CVE-2026-89556

A flaw was found in the Linux kernel. This vulnerability arises from insufficient validation of string table section types within ELF Executable and Linkable Format files. A local attacker could exploit this by providing a specially crafted ELF module, leading to the kernel attempting to access...

DEBIAN-CVE-2026-89556

In the Linux kernel, the following vulnerability has been resolved: module: validate string table section types In elfvaliditycachesechdrs, section sizes and offsets are validated, unless the section type is SHTNULL or SHTNOBITS. Later, elfvaliditycachesecstrings and elfvaliditycacheindexstr acce...

CVE-2026-89556

CVE-2026-89556 affects the Linux kernel module loader's ELF validity caching. In elf_validity_cache_sechdrs, section sizes and offsets are validated only when the section type is neither SHT_NULL nor SHT_NOBITS. However, elf_validity_cache_secstrings and elf_validity_cache_index_str subsequently ...

DEBIAN-CVE-2023-37732

Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file...