CVE-2026-49868: Out-of-bounds Read

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.07, parsereply in sys/net/applicationlayer/dhcpv6/client.c omits minimum-length validation before passing IAPD and IANA option bodies to sub-option parsers. A...

Linux net/sched/cls_bpf Buffer Overflow DoS

The vulnerability in the net/sched/clsbpf.c component of the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel addrconf_dad_failure() Buffer Overflow

The vulnerability of the addrconfdadfailure function in the net/ipv6/addrconf.c component of the Linux kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility ...

Linux kernel vxlan_gro_prepare_receive Heap Buffer Overflow DoS

The vulnerability of the vxlangropreparereceive function in the drivers/net/vxlan/vxlancore.c component of the Linux kernel is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protect...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the hcireadcodeccapabilities function within the net/bluetooth/hcicodec.c component of the Linux kernel operating system stems from inadequate resource management during its existence. Exploitation of this vulnerability enables a remote attacker to compromise the...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the rtwpcirxnapi function in the drivers/net/wireless/realtek/rtw88/pci.c component of the Linux kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of...

Linux netlink Heap Buffer Overflow DoS

The vulnerability of the net/tipc/netlink.c component in the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the pfcplinksetup function in the drivers/net/pfcp.c component of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux SCTP Verify Function Data Compromise

The vulnerabilities of the functions sctpverifyasconf and sctpverifyparam in the net/sctp/smmakechunk.c component of the Linux kernel are related to insufficient resource control during their existence. Exploiting these vulnerabilities could allow a remote attacker to compromise the confidentiali...

Linux net/sched/cls_flow.c Data Compromise

The vulnerability in the net/sched/clsflow.c component of the Linux operating system relates to the disclosure of information during data transmission. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the protected information...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the tipcupdatenametbl function in the net/tipc/namedistr.c component of the Linux kernel is related to the implementation of incorrect flow control. Exploiting this vulnerability could allow a remote attacker to cause service failures...

Linux net/tipc/socket.c Heap Buffer Overflow DoS

The vulnerability of the tipcskconnprotorcv function in the net/tipc/socket.c component of the Linux operating system is related to the improper implementation of thread management. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Linux kernel t7xx_port_ctrl_tx Heap Buffer Overflow DoS

The vulnerability of the t7xxportctrltx function in the drivers/net/wwan/t7xx/t7xxportwwan.c file of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Oracle Linux 9 : kernel (ELSA-2026-83156)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-83156 advisory. - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry Jan Polensky RHEL-271472 CVE-2026-80985 - net/smc: bound the peer rkey counts in...

Linux Distros Unpatched Vulnerability : CVE-2026-96957

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-96957 Note that...

Security Update for Microsoft .NET Core (October 2026)

The Microsoft .NET Core installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network...

Security Update for Microsoft .NET Core SDK (October 2026)

The Microsoft .NET Core SDK installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an...

Linux kernel sch_codel DoS

The vulnerability in the net/sched/schcodel.c component of the Linux kernel is related to an improper implementation of a control flow. Exploitation of this vulnerability enables a remote attacker to compromise the confidentiality, integrity, and availability of protected information...

Linux mana_gd_create_mana_wq_cq() function Heap Buffer Overflow DoS

The vulnerability in the managdcreatemanawqcq function within the drivers/net/ethernet/microsoft/mana/gdmamain.c file on Linux kernel systems is related to the use of an uninitialized resource. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity,...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the updateVF function within the net/sched/schhfsc.c component of the Linux kernel operating system is related to an improper implementation of the control flow. Exploitation of this vulnerability may allow an attacker to cause a denial of service...