174150 matches found
PT-2026-94522
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-out-of-bounds read exists in the ksmbd alloc user function. The issue occurs because the function uses the hash sz variable, provided by a mountd IPC login response, to determine...
PT-2026-94374
Name of the Vulnerable Software and Affected Versions vgmstream versions prior to r2118 Description A weakness in the EA SCHl parser component allows for remote exploitation. The issue occurs within the vadpcm read coefs be function located in the src/coding/vadpcm decoder.c file. Manipulation of...
CVE-2026-90408: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix overreads in ath12kwmiprocesscsaswitchcountevent There is no policy entry for WMITAGPDEVCSASWITCHCOUNTSTATUSEVENT, so the parse infrastructure does not enforce a minimum length for the event struct. Additionally...
CVE-2026-93013: Improper Limitation of a Pathname to a Restricted Directory
RAGFlow through 0.27.2 contains a path traversal vulnerability in the devinsertchunksfromfile and devinsertmetadatafromfile endpoints that allows authenticated attackers to read arbitrary files by supplying absolute file paths in the filepath parameter. Attackers with valid access tokens can...
PT-2026-94833
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/rxe component where the num sge and cur sge variables are not validated before indexing the wqe-dma.sge array. For user Queue Pairs QP, the rxe post send...
PT-2026-95012
Name of the Vulnerable Software and Affected Versions mport versions prior to 2.7.8 Description The ping function in libmport/ping.c fails to validate icmp id or icmp seq when accepting ICMP replies and uses a fixed IP-header offset instead of ip hl for parsing. A network attacker capable of...
CVE-2026-90124: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: irqchip/renesas-rzg2l: Fix loss of interrupt rzg2lclearirqint and rzg2lcleartintint perform a read-modify-write on the ISCR/TSCR status registers to clear the bit for the interrupt just handled. Since these registers are...
PT-2026-94485
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hp-bioscfg platform driver where the PSWD ENCODINGS password parser fails to properly validate bounds when copying supported password encodings from the ACPI...
CVE-2026-90414: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: IB/isert: reject PDUs declaring more data than was received isertrecvdone hands each received PDU to the opcode handlers without ever looking at wc-bytelen, the number of bytes the HCA actually placed in the receive descriptor. T...
CVE-2026-52836: Out-of-bounds Read
OpenDDS is an open source C++ implementation of the Object Management Group OMG Data Distribution Service DDS. Prior to 3.34.0, a network attacker can crash a reachable OpenDDS participant by sending a malformed RTPS UDP submessage whose crafted length or sequence-number state causes...
VulnCheck KEV: CVE-2026-89013
Dolibarr 23.0.4 before 24.0.1 contains an authorization bypass vulnerability that allows unauthenticated attackers to read arbitrary files through the document storage endpoints by supplying a crafted hashp parameter value. Attackers can send a request with hashp=shared to skip token validation...
AlmaLinux 8 : kernel-rt (ALSA-2026:68532)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:68532 advisory. kernel: ipvlan: Make the addrslock be per port CVE-2026-23103 kernel: xfrm: hold dev ref until after transportfinish NFHOOK CVE-2026-31663 kernel:...
EulerOS 2.0 SP15 : kernel (EulerOS-SA-2026-3807)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : fs/smb/client: fix out-of-bounds read in cifssanitizeprepathCVE-2026-43112 lib/crypto: chacha: Zeroize permutedstate before it leaves...
ALSA-2026:68532 Important: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: ipvlan: Make the addrslock be per port CVE-2026-23103 kernel: xfrm: hold dev ref until after transportfinish NFHOOK CVE-2026-31663...
RHEL 8 : kernel (RHSA-2026:68531)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:68531 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipvlan: Make the addrslock be...
RHEL 8 : kernel-rt (RHSA-2026:68532)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:68532 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...
PT-2026-94761
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.0-rc4 Description An issue exists in the IB/isert component where the system fails to compare the actual bytes received in the login buffer against the length declared in the login Protocol Data Unit PDU Basi...
PT-2026-94762
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iSER iSCSI Extensions for RDMA implementation where the isert recv done function processes received Protocol Data Units PDUs without verifying if the declared data...
PT-2026-94891
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hfsplus module where the hfsplus delete cat function fails to validate a thread record before rebuilding a delete key. When the last open reference to an unlinked...