404611 matches found
Important: Red Hat Security Advisory: perl-DBI:1.641 security update
An update for the perl-DBI:1.641 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2026-90412
A flaw was found in the nvmet component of the Linux kernel. When processing an RMI log page, if memory allocation for the log buffer fails, the system incorrectly reports a successful operation to the host. This can lead to the host believing data was transferred when it was not, potentially...
CVE-2026-90409
A flaw was found in the Linux kernel's drm/panthor driver. This vulnerability arises from a missing check that allows user-mode virtual memory VM bind mappings to overlap with memory regions reserved for kernel Buffer Objects BOs. A local attacker could exploit this to cause memory corruption,...
CVE-2026-90405
A flaw was found in the media: stm32: dcmi component of the Linux kernel. Improper error handling in the probe function can lead to a null pointer dereference. This issue occurs because dmareleasechannel is called before the dcmi-dmachan variable is properly assigned, potentially allowing a local...
CVE-2026-90398
A flaw was found in the Linux kernel ath11k Wi-Fi driver. This vulnerability occurs in the macphycapsparse function due to a mismatch between the allocated memory size and the size used for copying data. When processing certain firmware messages, the driver attempts to write information beyond th...
CVE-2026-90397
A flaw was found in the Linux kernel's Qualcomm qcom Secure Channel Manager SCM firmware component. This vulnerability allows for a NULL pointer dereference due to improper initialization of a shared memory pointer. An attacker could exploit this timing issue, potentially leading to a system cras...
CVE-2026-90388
A flaw was found in the Linux kernel's IOMMU/DMA subsystem. The non-blocking, non-coherent allocation path did not directly check the result of dmaallocfrompool for allocation failures. This oversight could lead to the use of unallocated memory for IOMMU mapping, potentially causing memory...
CVE-2026-90383
A flaw was found in the Linux kernel's SGI GRU Graphics Resource Unit TLB Translation Lookaside Buffer miss handler. This handler incorrectly walks a process's page tables without holding necessary locks or references, and uses kernel page-table accessors on user page tables. This could allow a...
CVE-2026-90379
A flaw was found in the Linux kernel's Wi-Fi driver mt76. This vulnerability occurs when a PCIe Advanced Error Reporting AER error causes the bus to become unresponsive. The driver then attempts to read registers, receiving an invalid value that corrupts its internal memory management. This...
CVE-2026-90358
A flaw was found in the Linux kernel's BPF Berkeley Packet Filter x86 trampoline. When processing 128-bit arguments, the system incorrectly calculates the required stack size for saving registers. This under-allocation leads to memory corruption by overwriting adjacent stack slots. A local attack...
CVE-2026-90357
A flaw was found in the Linux kernel's Wi-Fi subsystem, specifically within the mt76: mt7915 driver. This vulnerability occurs when a Target Wake Time TWT flow is added to an internal list but not correctly unlinked if the firmware rejects the agreement. This improper handling can lead to the reu...
CVE-2026-43849
A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data...
CVE-2026-98473
A flaw was found in the Linux kernel's s390 Virtual Function I/O Adjunct Processor VFIO-AP device driver. A local user with administrative privileges can trigger this issue by removing an AP queue from the host configuration while it remains assigned to an active virtual machine. Because the driv...
net/textproto: mime/multipart: golang: golang: Denial of Service via memory limit bypass in multipart form parsing
A flaw was found in the mime/multipart and net/textproto packages in Go. A remote attacker could exploit this vulnerability by submitting a crafted multipart form request that bypasses configured memory limits when the remaining boundary limit is small. This issue allows the application to read a...
CVE-2026-98472
A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine AMD SEV Secure Encrypted Virtualization implementation. This flaw allows a local user with permissions to manage virtual machines to cause a denial of service DoS through memory exhaustion. When an SEV guest is destroyed afte...
CVE-2026-43849
Technical details regarding the specific affected software, component, or version are not publicly available in the provided documents. The description only confirms a heap memory read vulnerability that could allow an attacker to exfiltrate sensitive data. Monitor for further updates.
EUVD-2026-104850
A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data...
CVE-2026-43849
A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data...
