EUVD-2026-59102

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cyw: fix heap overflow on a short auth frame brcmfnotifyauthframerx takes the frame length from the firmware event and copies the frame body with the management header offset subtracted: u32 mgmtframelen = e-datal...

CVE-2026-72003 wifi: brcmfmac: cyw: fix heap overflow on a short auth frame

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cyw: fix heap overflow on a short auth frame brcmfnotifyauthframerx takes the frame length from the firmware event and copies the frame body with the management header offset subtracted: u32 mgmtframelen = e-datal...

CVE-2026-72003

CVE-2026-72003 observable in the Linux kernel affects the brcmfmac cyw WLAN driver. The issue arises in brcmf_notify_auth_frame_rx(), where the code derives mgmt_frame_len from e->datalen and subtracts offsetof(struct ieee80211_mgmt, u). If mgmt_frame_len is smaller than the 24-byte header off...

CVE-2026-72003 wifi: brcmfmac: cyw: fix heap overflow on a short auth frame

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cyw: fix heap overflow on a short auth frame brcmfnotifyauthframerx takes the frame length from the firmware event and copies the frame body with the management header offset subtracted: u32 mgmtframelen = e-datal...

MINI-WHW7-2JM4-X2FX

Bulletin has no description...

GHSA-2345-WR3R-CXF2 vulnerabilities

Vulnerabilities for packages: python...

MINI-MM7M-CW68-9W3F

Bulletin has no description...

MINI-47G2-5VC8-4FMQ

Bulletin has no description...

MINI-QQQJ-3W7P-48GG

Bulletin has no description...

MINI-VMPW-FFM3-VQ2W

Bulletin has no description...

MINI-M7P2-QRGC-97XP

Bulletin has no description...

MINI-X9R7-JGPC-39CG

Bulletin has no description...

MINI-73M9-GW5C-W35C

Bulletin has no description...

PT-2026-72840

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix snp filter reserved mem regions off-by-one Sashiko notes: regarding the bounds check in snp filter reserved mem regions called via walk iomem res desc: does the check if range list-num elements 16 + 8 PAGE SIZE...

Linux Distros Unpatched Vulnerability : CVE-2026-73194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. preparse...

PT-2026-72380

In the Linux kernel, the following vulnerability has been resolved: ntfs3: bound to move in indx insert into root before hdr insert head indx insert into root promotes a full resident $INDEX ROOT into $INDEX ALLOCATION and copies all non-last resident root entries into a newly allocated INDEX...

PT-2026-72319

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: reject short AUTH RECEIVE buffers nvmet execute auth receive trusts the AUTH RECEIVE allocation length after checking only that it is nonzero and matches the transfer length. In the SUCCESS1 and FAILURE1/default state...

Linux Distros Unpatched Vulnerability : CVE-2026-74341

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: wcn36xx: fix heap overflow from oversized firmware HAL response The firmware response dispatcher copies all synchronous HAL responses into the 4096-byte...

PT-2026-72192

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cyw: fix heap overflow on a short auth frame brcmf notify auth frame rx takes the frame length from the firmware event and copies the frame body with the management header offset subtracted: u32 mgmt frame len =...

PT-2026-72891

DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. preparse reserves seven output bytes per input byte, the width of the longest ':p99999' expansion. The ':N' branch parses the number with atoisrc an...