420 matches found
CVE-2026-80640
CVE-2026-80640 affects the CXL firmware control (fwctl) subsystem of the Linux kernel . The root cause is in cxlctl_get_supported_features(), where num_entries is not initialized early enough, causing the kernel's Fortify runtime protection to detect a potential 48-byte write to a zero-size buffe...
EUVD-2026-67515
In the Linux kernel, the following vulnerability has been resolved: cxl/test: Fix fortifypanic Fix a runtime assertion in setupxormapping. Fortify complains that it is potentially overflowing the xormaps array per countedbynrmaps. Quiet the false positive by initializing @nrmaps earlier. memcpy:...
EUVD-2026-67516
In the Linux kernel, the following vulnerability has been resolved: cxl/fwctl: Fix fortifypanic Fix a runtime assertion in cxlctlgetsupportedfeatures. Fortify complains that it is potentially overflowing the entries array per countedbylenumentries. Quiet the false positive by initializing...
CVE-2026-80640 cxl/fwctl: Fix __fortify_panic
In the Linux kernel, the following vulnerability has been resolved: cxl/fwctl: Fix fortifypanic Fix a runtime assertion in cxlctlgetsupportedfeatures. Fortify complains that it is potentially overflowing the entries array per countedbylenumentries. Quiet the false positive by initializing...
CVE-2026-80639
CVE-2026-80639 affects the Linux kernel 's cxl/test module (loaded as cxl_translate). The issue is in setup_xor_mapping(), where the Fortify overflow detector reported a potential 32-byte write to a zero-size buffer for the xormaps array, due to the __counted_by(nr_maps) annotation seeing nr_maps...
CVE-2026-80639 cxl/test: Fix __fortify_panic
In the Linux kernel, the following vulnerability has been resolved: cxl/test: Fix fortifypanic Fix a runtime assertion in setupxormapping. Fortify complains that it is potentially overflowing the xormaps array per countedbynrmaps. Quiet the false positive by initializing @nrmaps earlier. memcpy:...
CVE-2026-80640 cxl/fwctl: Fix __fortify_panic
In the Linux kernel, the following vulnerability has been resolved: cxl/fwctl: Fix fortifypanic Fix a runtime assertion in cxlctlgetsupportedfeatures. Fortify complains that it is potentially overflowing the entries array per countedbylenumentries. Quiet the false positive by initializing...
CVE-2026-80615
CVE-2026-80615 affects the Linux kernel net: dst_metadata subsystem. In metadata_dst_alloc(), kmalloc_flex() sets the __counted_by annotation to options_len, which is initialized to zero . When skb_tunnel_info_unclone later copies tunnel info plus options into the structure, clang with source for...
CVE-2026-80615 net: dst_metadata: fix false-positive memcpy overflow in tun_dst_unclone
In the Linux kernel, the following vulnerability has been resolved: net: dstmetadata: fix false-positive memcpy overflow in tundstunclone kmallocflex in metadatadstalloc sets countedby for the structure to the optionslen, which is then initialized to zero. Later, we're initializing the structure ...
EUVD-2026-67491
In the Linux kernel, the following vulnerability has been resolved: net: dstmetadata: fix false-positive memcpy overflow in tundstunclone kmallocflex in metadatadstalloc sets countedby for the structure to the optionslen, which is then initialized to zero. Later, we're initializing the structure ...
CVE-2026-80615 net: dst_metadata: fix false-positive memcpy overflow in tun_dst_unclone
In the Linux kernel, the following vulnerability has been resolved: net: dstmetadata: fix false-positive memcpy overflow in tundstunclone kmallocflex in metadatadstalloc sets countedby for the structure to the optionslen, which is then initialized to zero. Later, we're initializing the structure ...
CVE-2026-80615
In the Linux kernel, the following vulnerability has been resolved: net: dstmetadata: fix false-positive memcpy overflow in tundstunclone kmallocflex in metadatadstalloc sets countedby for the structure to the optionslen, which is then initialized to zero. Later, we're initializing the structure ...
CVE-2026-80615: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net: dstmetadata: fix false-positive memcpy overflow in tundstunclone kmallocflex in metadatadstalloc sets countedby for the structure to the optionslen, which is then initialized to zero. Later, we're initializing the structure ...
PT-2026-82915
Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A false-positive memcpy overflow occurs in the tun dst unclone function within the dst metadata component. When built with clang and source fortification, the compiler incorrectly...
PT-2026-82939
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A runtime assertion issue exists in the setup xor mapping function. The system triggers a fortify panic due to a false positive report of a potential buffer overflow in the xormaps array...
CVE-2026-80640: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: cxl/fwctl: Fix fortifypanic Fix a runtime assertion in cxlctlgetsupportedfeatures. Fortify complains that it is potentially overflowing the entries array per countedbylenumentries. Quiet the false positive by initializing...
CVE-2026-80639: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: cxl/test: Fix fortifypanic Fix a runtime assertion in setupxormapping. Fortify complains that it is potentially overflowing the xormaps array per countedbynrmaps. Quiet the false positive by initializing @nrmaps earlier. memcpy:...
Enhancing Web Application Firewalls with BERT-GNN for SQL Injection Detection
Detecting sophisticated SQL Injection SQLi attacks remains among the most critical challenges in web applications security. This research study has resulted in an optimised hybrid BERT-GNN pipeline with improved detection accuracy and robustness while reducing false-positive and false-negative...
PT-2026-82940
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A runtime assertion issue exists in the cxlctl get supported features function. The system triggers a fortify panic due to a false positive buffer overflow detection where the entries...