11 matches found
AZL-101688 CVE-2026-89996 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-heap: don't publish fd before copytouser succeeds DMAHEAPIOCTLALLOC allocates a dma-buf and installs an fd into the caller's fd table via dmabuffd - fdinstall before dmaheapioctl copies the result back to userspace. ...
CVE-2026-89996 dma-buf: dma-heap: don't publish fd before copy_to_user() succeeds
In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-heap: don't publish fd before copytouser succeeds DMAHEAPIOCTLALLOC allocates a dma-buf and installs an fd into the caller's fd table via dmabuffd - fdinstall before dmaheapioctl copies the result back to userspace. ...
CVE-2026-89996
CVE-2026-89996 affects the Linux kernel 's dma-heap subsystem. In DMA_HEAP_IOCTL_ALLOC, the file descriptor is installed into the caller's fd table via fd_install() before copy_to_user() completes. If copy_to_user() fails, the fd and its underlying dma-buf reference are leaked for the process lif...
Linux Distros Unpatched Vulnerability : CVE-2026-89996
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dma-buf: dma-heap: don't publish fd before copytouser succeeds DMAHEAPIOCTLALLOC allocates a dma- buf and installs an fd into the caller's fd table via dmabuffd...
Security Bulletin: Multiple Vulnerabilities in watsonx.data
Summary Multiple vulnerabilities were addressed in watsonx.data 2.4.0 patch 5 version, which was present in different version from watson.data 2.4.0 Vulnerability Details CVEID:CVE-2026-42577 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. From 4.2.0.Final to...
Updated socat package fixes security vulnerability
Under certain circumstances an FD leak occurs and can be misused for denial of service attacks against socat running in server mode CVE-2013-3571...
FreeBSD : socat -- FD leak (6d87c2e9-c64d-11e2-9c22-50465d9ff992)
Gerhard Rieger reports : Under certain circumstances an FD leak occurs and can be misused for denial of service attacks against socat running in server mode. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD...
socat -- FD leak
Gerhard Rieger reports: Under certain circumstances an FD leak occurs and can be misused for denial of service attacks against socat running in server mode...
Solaris 5.4 (x86) : 104750-01
Solstice FireWall-1 2.1c: FD leak in fwd VPN. Date this patch was last updated by Sun : Mar/28/97 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
Solaris 2.5.1 (i386) : 104749-01
The remote host is missing Sun Security Patch number 104749-01 Solstice FireWall-1 2.1c: FD leak in fwd Non-VPN. Date this patch was last updated by Sun : Thu Mar 27 17:00:00 MST 1997 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has...
Solaris 2.5.1 (i386) : 104750-01
The remote host is missing Sun Security Patch number 104750-01 Solstice FireWall-1 2.1c: FD leak in fwd VPN. Date this patch was last updated by Sun : Thu Mar 27 17:00:00 MST 1997 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has bee...