CVE-2026-12520 Stack buffer overflow and off-by-one writes in Zephyr HL7800 modem AT response handlers

The Sierra Wireless HL7800 cellular modem driver drivers/modem/vendorstandalone/hl7800.c, located at drivers/modem/hl7800.c in v4.4.0 and earlier parses AT responses with roughly twenty handlers that call netbuflinearizevalue, sizeofvalue, buf, 0, len into a 128-byte stack buffer and then write...

Linux Distros Unpatched Vulnerability : CVE-2026-72481

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: magnetometer: ak8975: fix potential kernel stack memory leak Currently in the AK8975 driver there are four instances where potential uninitialized kernel...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100711)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100711 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftfib: fix stale stack leak via the OIFNAME register For NFTFIBRESULTOIFNAME the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100713)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100713 advisory. In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix off-by-one in multicast context address compression The second memcpy in...

UBUNTU-CVE-2026-74500

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix stack info leak in RME Digiface status sndrmedigifacereadstatus reads a four-word status block from the device into an uninitialised on-stack le32 buf4 and, whenever the vendor control-IN transfer does not...

UBUNTU-CVE-2026-72481

In the Linux kernel, the following vulnerability has been resolved: iio: magnetometer: ak8975: fix potential kernel stack memory leak Currently in the AK8975 driver there are four instances where potential uninitialized kernel stack memory leaks can occur. If i2csmbusreadi2cblockdataoremulated...

CVE-2026-72481

The CVE-2026-72481 issue affects the Linux kernel AK8975 magnetometer driver under iio. It describes four instances where uninitialized kernel stack memory could be leaked when i2c_smbus_read_i2c_block_data_or_emulated() returns a value smaller than the buffer size. The fixed code adds validation...

CVE-2026-72481: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: magnetometer: ak8975: fix potential kernel stack memory leak Currently in the AK8975 driver there are four instances where potential uninitialized kernel stack memory leaks can occur. If i2csmbusreadi2cblockdataoremulated...

FreeBSD : FreeBSD -- Kernel stack disclosure via timer_settime(2) (eab90fc5-8bb7-11f1-a6ab-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the eab90fc5-8bb7-11f1-a6ab-bc241121aa0a advisory. To retrieve the previous timer value, the kernel calls realtimergettime, which obtains the current time...

FreeBSD -- Kernel stack disclosure via timer_settime(2)

Problem Description: To retrieve the previous timer value, the kernel calls realtimergettime, which obtains the current time for the timer's clock. For a timer using CLOCKTAI this can fail when no TAI offset has been configured, but the error return was not checked, so the uninitialized output...

CVE-2026-63981

A flaw was found in the Linux kernel's net/sched: actmirred component. An unprivileged local user, by leveraging user namespaces to gain network administration capabilities, can create a specific network configuration that triggers an unbounded recursion. This recursion bypasses a depth limit...

CVE-2026-63965

A flaw was found in the Linux kernel's bmp280 pressure sensor driver. The bmp580triggerhandler function fails to initialize a stack-allocated buffer, which can lead to two bytes of uninitialized stack memory being exposed to userspace. This information disclosure vulnerability could allow a local...

Linux Distros Unpatched Vulnerability : CVE-2026-63981

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/sched: actmirred: Fix blockcast recursion bypass leading to stack overflow tcfmirredact...

Linux Distros Unpatched Vulnerability : CVE-2026-63891

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thunderbolt: property: Cap recursion depth in tbpropertyparsedir A DIRECTORY entry's value field is used as the diroffset for a recursive call into...

AZL-92829 CVE-2026-64082 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: riscv: Fix register corruption from uninitialized cregs on error compatriscvgprset calls cregstoregs unconditionally, even when userregsetcopyin fails. Since cregs is an uninitialized stack variable, a copyin failure causes...

CVE-2026-64083

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 reject short block-read responses in the GPIO accessors adm1266gpioget and adm1266gpiogetmultiple both compose the pin-status word as pinsstatus = readbuf0 + readbuf1 8; right after i2csmbusreadblockdata,...

CVE-2026-64127: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: ecredreconfigure: send packed pdu, not stack pointer Commit 1c08108f3014 "Bluetooth: L2CAP: Avoid -Wflex-array-member-not-at-end warnings" converted the on-stack request PDU in l2capecredreconfigure from an...

CVE-2026-64083: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 reject short block-read responses in the GPIO accessors adm1266gpioget and adm1266gpiogetmultiple both compose the pin-status word as pinsstatus = readbuf0 + readbuf1 8; right after i2csmbusreadblockdata,...

CVE-2026-64082: Use of Uninitialized Resource

In the Linux kernel, the following vulnerability has been resolved: riscv: Fix register corruption from uninitialized cregs on error compatriscvgprset calls cregstoregs unconditionally, even when userregsetcopyin fails. Since cregs is an uninitialized stack variable, a copyin failure causes...

CVE-2026-63891: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Cap recursion depth in tbpropertyparsedir A DIRECTORY entry's value field is used as the diroffset for a recursive call into tbpropertyparsedir with no depth counter. A crafted peer that chains DIRECTORY...