Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: nfc: nci: Fixed an uninitialized value in ncidevup and ncintfpacket. syzbot reported the following uninitialized value access issue 12: The ncirxwork function parses and processes received packets. When the payload length is...

joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization

RFC7797 b64=false JWS payloads bypass JWSRegistry payload-size limits during deserialization SummaryTesting revealed that joserfc accepts oversized RFC7797 b64=false JWS payloads without applying JWSRegistry.maxpayloadlength.The normal JWS compact and flattened JSON paths reject payloads above th...

SUSE-SU-2026:22127-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-23254: net: gro: fix outer network offset bsc1259884. - CVE-2026-23303: smb: client: Don't log plaintext credentials in cifssetcifscreds bsc1260502. -...

CVE-2026-46043

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Validate pad and ICRC before payloadsize in rxercv rxercv currently checks only that the incoming packet is at least headersizepkt bytes long before payloadsize is used. However, payloadsize subtracts both the...

EUVD-2026-15281

In the Linux kernel, the following vulnerability has been resolved: cxl/mbox: validate payload size before accessing contents in cxlpayloadfromuserallowed cxlpayloadfromuserallowed casts and dereferences the input payload without first verifying its size. When a raw mailbox command is sent with a...

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the lack of verification of the size of the payload before accessing its content, potentially leading t...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ksmbd: transportipc: Validate the payload size before reading the handle. The handleresponse function dereferences the payload as a 4-byte handle without verifying that the declared payload size is at least 4 bytes. A malformed o...

EUVD-2022-41262

Malicious code in bioql PyPI...

CVE-2025-38679 media: venus: Fix OOB read due to missing payload bound check

In the Linux kernel, the following vulnerability has been resolved: media: venus: Fix OOB read due to missing payload bound check Currently, The eventseqchanged handler processes a variable number of properties sent by the firmware. The number of properties is indicated by the firmware and used t...

CVE-2022-38696

A security vulnerability exists in UNISOC Chipsets (from Spreadtrum) due to a missing payload size check in the BootRom . This flaw can lead to a memory buffer overflow without requiring additional execution privileges. While specific affected versions are not provided, the vulnerability impacts ...

CVE-2022-38693

In FDL1, there is a possible missing payload size check. This could lead to memory buffer overflow without requiring additional execution privileges...

CVE-2022-38693

A memory buffer overflow vulnerability exists in FDL1 , which is a component of UNISOC Chipsets (produced by UNISOC, formerly Spreadtrum). The root cause is a missing payload size check , which could allow an attacker to trigger the overflow without requiring additional execution privileges. Whil...

PT-2025-35466

Name of the Vulnerable Software and Affected Versions: BootRom affected versions not specified Description: A missing payload size check in BootRom could lead to a memory buffer overflow, and does not require additional execution privileges. Recommendations: At the moment, there is no information...

CVE-2022-38696: Improper Restriction of Operations within the Bounds of a Memory Buffer

In BootRom, there's a possible missing payload size check. This could lead to memory buffer overflow without requiring additional execution privileges...

CVE-2022-38693: Improper Restriction of Operations within the Bounds of a Memory Buffer

In FDL1, there is a possible missing payload size check. This could lead to memory buffer overflow without requiring additional execution privileges...

PT-2025-35464

Name of the Vulnerable Software and Affected Versions: FDL1 affected versions not specified Description: FDL1 may be susceptible to a memory buffer overflow due to a missing payload size check. This issue does not require additional execution privileges to exploit. Recommendations: At the moment,...

Linux Distros Unpatched Vulnerability : CVE-2024-35915

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: nci: Fix uninit-value in ncidevup and ncintfpacket syzbot reported the following uninit-value access issue 12: ncirxwork parses and processes received...

DEBIAN-CVE-2024-35915

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in ncidevup and ncintfpacket syzbot reported the following uninit-value access issue 12: ncirxwork parses and processes received packet. When the payload length is zero, each message type handler reads...

CVE-2019-10622: Out-of-bounds Read

Out of bound memory access can happen while parsing ADSP message due to lack of check of size of payload received from userspace in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon...