5828 matches found
CVE-2026-74673 Input: evdev - fix information leak in evdev_pass_values()
In the Linux kernel, the following vulnerability has been resolved: Input: evdev - fix information leak in evdevpassvalues In evdevpassvalues, the inputevent structure is allocated on the kernel stack and populated field-by-field. However, it is never fully initialized. On architectures where...
CVE-2026-74673 Input: evdev - fix information leak in evdev_pass_values()
In the Linux kernel, the following vulnerability has been resolved: Input: evdev - fix information leak in evdevpassvalues In evdevpassvalues, the inputevent structure is allocated on the kernel stack and populated field-by-field. However, it is never fully initialized. On architectures where...
CVE-2026-74673
CVE-2026-74673 is an information leak in the Linux kernel's evdev (event device) input subsystem. In evdev_pass_values(), __evdev_queue_syn_dropped, and __pass_event, the struct input_event is allocated on the kernel stack and populated field-by-field without full initialization. On architectures...
Linux Distros Unpatched Vulnerability : CVE-2026-74673
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: evdev - fix information leak in evdevpassvalues In evdevpassvalues, the inputevent structure is allocated on the kernel stack and populated field-by-fiel...
CVE-2026-74577
A flaw was found in the Linux kernel's Multiprotocol Label Switching MPLS networking component. When processing an RTMGETROUTE request, the mplsgetroute function fails to initialize a specific byte in the response message. This oversight allows a local user to obtain a single byte of uninitialize...
CVE-2026-74315
A flaw was found in the lockd component of the Linux kernel. A remote attacker can exploit this vulnerability by presenting a Network Lock Manager version 4 NLMv4 file handle shorter than expected. This causes the system to hash uninitialized bytes, leading to inconsistent file handle lookups...
ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`
A flaw was found in ws, an open source WebSocket client and server for Node.js. The websocket.close implementation is vulnerable to uninitialized memory disclosure when a TypedArray is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memor...
MINI-G5C8-3X7V-PW4X
Bulletin has no description...
OESA-2026-3470 ffmpeg security update
FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: A flaw was found in...
OESA-2026-3467 ffmpeg security update
FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: FFmpeg versions from 3....
kernel: drm/amdgpu: zero-initialize GART table on allocation
A flaw was found in the Linux kernel's AMD GPU amdgpu driver. When allocating a Graphics Address Remapping Table GART, the memory was not properly initialized. This could allow a local attacker to potentially access uninitialized memory, leading to information disclosure or unexpected system...
kernel: drm/amdgpu: zero-initialize GART table on allocation
A flaw was found in the Linux kernel's AMD GPU amdgpu driver. When allocating a Graphics Address Remapping Table GART, the memory was not properly initialized. This could allow a local attacker to potentially access uninitialized memory, leading to information disclosure or unexpected system...
CVE-2026-24401 vulnerabilities
Vulnerabilities for packages: avahi...
CVE-2026-72479
A flaw was found in the Linux kernel's iio: accel: mma8452 module. When an I2C read operation fails, the mma8452read function incorrectly returns a success status. This can lead to the mma8452readraw function using uninitialized stack memory, potentially resulting in information disclosure...
CVE-2026-72453
A flaw was found in the Linux kernel's regcache mechanism. During initialization, an error in a specific callback function cacheops-populate can have its error code overwritten by a subsequent exit routine. This masks the original error, potentially causing the system to attempt operations on...
CVE-2026-72447
A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP diagnostic SCTPDIAG endpoint dumping mechanism. A race condition occurs when address lists are traversed without holding the necessary socket lock, allowing concurrent modifications. A local attacker could exploit th...
CVE-2026-72444
A flaw was found in the Linux kernel's flowdissector component. When processing network packets on non-Ethernet devices, such as a TUN device in L3 mode, with specific traffic control filters, the flowdissector can attempt to read Ethernet header information that does not exist. This leads to the...
CVE-2026-72345
A flaw was found in the Linux kernel's mlx5 LAG Link Aggregation Group driver. An off-by-one error in the mlx5lagcreatesinglefdb function's error rollback mechanism can lead to operations on uninitialized memory or a double-free condition. This could result in system instability or a denial of...