CVE-2026-64467

The CVE-2026-64467 entry details a Linux kernel vulnerability in the rust_binder path. The issue occurs in Allocation’s Drop when walking the offsets array (binder_size_t = u64 entries): previously the stride and per-entry read used usize, causing 8-byte entries to be advanced in 4-byte steps on ...

CVE-2026-64467 rust_binder: use a u64 stride when cleaning up the offsets array

In the Linux kernel, the following vulnerability has been resolved: rustbinder: use a u64 stride when cleaning up the offsets array Allocation's Drop walks the offsets array bindersizet = u64 entries, cleaning up the objects, but it used usize instead of u64 for both the stride and the per-entry...

CVE-2026-64467

In the Linux kernel, the following vulnerability has been resolved: rustbinder: use a u64 stride when cleaning up the offsets array Allocation's Drop walks the offsets array bindersizet = u64 entries, cleaning up the objects, but it used usize instead of u64 for both the stride and the per-entry...

EUVD-2026-48810

In the Linux kernel, the following vulnerability has been resolved: rustbinder: clear freeze listener on node removal Generally userspace is supposed to explicitly clear freeze listeners before they drop the refcount on the node ref to zero, but there's nothing forcing that. Currently, in this...

CVE-2026-64466

In the Linux kernel, the following vulnerability has been resolved: rustbinder: clear freeze listener on node removal Generally userspace is supposed to explicitly clear freeze listeners before they drop the refcount on the node ref to zero, but there's nothing forcing that. Currently, in this...

CVE-2026-64466

CVE-2026-64466 affects the Linux kernel where, in the rust_binder component, a freeze listener may linger in the freeze_listeners red-black tree and the remote node’s listener list after the referenced object’s refcount reaches zero. This can create a refcount cycle and potentially a memory leak....

CVE-2026-64466 rust_binder: clear freeze listener on node removal

In the Linux kernel, the following vulnerability has been resolved: rustbinder: clear freeze listener on node removal Generally userspace is supposed to explicitly clear freeze listeners before they drop the refcount on the node ref to zero, but there's nothing forcing that. Currently, in this...

CVE-2026-64466 rust_binder: clear freeze listener on node removal

In the Linux kernel, the following vulnerability has been resolved: rustbinder: clear freeze listener on node removal Generally userspace is supposed to explicitly clear freeze listeners before they drop the refcount on the node ref to zero, but there's nothing forcing that. Currently, in this...

CVE-2026-64466

In the Linux kernel, the following vulnerability has been resolved: rustbinder: clear freeze listener on node removal Generally userspace is supposed to explicitly clear freeze listeners before they drop the refcount on the node ref to zero, but there's nothing forcing that. Currently, in this...

bramble v0.9.5-android

Bramble A password manager that keeps your secrets on your own devices. No account, no server holding your vault, no company to get breached and leak everything. You hold the vault, you hold the password, and that's it. Bramble runs where you do: Browser extension for Chromium browsers Brave,...

miasma v0.4.0

🌀 Miasma AI companies continually scrape the internet at an enormous scale, swallowing up all of its contents to use as training data for their next models. If you have a public website, they are already stealing your work. Miasma is here to help you fight back! Spin up the server and point any...

monty v0.0.19

Monty A minimal, secure Python interpreter written in Rust for use by AI. Experimental - This project is still in development, and not ready for prime time. A minimal, secure Python interpreter written in Rust for use by AI. Monty avoids the cost, latency, complexity and general faff of using a...

PT-2026-64688

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rust binder component where the Drop implementation for Allocation uses usize instead of u64 for the stride and per-entry read when cleaning up the offsets array. ...

PT-2026-64687

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rust binder component where freeze listeners are not automatically cleared when a node is removed. While userspace is expected to clear these listeners before the...

Linux Distros Unpatched Vulnerability : CVE-2026-64509

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: rust: block: fix GenDisk cleanup paths GenDiskBuilder::build still has fallible work after...

CVE-2026-64509: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: rust: block: fix GenDisk cleanup paths GenDiskBuilder::build still has fallible work after blkmqallocdisk, but its error path only recovers the foreign queue data. That leaks the temporary gendisk and requestqueue until later...

Linux Distros Unpatched Vulnerability : CVE-2026-64467

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: rustbinder: use a u64 stride when cleaning up the offsets array Allocation's Drop walks the...

Linux Distros Unpatched Vulnerability : CVE-2026-64466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: rustbinder: clear freeze listener on node removal Generally userspace is supposed to...

openSUSE 16: aws-nitro-enclaves-binaryblobs-upstream / aws-nitro-enclaves-cli / etc (openSUSE-SU-2026:21406-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21406-1 advisory. - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust- openssl crate bsc1270542. -...

aws-smithy-http-server-python (>=0.44.0, <=0.52.0) potentially affected by CVE-2026-16756 via aws-smithy-http-server (>=0.44.0, <=0.52.0)

aws-smithy-http-server CARGO version =0.44.0, =0.44.0, =0.52.0 Source cves: CVE-2026-16756 Source advisory: OSV:GHSA-JVXP-QMX7-GJPX...