7496 matches found
PT-2026-90438
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the pci write legacy io function. The issue occurs because the function unconditionally loads 4 bytes from the kernfs write buffer, regardless of whether...
CVE-2026-89578: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: dm-io: clone the source bio instead of copying its biovec For DMIOBIO requests, doregion built each destination bio by walking the source bio's biovec and re-adding the pages one at a time, tracking the remaining transfer in...
CVE-2026-80946: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: fuse: copy request headers via a stack buffer for io-uring The fuse-io-uring transport copies req-in.h out to the ring in fuseuringcopytoring and req-out.h back in fuseuringcommit. Both headers live inside the fuserequest slab...
PT-2026-90293
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dm-io interface where non-retryable error codes BLK STS NOTSUPP and BLK STS INVAL could incorrectly cause leg failure on dm-raid1. This leads to misbehavior when...
PT-2026-96414
In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fill in DMA padding bytes in scsi alloc sgtables During fuzz testing, the following issue was discovered: BUG: KMSAN: uninit-value in dma map sg attrs+0x217/0x310 dma map sg attrs+0x217/0x310 dma map sg attrs+0x4a/0x7...
PT-2026-90076
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description An issue exists in the fuse-io-uring transport where request headers are copied directly to and from userspace. Specifically, the fuse uring copy to ring function copies req-in.h and the fus...
PT-2026-90294
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description An issue exists in the do region function when handling DM IO BIO requests. The system previously built destination bios by iterating through the source bio's biovec and adding pages...
ROOT-APP-MAVEN-CVE-2025-48988 CVE-2025-48988 in org.apache.tomcat:tomcat-catalina - Patched by Root
Root has patched CVE-2025-48988 in the org.apache.tomcat:tomcat-catalina package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-24734 CVE-2026-24734 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root
Root has patched CVE-2026-24734 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...
SUSE CVE-2026-79602
A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen...
SUSE CVE-2026-85522
A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/clustermigrateslots.c of the component Slot Migration. The manipulation of the argument jobname results in out-of-bounds read. The attack can be...
SUSE CVE-2026-86227
A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvstoreGetHashtable of the file src/kvstore.c. This manipulation of the argument didx causes out-of-bounds read. It is possible to initiate the attack remotely. The attack is considered to have high...
SUSE CVE-2026-80821
In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: put CQ ref on createcq mapping failure nvmetpciepfcreatecq calls nvmetcqcreate, which takes a reference on the controller and installs the completion queue. If the subsequent PCI address-space mapping fails or...
DEBIAN-CVE-2026-79602
A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen...
ALPINE-CVE-2026-79602
A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen...
CVE-2026-79602
A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen...
EUVD-2026-72720
A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen...
CVE-2026-79602
A flaw exists in the Xen hypervisor where a malicious guest operating system with an assigned PCI device featuring a Base Address Register (BAR) mapped to the I/O port space can trigger an internal BUG() . This vulnerability is caused by the improper handling of HVM emulation return codes . The i...
