9650 matches found
nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module
A vulnerability in the NGINX ngxhttpslicemodule allows remote, unauthenticated attackers to access uninitialized memory via crafted requests. If configured with unnamed regex captures or background cache updates, this flaw can result in limited memory disclosure or a denial-of-service crash...
SUSE CVE-2026-64317
In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge symlink components to the SL record getsymlinkchunk and the SL handling in parserockridgeinodeinternal walk the variable-length components of a Rock Ridge "SL" symbolic link record. Each component is a...
CVE-2026-64317
In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge symlink components to the SL record getsymlinkchunk and the SL handling in parserockridgeinodeinternal walk the variable-length components of a Rock Ridge "SL" symbolic link record. Each component is a...
CVE-2026-64269
In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdmawritesg When the server answers an RTRS READ, rdmawritesg builds the source scatter/gather entry for the IBWRRDMAWRITE that returns data to the peer. Its length is taken...
CVE-2026-64317
In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge symlink components to the SL record getsymlinkchunk and the SL handling in parserockridgeinodeinternal walk the variable-length components of a Rock Ridge "SL" symbolic link record. Each component is a...
UBUNTU-CVE-2026-64269
In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdmawritesg When the server answers an RTRS READ, rdmawritesg builds the source scatter/gather entry for the IBWRRDMAWRITE that returns data to the peer. Its length is taken...
UBUNTU-CVE-2026-64317
In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge symlink components to the SL record getsymlinkchunk and the SL handling in parserockridgeinodeinternal walk the variable-length components of a Rock Ridge "SL" symbolic link record. Each component is a...
CVE-2026-64339
CVE-2026-64339 affects the Linux kernel USB IO stack (usbio_bulk_msg). A malicious device that advertises a large bulk OUT and small bulk IN endpoint can set bpkt_len (from bpkt->len) to exceed rxbuf_len, causing memcpy to read past rxbuf and leak adjacent slab memory via i2c-dev. The code alr...
CVE-2026-64317 isofs: bound Rock Ridge symlink components to the SL record
In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge symlink components to the SL record getsymlinkchunk and the SL handling in parserockridgeinodeinternal walk the variable-length components of a Rock Ridge "SL" symbolic link record. Each component is a...
EUVD-2026-49029
In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge symlink components to the SL record getsymlinkchunk and the SL handling in parserockridgeinodeinternal walk the variable-length components of a Rock Ridge "SL" symbolic link record. Each component is a...
CVE-2026-64269
The CVE-2026-64269 issue affects the Linux kernel’s RDMA path (RDMA/rtrs-srv) where rdma_write_sg() uses desc[0].len from the wire descriptor to determine the RDMA_WRITE length. The length could exceed the bound of the mapped chunk because it wasn’t checked against max_chunk_size, enabling a peer...
CVE-2026-64269 RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg
In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdmawritesg When the server answers an RTRS READ, rdmawritesg builds the source scatter/gather entry for the IBWRRDMAWRITE that returns data to the peer. Its length is taken...
PT-2026-64490
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/rtrs-srv component where the rdma write sg function fails to validate the length of the RDMA-Write operation against the maximum chunk size. When responding t...
PT-2026-64560
In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: bound bulk IN response length to the received transfer usbio bulk msg copies bpkt len = le16 to cpubpkt-len bytes out of the bulk IN buffer usbio-rxbuf, allocated with size usbio-rxbuf len into the caller's...
Linux Distros Unpatched Vulnerability : CVE-2026-64339
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: misc: usbio: bound bulk IN response length to the received transfer usbiobulkmsg copies bpktlen = le16tocpubpkt-len bytes out of the bulk IN buffer...
Linux Distros Unpatched Vulnerability : CVE-2026-6390
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GNU nano's multi-buffer error message handling. When a user opens multiple files at startup and one triggers an ALERT-level error, a special...
Linux Distros Unpatched Vulnerability : CVE-2026-59842
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without...
DEBIAN-CVE-2026-66337
A flaw was found in libsoup. An unsigned integer underflow in the soupfilterinputstreamreaduntil function causes a heap buffer over-read when parsing multipart HTTP responses. A malicious HTTP server can exploit this by sending a crafted multipart response, potentially causing the client...
CVE-2026-66337
A flaw was found in libsoup. An unsigned integer underflow in the soupfilterinputstreamreaduntil function causes a heap buffer over-read when parsing multipart HTTP responses. A malicious HTTP server can exploit this by sending a crafted multipart response, potentially causing the client...
CVE-2026-66337
A flaw was found in libsoup. An unsigned integer underflow in the soupfilterinputstreamreaduntil function causes a heap buffer over-read when parsing multipart HTTP responses. A malicious HTTP server can exploit this by sending a crafted multipart response, potentially causing the client...