29839 matches found
EUVD-2026-16154
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL deref in meshmatcheslocal meshmatcheslocal unconditionally dereferences ie-meshconfig to compare mesh configuration parameters. When called from meshrxcsaframe, the parsed action-frame elements may not...
UBUNTU-CVE-2026-23398
In the Linux kernel, the following vulnerability has been resolved: icmp: fix NULL pointer dereference in icmptagvalidation icmptagvalidation unconditionally dereferences the result of rcudereferenceinetprotosproto without checking for NULL. The inetprotos array is sparse -- only about 15 of 256...
CVE-2026-23398
In the Linux kernel, the following vulnerability has been resolved: icmp: fix NULL pointer dereference in icmptagvalidation icmptagvalidation unconditionally dereferences the result of rcudereferenceinetprotosproto without checking for NULL. The inetprotos array is sparse -- only about 15 of 256...
EUVD-2026-16132
Each RPCSECGSS data packet is validated by a routine which checks a signature in the packet. This routine copies a portion of the packet into a stack buffer, but fails to ensure that the buffer is sufficiently large, and a malicious client can trigger a stack overflow. Notably, this does not...
CVE-2026-4747 Remote code execution via RPCSEC_GSS packet validation
Each RPCSECGSS data packet is validated by a routine which checks a signature in the packet. This routine copies a portion of the packet into a stack buffer, but fails to ensure that the buffer is sufficiently large, and a malicious client can trigger a stack overflow. Notably, this does not...
Linux kernel serial8250_register_ports() Buffer Overflow DoS
The vulnerability of the serial8250registerports function in the driver/tty/serial/8250/8250core.c file of the console support driver for the serial port in the Linux kernel relates to the exposure of confidential information. Exploiting this vulnerability could allow an attacker to cause a servi...
RockyLinux 8 : kernel (RLSA-2026:3963)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:3963 advisory. kernel: ipv6: BUG in pskbexpandhead as part of calipsoskbuffsetattr CVE-2025-71085 kernel: macvlan: fix possible UAF in macvlanforwardsource CVE-2026-230...
FreeBSD-SA-26:08.rpcsec_gss
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:08.rpcsecgss Security Advisory The FreeBSD Project Topic: Remote code execution via RPCSECGSS packet validation Category: core Module: rpcsecgss Announced:...
PT-2026-35134
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter component where the rt mt6 check function fails to properly validate the addrnr value during the installation of rt match rules. This allows rules with a...
PT-2026-36373
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vxlan na create function where ND options are processed based on lengths provided within the options. A malformed option can cause the parser to advance beyond the...
FreeBSD : FreeBSD -- Remote code execution via RPCSEC_GSS packet validation (733febba-28d2-11f1-b35e-bc241121aa0a)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 733febba-28d2-11f1-b35e-bc241121aa0a advisory. Each RPCSECGSS data packet is validated by a routine which checks a signature in the packet. This routi...
MiracleLinux 9 : kernel-5.14.0-611.41.1.el9_7 (AXSA:2026-356:22)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-356:22 advisory. kernel: HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save CVE-2025-39818 kernel: mlxsw: spectrummr: Fix use-after-free...
PT-2026-35016
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the Linux kernel due to uninitialized padding bytes in the build polexpire function. While the build expire function correctly clears trailing padding bytes of th...
Linux net/unix/af_unix Queue OOB DoS
The vulnerability of the queueoob function in the net/unix/afunix.c module of the Linux operating system’s kernel is related to improper memory release. Exploiting this vulnerability may allow an attacker to access protected information or cause service failures...
PT-2026-34916
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the LoongArch KVM component within the kvm eiointc regs access function. The register base address is calculated by adding an offset to an array base address. Because...
vme_fake Heap Buffer Overflow DoS
The vulnerability of the fakeinit function in the drivers/staging/vmeuser/vmefake.c module, which supports additional devices in the Linux operating system’s kernel, is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel memory management Heap Buffer Overflow DoS
The vulnerability of the secretmemfilecreate function in the mm/secretmem.c module of the Linux kernel’s memory management subsystem is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...
Linux kernel fbdev lcd mipid Heap Buffer Overflow DoS
The vulnerability of the mipidspiprobe function in the drivers/video/fbdev/omap/lcdmipid.c file of the kernel graphics buffer device driver in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux imx_clk_scu_alloc_dev Buffer Overflow DoS
The vulnerability of the imxclkscuallocdev function in the drivers/clk/imx/clk-scu.c file of the Linux operating system controller driver for Samsung Exynos cores is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux block-level kernel Heap Buffer Overflow DoS
The vulnerability of the blkcgiolatencythrottle function in the block/blk-iolatency.c module, which supports the block-level kernel in Linux operating systems, is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...