CVE-2026-18821

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 Power Systems Firmware is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker on the same network as a partition undergoing...

Security Bulletin: This Power System update is being released to address CVE-2026-18821

Summary Power Systems Firmware is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker on the same network as a partition undergoing network boot can send a malformed packet, allowing arbitrary code to be executed in the partition firmware and...

CVE-2026-72348

In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop The ah, hbh and rt matches check that the fixed extension header is present, then use the header length field to derive the advertised extension header lengt...

CVE-2026-72334

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix malformed ISOEND/CONT handling Core specification Part C vol 4 sec 5.4.5 does not exclude empty ISOCONT, ISOEND packets. We currently reject them if they are last. If controller sends malformed sequence ISOSTA...

CVE-2026-72296

In the Linux kernel, the following vulnerability has been resolved: net: ife: require ETHHLEN to be pullable in ifedecode ife decode may return after making only the outer IFE header and metadata pullable. The caller then passes the decapsulated packet to ethtypetrans, which expects the inner...

EUVD-2026-59250

In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE private flags can indicate that remote checksum offload metadata is present. The private flags field itself is accounted for by guehdrflagslen, but guehdrprivflagslen currently...

CVE-2026-72351

CVE-2026-72351 : In the Linux kernel, the vulnerability concerns GUE private flags indicating REMCSUM metadata. The root cause is that guehdr_priv_flags_len() returns 0 when GUE_PFLAG_REMCSUM is set, allowing a packet with only the private flags field to pass validate_gue_flags(). Consequently, g...

EUVD-2026-59195

In the Linux kernel, the following vulnerability has been resolved: net: ife: require ETHHLEN to be pullable in ifedecode ife decode may return after making only the outer IFE header and metadata pullable. The caller then passes the decapsulated packet to ethtypetrans, which expects the inner...

CVE-2026-72296 net: ife: require ETH_HLEN to be pullable in ife_decode()

In the Linux kernel, the following vulnerability has been resolved: net: ife: require ETHHLEN to be pullable in ifedecode ife decode may return after making only the outer IFE header and metadata pullable. The caller then passes the decapsulated packet to ethtypetrans, which expects the inner...

CVE-2026-72296

The CVE-2026-72296 entry describes a Linux kernel vulnerability in the net/ife path where ife_decode() could return after pulling only the outer IFE header and metadata, causing eth_type_trans() to see an inner Ethernet header that may be absent in the linear data area. This could lead to a crash...

PT-2026-72484

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ife decode function where it may return after making only the outer IFE header and metadata pullable. When the decapsulated packet is subsequently passed to eth ty...

CVE-2026-19695

A flaw was found in the Gammu DCT3 trace file parser in Wireshark. This issue occurs when malformed packets are decoded from a packet capture file, causing a stack-based buffer overflow, resulting in a denial of service. Mitigation To mitigate this vulnerability, do not open untrusted capture fil...

CVE-2026-58224 Samba: ctdb fails to do integrity checking of received packets

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequa...

EUVD-2026-58669

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequa...

CVE-2026-65933

A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below...

CVE-2026-65936

CVE-2026-65936 affects the RS9116W/SiWx917 Bluetooth stack. The root cause is a malformed Bluetooth connection request message with an increased length field, which can cause a memory leak and potential leakage of sensitive information. The record from CVELIST explicitly frames it as a malformed ...

CVE-2026-65936 RS9116W/SiWx917 malformed packet with increased length field causes memory leak

A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below...

CVE-2026-65936 RS9116W/SiWx917 malformed packet with increased length field causes memory leak

A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below...

EUVD-2026-58079

A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below...

CVE-2026-65933

The CVE-2026-65933 entry concerns the BT122 Bluetooth module. A malformed Bluetooth connection request message with an increased length field can trigger a memory leak, potentially leaking sensitive information. The vulnerability is tied to the BT122’s handling of connection request messages (des...