kernel: drm/vmwgfx: use check_add_overflow for shader size+offset bound

A flaw was found in the drm/vmwgfx component of the Linux kernel. An integer overflow vulnerability exists in the vmwshaderdefine function due to improper validation of user-supplied shader window size and offset. When the offset value is close to its maximum, an unsigned addition can wrap around...

CLEANSTART-2026-PT94864 When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty pa...

Security vulnerability affects the argo-cd package. When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress...

CVE-2026-98726

A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express multipath subsystem. A malicious NVMe device can provide crafted Asymmetric Namespace Access ANA log data that triggers an integer underflow during buffer bounds validation. This failure leads to an out-of-bounds memory read,...

ROS-20261023-73-0074

The vulnerability in libheif is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261023-73-0217

The vulnerability in libxml2 is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261023-73-0011

The vulnerability of the evtagunmarshalheader function in the Libevent asynchronous event notification library is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures...

ROS-20261023-73-0072

The vulnerability in libheif is related to integer overflow. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 4.20. It arises because bpfflowdissect fails to enforce hlen to U16MAX prior to clamping it when processing offsets returned by BPF programs. If hlen exceeds 65535, it is truncated to U16MAX, causing nhoff and thoff to be forced to zero. Thi...

GitLab 19.5.0 Regular Expression Compiler Integer Overflow

GitLab version 19.5.0 and prior affected versions contain an integer overflow in the regular expression compiler that can allow unauthenticated code execution. This proof of concept triggers the vulnerable Onigmo regular expression path. https://packetstorm.news/download/237296...

PT-2026-122039

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: account only unread bytes in read skb After a partial stream receive, rx bytes tracks the unread suffix while buf used and peer credit still cover the whole packet. virtio transport read skb dequeues that packet but...

FreeRDP 3.31.1 Integer Truncation Heap Buffer Overflow

FreeRDP versions 3.0.0 through 3.31.1 contain an integer truncation vulnerability in licensecheckstreamlength that lets a malicious RDP server trigger a heap buffer overflow on 32-bit clients...

GitLab 19.5.0 Security Exposure Scanner

GitLab versions prior to the specified patched releases contain an integer overflow issue in the regular expression compiler. This tool passively fingerprints GitLab instances, identifies exposed versions, and reports their CVE-2026-110264 patch status...

PT-2026-121870

In the Linux kernel, the following vulnerability has been resolved: xen/gntalloc: validate grant count before allocation gntalloc ioctl alloc allocates the grant-id array before checking whether the requested count fits within the global grant limit. Counts above that limit cannot succeed, so...

GitLab 19.5.0 Integer Overflow Remote Code Execution

GitLab CE/EE versions 7.0 through 19.5.0 contain an integer overflow in the regular expression compiler that may allow unauthenticated remote code execution. This proof of concept triggers the issue through a crafted org file rendered by the blob viewer. https://packetstorm.news/download/237263...

ROS-20261023-73-0060

The vulnerability in libheif is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

GitLab Integer Overflow Code Execution

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to a numerical overflow condition. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-93518

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer truncation issue in XkbResizeKeyType that could lead to a heap buffer overflow by authenticated X clients in X.org X server before 21.1.25 and XWayla...

Linux sch_cake Heap Buffer Overflow DoS

The vulnerability of the cakecalcoverhead function in the net/sched/schcake.c component of the Linux operating system is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792751700)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792751700 advisory. - In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix signed integer overflow in l2tpip6sendmsg When len =...

AlmaLinux 9.6 [TuxCare] Security Update: ruby / ruby-default-gems / ruby-devel / ruby-doc / ruby-libs / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792801476)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792801476 advisory. - An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before...