225 matches found
CVE-2026-74697 bnxt_en: Disable EOP for TPA on all chips to prevent data corruption
In the Linux kernel, the following vulnerability has been resolved: bnxten: Disable EOP for TPA on all chips to prevent data corruption EOP End of frame padding on the AGG ring may cause overlapping of zero padding at the end of one segment with the next segment's data. If Relaxed Ordering RO is...
CVE-2026-74697
This vulnerability affects the bnxt_en driver in the Linux kernel, used for Broadcom NetXtreme network adapters. When Total Packet Assembly (TPA) is enabled, End of frame padding (EOP) on the AGG ring can overlap with the next data segment. If Relaxed Ordering (RO) is active, the zero padding may...
CVE-2026-74697 bnxt_en: Disable EOP for TPA on all chips to prevent data corruption
In the Linux kernel, the following vulnerability has been resolved: bnxten: Disable EOP for TPA on all chips to prevent data corruption EOP End of frame padding on the AGG ring may cause overlapping of zero padding at the end of one segment with the next segment's data. If Relaxed Ordering RO is...
PT-2026-79702
In the Linux kernel, the following vulnerability has been resolved: bnxt en: Disable EOP for TPA on all chips to prevent data corruption EOP End of frame padding on the AGG ring may cause overlapping of zero padding at the end of one segment with the next segment's data. If Relaxed Ordering RO is...
CVE-2026-74697: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: bnxten: Disable EOP for TPA on all chips to prevent data corruption EOP End of frame padding on the AGG ring may cause overlapping of zero padding at the end of one segment with the next segment's data. If Relaxed Ordering RO is...
Linux Distros Unpatched Vulnerability : CVE-2026-74697
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bnxten: Disable EOP for TPA on all chips to prevent data corruption EOP End of frame padding on the AGG ring may cause overlapping of zero padding at the end of...
August "In the Trend of VM" (#30): vulnerabilities in ViPNet Client, the Microsoft Windows kernel, and Microsoft SharePoint
August "In the Trend of VM" 30: vulnerabilities in ViPNet Client, the Microsoft Windows kernel, and Microsoft SharePoint. I present the traditional monthly roundup of trending vulnerabilities according to Positive Technologies. In the previous July edition, there was just one vulnerability. This...
CVE-2026-74447
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix uint32t overflow in EOP ring buffer size alignment eopringbuffersize in struct queueproperties is a u32. In kfdqueueacquirebuffers the expected EOP buffer size is computed as ALIGNeopringbuffersize, PAGESIZE; ALIG...
CVE-2026-74447
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix uint32t overflow in EOP ring buffer size alignment eopringbuffersize in struct queueproperties is a u32. In kfdqueueacquirebuffers the expected EOP buffer size is computed as ALIGNeopringbuffersize, PAGESIZE; ALIG...
EUVD-2026-59754
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix uint32t overflow in EOP ring buffer size alignment eopringbuffersize in struct queueproperties is a u32. In kfdqueueacquirebuffers the expected EOP buffer size is computed as ALIGNeopringbuffersize, PAGESIZE; ALIG...
CVE-2026-74447
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix uint32t overflow in EOP ring buffer size alignment eopringbuffersize in struct queueproperties is a u32. In kfdqueueacquirebuffers the expected EOP buffer size is computed as ALIGNeopringbuffersize, PAGESIZE; ALIG...
CVE-2026-74447
In the Linux kernel (drm/amdkfd), a uint32_t overflow in EOP ring buffer size alignment was fixed. The issue occurred because eop_ring_buffer_size (u32) is aligned with PAGE_SIZE in kfd_queue_acquire_buffers() using 32‑bit arithmetic, allowing a user size like 0xFFFFF001 to wrap to 0 and bypass t...
CVE-2026-74447 drm/amdkfd: fix uint32_t overflow in EOP ring buffer size alignment
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix uint32t overflow in EOP ring buffer size alignment eopringbuffersize in struct queueproperties is a u32. In kfdqueueacquirebuffers the expected EOP buffer size is computed as ALIGNeopringbuffersize, PAGESIZE; ALIG...
CVE-2026-74447: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix uint32t overflow in EOP ring buffer size alignment eopringbuffersize in struct queueproperties is a u32. In kfdqueueacquirebuffers the expected EOP buffer size is computed as ALIGNeopringbuffersize, PAGESIZE; ALIG...
PT-2026-72899
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix uint32 t overflow in EOP ring buffer size alignment eop ring buffer size in struct queue properties is a u32. In kfd queue acquire buffers the expected EOP buffer size is computed as ALIGNeop ring buffer size, PAG...
CVE-2026-65673
Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Entra Connect Sync allows an authorized attacker to elevate privileges locally...
EUVD-2026-56724
CVET-EOP...
CVE-2026-62751
CVE-2026-62751 describes an integer overflow or wraparound in Windows Projected File System that enables a locally authenticated attacker to elevate privileges. The entry cites a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and privileges required as LOW; im...
CVE-2026-70345 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-62766
CVE-2026-62766 describes a double free in Windows Kerberos that allows an authorized attacker to elevate privileges locally . The affected component is Windows Kerberos; the underlying cause is a memory-management error leading to a use-after-free-like condition, as stated. The provided documents...