18186 matches found
EUVD-2026-49353
sqlite 3.41 is vulnerable to use after free in the JSON extraction function. After releasing JsonParse object memory via jsonParseFree, the program still accesses internal member of the freed pointer, which can cause service crash and denial of service...
PT-2026-102637
Name of the Vulnerable Software and Affected Versions compress versions prior to 1.18.7 Description A signed integer overflow occurs in the s2.NewDict function when a dictionary is supplied with a uvarint-encoded repeat value that exceeds MaxInt64. This allows an attacker to bypass repeat index...
CVE-2026-51298
...
ROS-20260727-73-0027
A vulnerability in the Apache HTTP Server's OCSP protocol implementation is related to out-of-bounds memory access. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...
MiracleLinux 9 : valkey-8.0.9-1.el9_8 (AXSA:2026-1342:03)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1342:03 advisory. redis: use-after-free in unblock client flow may allow remote code execution CVE-2026-23479 redis: Remote code execution via use-after-free in Lua...
UBUNTU-CVE-2026-64234
In the Linux kernel, the following vulnerability has been resolved: tty: serial: pchuart: add check for dmaalloccoherent Add a check for dmaalloccoherent failure to prevent a potential NULL pointer dereference in dmahandlerx. Properly release DMA channels and the PCI device reference using a goto...
RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg
...
RDMA/siw: bound Read Response placement to the RREAD length
...
UBUNTU-CVE-2026-64269
In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdmawritesg When the server answers an RTRS READ, rdmawritesg builds the source scatter/gather entry for the IBWRRDMAWRITE that returns data to the peer. Its length is taken...
UBUNTU-CVE-2026-64281
In the Linux kernel, the following vulnerability has been resolved: svcrdma: wake sq waiters when the transport closes Threads parked in svcrdmasqwait on scsqticketwait or scsendwait can hang indefinitely in TASKUNINTERRUPTIBLE state across transport teardown, pinning svcxprt references and...
CVE-2026-64369
In the Linux kernel, the following vulnerability has been resolved: s390: Revert support for DCACHEWORDACCESS loadunalignedzeropad reads eight bytes from unaligned addresses and may cross page boundaries. It handles exceptions which may happen if reading from the second page results in an...
CVE-2026-64465 usb: xhci: Fix sleep in atomic context in xhci_free_streams()
In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix sleep in atomic context in xhcifreestreams When a USB device with active stream endpoints is disconnected, xhcifreestreams is called from the hubevent workqueue to free the stream resources. It calls...
EUVD-2026-48915
In the Linux kernel, the following vulnerability has been resolved: proc: protect ptracemayaccess with execupdatelock part 1 Fix the easy cases where procfs currently calls ptracemayaccess without execupdatelock protection, where the fix is to simply add the extra lock or use mmaccess: -...
CVE-2026-64337
CVE-2026-64337 affects the Linux kernel's USB MTU3 gadget driver . The function mtu3_gadget_queue() maps the request DMA before checking whether the QMU GPD ring can accept another transfer. When mtu3_prepare_transfer() fails, the request is returned with -EAGAIN but the DMA mapping is never unma...
EUVD-2026-48881
In the Linux kernel, the following vulnerability has been resolved: usb: mtu3: unmap request DMA on queue failure mtu3gadgetqueue maps the request before checking whether the QMU GPD ring can accept another transfer. the request is returned with -EAGAIN before it is linked on the endpoint request...
CVE-2026-64337 usb: mtu3: unmap request DMA on queue failure
In the Linux kernel, the following vulnerability has been resolved: usb: mtu3: unmap request DMA on queue failure mtu3gadgetqueue maps the request before checking whether the QMU GPD ring can accept another transfer. the request is returned with -EAGAIN before it is linked on the endpoint request...
CVE-2026-64328 usb: gadget: f_fs: Fix DMA fence leak
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Fix DMA fence leak In ffsdmabuftransfer, a ffsdmafence object is kmalloc'd, with the underlying dmafence later initialized by dmafenceinit, which sets its kref counter to 1. Then, dmaresvaddfence gets a second...
CVE-2026-64321
In the Linux kernel, the following vulnerability has been resolved: nvme: target: rdma: fix ndev refcount leak on queue connect nvmetrdmaqueueconnect calls nvmetrdmafindgetdevice which acquires a reference on the returned ndev via krefget. On the path where the host queue backlog is exceeded and...
EUVD-2026-49033
In the Linux kernel, the following vulnerability has been resolved: nvme: target: rdma: fix ndev refcount leak on queue connect nvmetrdmaqueueconnect calls nvmetrdmafindgetdevice which acquires a reference on the returned ndev via krefget. On the path where the host queue backlog is exceeded and...