service. In the O...

CVE-2026-102509

The Apache PLC4X (PLC4J) Java implementation is vulnerable to pre-authentication resource exhaustion in the OPC UA driver and the Java SPI parser . The root causes include memory allocation with excessive size values, allocation of resources without limits, and uncontrolled recursion. Specificall...

CVE-2026-102509 Apache PLC4X, Apache PLC4X: Pre-authentication resource exhaustion in the OPC UA driver and the Java SPI parser

Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits, and Uncontrolled Recursion in the Java implementation of Apache PLC4X PLC4J allow a malicious or impersonated device to exhaust the memory or stack of the client application, causing a denial of service. In the O...

org.apache.camel.karaf:camel-plc4x (>=4.7.0, <=4.18.4), org.apache.camel.springboot:camel-plc4x-starter (>=3.20.0, <=4.23.0) +13 more potentially affected by CVE-2026-102508 via org.apache.plc4x:plc4j-driver-opcua (>=0.9.0, <=0.13.1)

org.apache.plc4x:plc4j-driver-opcua MAVEN version =0.9.0, =4.7.0, =3.20.0, =3.20.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.12.0, =0.13.0, =0.9.0, =0.9.0, =0.12.0 - org.connectorio.plc4x.extras.features:org.connectorio.plc4x.extras.feature.decorator 0.12.0 -...

EUVD-2026-89674

Improper Verification of Cryptographic Signature and Improper Certificate Validation in the OPC UA driver of Apache PLC4X PLC4J allows an attacker in a network position between client and server to impersonate the OPC UA server and to read, forge or modify secure-channel traffic, including user...

CVE-2026-102508 Apache PLC4X: OPC UA secure channel: integrity bypass, unverifiable server certificate, and silent downgrade

Improper Verification of Cryptographic Signature and Improper Certificate Validation in the OPC UA driver of Apache PLC4X PLC4J allows an attacker in a network position between client and server to impersonate the OPC UA server and to read, forge or modify secure-channel traffic, including user...