CVE-2026-98578: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate ISO15693 inventory length The ISO15693 inventory helper removes a two-byte prefix without checking that it exists, then accepts a one-byte remainder before reading data1 as the DSFID. Require the prefix an...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.19 contains a security vulnerability. This vulnerability stems from a subtraction underflow in the sizet type during ANA log boundary checks, allowing the parser to read data that exceeds the ANA log buffer...

Security update for swtpm (moderate)

openSUSE security update: security update for swtpm ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22048-1 Rating: moderate References: bsc1221342 bsc1251789 bsc1266339 bsc1271417 bsc1275653 Cross-References: CVE-2026-75900 CVSS scores:...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2024:1731431059)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2024:1731431059 advisory. - A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2024:1705927642)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2024:1705927642 advisory. - It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free...

Linux Distros Unpatched Vulnerability : CVE-2026-112057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnavdescribetitlechapters that allows attackers to read beyond the part-of-title...

SUSE CVE-2026-46471

An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemuxparseuuid function may read past the end of a heap-allocated buffer, allowing an attacker to disclose heap memory contents...

SUSE CVE-2026-46472

An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemuxparsechnl function may read past the end of a global array, potentially leading to information disclosure...

yova_ps5

YOVA PS5 - Relapse Exploit Suite YOVA PS5 is a modern, hi...

CLSA-2026-1792255236 gstreamer1-plugins-good: Fix of 2 CVEs

CVE-2026-73433: avidemux: fix unsigned integer underflow and out-of-bounds access when parsing FUJIFILM metadata in strd chunks - CVE-2026-73434: avidemux: fix out-of-bounds read by using the correct divisor when counting vprp video field descriptors...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.5 contains a security vulnerability. This vulnerability arises when the ARP ioctl function copies the struct arpreq provided by the user into the stack object. In this process, the arpdev field may lack a NUL terminator. When checking the device name, the strcmp functio...

VideoLAN libdvdnav buffer error vulnerability

VideoLAN libdvdnav versions 7.0.0 and earlier have a buffer error vulnerability. This vulnerability stems from an out-of-bounds read in the setPTT function. The JumpTT title number is only checked using an assert mechanism. Attackers can exploit this vulnerability by using a specially crafted DVD...

VideoLAN libdvdnav buffer error vulnerability

VideoLAN libdvdnav versions prior to 7.0.0 have a buffer error vulnerability. This vulnerability stems from a heap out-of-bounds read in the dvdnavdescribetitlechapters function. Attackers can read data outside of the part-of-title array by providing an excessively large vtsttn value, or by using...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.16 contains a security vulnerability. This vulnerability stems from the ISO15693 inventory helper function, which removes the two-byte prefix without checking whether it exists. After accepting a single-byte remaining data, it reads data1 as DSFID, which may lead to...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.10 contains a security vulnerability. This vulnerability arises from the tpm2getrandom function, which skips the 4-byte parameter size field when responding with the TPM2STSESSIONS tag. However, it still checks the response length using TPMinHEADERSIZE. As a result,...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.35 has a security vulnerability. This vulnerability stems from the ath9kwmirspcallback function, which copies data according to the number of bytes expected by the wait command after removing the verified WMI headers. However, it does not verify the length of the...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.12 has security vulnerabilities. These vulnerabilities stem from insufficient validation of short RX/TX frames and control flows during the processing of Bluetooth BNEP frames. No checks are performed before reading the BNEP header, control type bytes, filter count, a...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability that stems from the lack of strict validation for the length of the SEG6ATTRDST attribute. This allows shorter payloads, resulting in out-of-bound reads of 16-byte segments of uninitialized kernel heap memory. This vulnerability can be exploited throu...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.12 has a security vulnerability. This vulnerability stems from improper bounds checking of the length of RX packets in the catcrxdone function. The function does not consider the packet header offset and the remaining bytes, and accepts packets that are shorter than t...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.16 contains a security vulnerability. This vulnerability arises from the sockops program failing to check the sk type when reading rttmin. As a result, requestsock is forced to convert to tcpsock, and the rttmin value is read beyond its bounds, potentially leading to th...