1161 matches found
CVE-2026-64961 Authentication Bypass in ATutor
ATutor is vulnerable to authentication bypass . Although a token validation check is present in the auto-login functionality, the values required for token validation remain uninitialized in certain code paths. An unauthenticated attacker who can determine a user's identifier and registration...
CVE-2026-76919 Use of Uninitialized Variable in Wireshark
ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-76919
Wireshark is affected in versions 4.6.0–4.6.7 and 4.4.0–4.4.18. The ESS protocol dissector crashes due to a use of an uninitialized variable when processing malformed network traffic, enabling unauthenticated remote denial of service (CVSS 5.3). Exploitation in the wild is not documented in the p...
CVE-2026-74265
A flaw was found in the mana network driver of the Linux kernel. When creating a General DMA GDMA queue, the queue-id may not be properly initialized. If the queue creation fails before a valid ID is assigned, a subsequent cleanup operation can incorrectly use a zero ID, potentially corrupting th...
Linux Distros Unpatched Vulnerability : CVE-2026-74265
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: mana: initialize gdma queue id to INVALIDQUEUEID managdcreatemanawqcq leaves queue-id as 0 from kzallocobj until manacreatewqobj assigns the...
The vulnerability of the act_skbedit.c component in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the actskbedit.c component in the Linux operating system is related to the lack of checks for division by zero. Exploiting this vulnerability can allow an attacker to cause a service failure...
MINI-VC2H-Q35F-7F95
Bulletin has no description...
CVE-2026-72501
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Initialize dpi variable to zero dpi is initialized only for BNXTREALLOCWCPAGE, but copied for all the cases. So initialize the dpi to 0...
UBUNTU-CVE-2026-72501
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Initialize dpi variable to zero dpi is initialized only for BNXTREALLOCWCPAGE, but copied for all the cases. So initialize the dpi to 0...
CVE-2026-74265 net: mana: initialize gdma queue id to INVALID_QUEUE_ID
In the Linux kernel, the following vulnerability has been resolved: net: mana: initialize gdma queue id to INVALIDQUEUEID managdcreatemanawqcq leaves queue-id as 0 from kzallocobj until manacreatewqobj assigns the firmware-returned id. If creation fails before that, cleanup calls managddestroycq...
CVE-2026-72501 RDMA/bnxt_re: Initialize dpi variable to zero
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Initialize dpi variable to zero dpi is initialized only for BNXTREALLOCWCPAGE, but copied for all the cases. So initialize the dpi to 0...
EUVD-2026-59400
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Initialize dpi variable to zero dpi is initialized only for BNXTREALLOCWCPAGE, but copied for all the cases. So initialize the dpi to 0...
CVE-2026-72501
The CVE-2026-72501 entry concerns the Linux kernel’s RDMA/bnxt_re code path. The bug was that the dpi variable was initialized only for BNXT_RE_ALLOC_WC_PAGE and then copied in other cases, potentially leaving an uninitialized dpi. The fix initializes dpi to 0 across all paths, resolving the issu...
EUVD-2026-58995
In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Initialize ethsyslock spinlock before use lan743xhardwareinit calls pci11x1xstrapgetstatus during the PCI11x1x probe sequence. That helper acquires the Ethernet subsystem hardware lock via lan743xhssyslockacquire,...
CVE-2026-72017
In the Linux kernel, the following vulnerability has been resolved: net: macb: drop in-flight Tx SKBs on close The MACB driver has since forever leaked the outgoing SKBs that have not yet been marked as completed. They live in queue-txskb which gets freed without remorse nor checking...
PT-2026-72689
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt re: Initialize dpi variable to zero dpi is initialized only for BNXT RE ALLOC WC PAGE, but copied for all the cases. So initialize the dpi to 0...
CVE-2026-17077
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of an uninitialized variable...
CVE-2026-17077 IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of an uninitialized variable...
CVE-2026-17077
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of an uninitialized variable...
CVE-2026-17077
IBM i 7.6, 7.5, 7.4, and 7.3 are affected by CVE-2026-17077 due to the use of an uninitialized variable in DRDA/DDM processing, enabling a remote attacker to cause a denial of service (CVSS v3.1 base score 5.3). The IBM security bulletin lists remediation by applying PTFs: 7.6 SJ10848, 7.5 SJ1084...