151 matches found
USN-9026-1 linux-azure-6.8, linux-azure-fde-6.8 vulnerabilities
It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...
USN-8960-1: Linux kernel (OEM) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - USB Gadget drivers; - Memory management; - Multiple devices driver; - ARM64 architecture; - EROFS file system; -...
Astra Linux - vulnerability in linux
In the Linux kernel, the following vulnerability has been resolved: m68k: mvme147, mvme16x: Do not wipe PCC timer configuration bits Do not clear the timer 1 configuration bits when clearing the interrupt flag and counter overflow. As Michael reported, “This results in no timer interrupts being...
CVE-2026-90158
A flaw was found in the Linux kernel's m68k nfcon module. A deadlock can occur when the showconsactive function calls the .device method while holding the consolelistlock, and the consoleisregistered function attempts to acquire the same lock. This contention for the lock can lead to a system...
capstone: Capstone: Denial of service via out-of-bounds read in M68K and RISCV backends
A flaw was found in Capstone. The csinsnname application programming interface API in the M68K and RISCV backends does not properly validate caller-supplied instruction IDs. An attacker can provide an invalid instruction ID, leading to an out-of-bounds read. This can cause the process to crash,...
SUSE CVE-2026-90158
In the Linux kernel, the following vulnerability has been resolved: m68k: nfcon: Do not call consoleisregistered in nfcondevice Since 7c2af0f634f1 "tty: ttyio: use consolelistlock for list synchronization" showconsactive calls the .device method under the consolelistlock, but consoleisregistered...
Linux Distros Unpatched Vulnerability : CVE-2026-90158
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: m68k: nfcon: Do not call consoleisregistered in nfcondevice Since 7c2af0f634f1 tty: ttyio: u...
CVE-2026-90158
In the Linux kernel, the following vulnerability has been resolved: m68k: nfcon: Do not call consoleisregistered in nfcondevice Since 7c2af0f634f1 "tty: ttyio: use consolelistlock for list synchronization" showconsactive calls the .device method under the consolelistlock, but consoleisregistered...
AZL-102012 CVE-2026-90158 affecting package kernel for versions less than 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: m68k: nfcon: Do not call consoleisregistered in nfcondevice Since 7c2af0f634f1 "tty: ttyio: use consolelistlock for list synchronization" showconsactive calls the .device method under the consolelistlock, but consoleisregistered...
CVE-2026-90158 m68k: nfcon: Do not call console_is_registered() in nfcon_device()
In the Linux kernel, the following vulnerability has been resolved: m68k: nfcon: Do not call consoleisregistered in nfcondevice Since 7c2af0f634f1 "tty: ttyio: use consolelistlock for list synchronization" showconsactive calls the .device method under the consolelistlock, but consoleisregistered...
PT-2026-94506
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock occurs in the m68k nfcon component. The show cons active function calls the .device method while holding the console list lock. Because the nfcon device function subsequently...
CVE-2026-90158: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: m68k: nfcon: Do not call consoleisregistered in nfcondevice Since 7c2af0f634f1 "tty: ttyio: use consolelistlock for list synchronization" showconsactive calls the .device method under the consolelistlock, but consoleisregistered...
CVE-2026-49282
A flaw was found in Capstone. The csinsnname application programming interface API in the M68K and RISCV backends does not properly validate caller-supplied instruction IDs. An attacker can provide an invalid instruction ID, leading to an out-of-bounds read. This can cause the process to crash,...
SUSE CVE-2026-49282
Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's public csinsnname API forwards caller-supplied instruction IDs directly to the selected architecture backend. Most backends validate the ID before indexing instruction-name tables, but the M68K and RISCV backends have...
Linux Distros Unpatched Vulnerability : CVE-2026-49282
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's public csinsnname API forwards caller-supplied instruction IDs directly to the...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the csinsnname lookup in arch/M68K/M68KInstPrinter.c and arch/RISCV/RISCVMapping.c. An attacker can crash the process by supplying an invalid instruction ID to csinsnname on an M68K or RISCV handle. On M68K, the...
AZL-96746 CVE-2026-49282 affecting package rust for versions less than 1.90.0-10
Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's public csinsnname API forwards caller-supplied instruction IDs directly to the selected architecture backend. Most backends validate the ID before indexing instruction-name tables, but the M68K and RISCV backends have...
AZL-95982 CVE-2026-49282 affecting package capstone 4.0.2-4
Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's public csinsnname API forwards caller-supplied instruction IDs directly to the selected architecture backend. Most backends validate the ID before indexing instruction-name tables, but the M68K and RISCV backends have...
CVE-2026-49282
Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's public csinsnname API forwards caller-supplied instruction IDs directly to the selected architecture backend. Most backends validate the ID before indexing instruction-name tables, but the M68K and RISCV backends have...
AZL-96737 CVE-2026-49282 affecting package rust for versions less than 1.75.0-30
Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's public csinsnname API forwards caller-supplied instruction IDs directly to the selected architecture backend. Most backends validate the ID before indexing instruction-name tables, but the M68K and RISCV backends have...