CVE-2026-98839

A flaw was found in the Linux kernel's virtual terminal selection subsystem. When pasting console selections, a race condition can occur if another process concurrently replaces the selection buffer with shorter content while the operation is temporarily paused. This situation causes an integer...

OSEC-2026-22 Integer overflow in Unix.map_file

ANT-2026-6W9NPC2Q mmap dimension product integer overflow Fix Use camlumuloverflow instead of when multiplying bigarray dimensions, which detects integer overflows and raise Failure. Negative positions are also rejected by raising Invalidargument. Am I affected? If either the dimensions or the fi...

ruby: integer overflow issue in regular expression compiler

A flaw was found in Ruby. When compiling a specially crafted regular expression with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /input/, an integer overflow in the size of the compiled pattern can occur. This integer overflow causes memory...

ruby: integer overflow issue in CI/CD regular expression compiler

A flaw was found in Ruby. When compiling a specially crafted regular expression with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /input/, an integer overflow in the size of the compiled pattern can occur. This integer overflow causes memory...

ruby: integer overflow issue in regular expression compiler

A flaw was found in Ruby. When compiling a specially crafted regular expression containing an excessive number of repeats with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /input/, an integer overflow of internal IDs can occur. This integer overflow...

CVE-2026-98829

A flaw was found in the mac80211 wireless networking subsystem of the Linux kernel. An adjacent attacker, such as a rogue Wi-Fi access point or nearby malicious device, can cause a Denial of Service DoS by transmitting a sequence of oversized wireless frame fragments. This causes an integer...

CLSA-2026-1792788996 ruby: Fix of 3 CVEs

CVE-2026-93577, CVE-2026-97229: fix integer overflow in the regexp compiler's quantifier expansion and program size checks - CVE-2026-110264: reject regexps whose repeat or null-check IDs overflow...

CLSA-2026-1792788765 ruby: Fix of 3 CVEs

CVE-2026-93577, CVE-2026-97229: fix integer overflow in the regexp compiler's quantifier expansion and program size checks - CVE-2026-110264: reject regexps whose repeat or null-check IDs overflow...

CLSA-2026-1792784815 poppler: Fix of CVE-2026-10118

CVE-2026-10118: fix integer overflow in SplashOutputDev::tilingPatternFill...

CVE-2026-98819

A flaw was found in the Linux kernel's Intel Bluetooth driver. When processing Device Descriptor Configuration DDC records, the driver fails to properly validate record lengths, allowing integer wrapping and reading past buffer boundaries. An attacker capable of supplying crafted firmware data...

CVE-2026-89927

A flaw was found in the KVM Kernel-based Virtual Machine component of the Linux kernel. A local attacker, or a malicious guest operating system, could exploit an integer overflow vulnerability by programming a Hyper-V synthetic timer with a deadline in the past. This can prevent the CPU from maki...

CVE-2026-98816

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. An integer overflow occurs in the constant blinding mechanism when calculating backward jump offsets during BPF program hardening. A local attacker capable of loading BPF programs could exploit this issue to jump beyond...

Security Bulletin: IBM MQ Appliance is affected by an integer overflow vulnerability (CVE-2026-18142)

Summary IBM MQ Appliance has addressed an integer overflow vulnerability that could allow an authenticated attacker to cause a denial of service and perform limited memory corruption. Vulnerability Details CVEID:CVE-2026-18142 DESCRIPTION: IBM MQ for z/OS could allow a remote authenticated attack...

Security Bulletin: IBM MQ Appliance is affected by multiple vulnerabilities in Java SE

Summary IBM MQ Appliance has addressed multiple vulnerabilities in Java SE. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication. CWE:CWE-696: Incorrec...

Security Bulletin: IBM MQ Appliance is affected by an integer overflow vulnerability (CVE-2026-11376)

Summary IBM MQ Appliance has addressed an integer overflow vulnerability that could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code when processing subscription requests with crafted buffer size values. Vulnerability Details CVEID:CVE-2026-11376...

kernel: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read

A flaw was found in the Linux kernel's scsi: qla2xxx driver. A remote attacker, by sending a specially crafted Fibre Channel Protocol FCP response, could cause an integer underflow. This underflow leads to an out-of-bounds read when handling sense data, potentially disclosing sensitive memory...

CVE-2026-99062

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: account only unread bytes in readskb After a partial stream receive, rxbytes tracks the unread suffix while bufused and peer credit still cover the whole packet. virtiotransportreadskb dequeues that packet but passe...

DEBIAN-CVE-2026-99062

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: account only unread bytes in readskb After a partial stream receive, rxbytes tracks the unread suffix while bufused and peer credit still cover the whole packet. virtiotransportreadskb dequeues that packet but passe...

DEBIAN-CVE-2026-98950

In the Linux kernel, the following vulnerability has been resolved: flowdissector: avoid u16 truncation of hlen in bpfflowdissect bpfflowdissect sanitizes the offsets returned by the BPF program with clamptu16, ..., hlen. If hlen is bigger than 65535, the upper bound is truncated before the...

CVE-2026-99062

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: account only unread bytes in readskb After a partial stream receive, rxbytes tracks the unread suffix while bufused and peer credit still cover the whole packet. virtiotransportreadskb dequeues that packet but passe...