85 matches found
CVE-2026-98365
The Linux kernel is vulnerable to an integer overflow in the mr_check_range() function within the RDMA/rxe component. The vulnerability exists because the function uses wraparound-prone arithmetic to validate that the iova and length fall within the registered Memory Region (MR) range. An unauthe...
CVE-2026-98365 RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix integer overflow in mrcheckrange leading to OOB access mrcheckrange validates that iova, iova+length falls within the registered MR range using wraparound-prone arithmetic: if iova ibmr.iova || iova + length...
CVE-2026-98365: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix integer overflow in mrcheckrange leading to OOB access mrcheckrange validates that iova, iova+length falls within the registered MR range using wraparound-prone arithmetic: if iova ibmr.iova || iova + length...
PT-2026-106694
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the mr check range function within the RDMA/rxe component. The function uses wraparound-prone arithmetic to validate that the range iova, iova+length falls...
UBUNTU-CVE-2026-91135
Heap-based buffer overflow vulnerability in Apache Thrift C++ THeaderTransport. When an application enables the ZLIB transform for the frames it sends, THeaderTransport::transform copies the compressed frame into the write buffer without making sure it fits. Data that does not compress, such as...
CVE-2026-104419: Insufficient Verification of Data Authenticity
Zebra zebrad 4.5.0 before 6.3.0 discards which peer supplied the block hashes in FindBlocks responses, then assigns 100 misbehavior points, the ban threshold, to whichever peer serves a requested block more than 50,000 heights above the tip. A remote peer can return real far-ahead hashes to a...
CVE-2026-54873
Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending maliciously crafted packets, making the local QUIC stack to keep the memory for packet buffers allocated. The time for...
CVE-2026-54873
Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending maliciously crafted packets, making the local QUIC stack to keep the memory for packet buffers allocated. The time for...
CVE-2026-102360
The lib0 library, versions 0.2.1-0.2.117 and 1.0.0-rc.32 and earlier, contains a missing bounds check in its binary decoder. Specifically, the readUint8Array function fails to compare the wire-supplied length against the decoder's own view. This allows an unauthenticated remote peer to perform an...
CVE-2026-84894
In moxygen before commit 004123dd24c3, MoQSession::dataStreamReadLoop keeps using a stream read handle after reading a FIN, which invalidates the handle under proxygen's WebTransport API. A remote peer can trigger the stale use by opening a data stream that names an unknown track alias and carrie...
CVE-2026-84894
The moxygen library is vulnerable to a memory safety issue in versions prior to commit 004123dd24c3 . Specifically, the MoQSession::dataStreamReadLoop continues to use a stream read handle after a FIN has been read, which leads to the use of an invalidated handle under the proxygen WebTransport A...
CVE-2026-84894: Use After Free
In moxygen before commit 004123dd24c3, MoQSession::dataStreamReadLoop keeps using a stream read handle after reading a FIN, which invalidates the handle under proxygen's WebTransport API. A remote peer can trigger the stale use by opening a data stream that names an unknown track alias and carrie...
CVE-2026-100657
Rejected reason: This CVE ID has been rejected as a duplicate...
RockyLinux 9 : rsyslog (RLSA-2026:67583)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67583 advisory. rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd CVE-2026-19654...
RockyLinux 10 : rsyslog (RLSA-2026:67584)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67584 advisory. rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd CVE-2026-19654...
Low: Red Hat Security Advisory: rsyslog security update
An update for rsyslog is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
RHEL 10 : rsyslog (RHSA-2026:67584)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67584 advisory. The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering ...
RUSTSEC-2026-0338 Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads
When a stream is read in unordered mode for example through RecvStream::readfalse in quinn-proto or readunordered in quinn, quinn-proto proactively deduplicates received data by recording received ranges in a RangeSet through its replace method. When an incoming STREAM frame carried an empty...
CVE-2026-89725
In the Linux kernel, the following vulnerability has been resolved: media: cec: stm32: prevent out-of-bounds write on RX overflow stm32rxdone appends each received CEC byte to rxmsg.msg using rxmsg.len as the write index, incrementing it on every RXBR receive-byte-ready interrupt without checking...