429 matches found
CVE-2026-80927 timekeeping: Check the return value of tk_get_aux_ts64 in __do_adjtimex()
In the Linux kernel, the following vulnerability has been resolved: timekeeping: Check the return value of tkgetauxts64 in doadjtimex If the auxiliary clock is disabled during tkgetauxts64 but is enabled before tks-clockvalid is checked, then uninitialized stackdata will be used in the calculatio...
SUSE CVE-2026-72396
In the Linux kernel, the following vulnerability has been resolved: hwmon: adm1275: Prevent reading uninitialized stack While adding support for the ROHM BD127X0 hot-swap controllers, sashiko reported an error in device-name comparison, which can lead to reading uninitialized stack memory. Quotin...
CVE-2026-16827
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to the use of an uninitialized stack pointer...
CVE-2026-16827
IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 have a denial-of-service flaw from an uninitialized stack pointer; CVSS 5.9 (Medium), network attack, high complexity. IBM support page referenced. No exploitation details provided in documents.
CVE-2026-16827 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to the use of an uninitialized stack pointer...
EUVD-2026-62713
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to the use of an uninitialized stack pointer...
CVE-2026-16827: Use of Uninitialized Resource
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to the use of an uninitialized stack pointer...
PT-2026-78593
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A remote attacker could cause a denial of service due to the use of an uninitialized stack pointer, which is a memory location that has not been assigned a value before bein...
CVE-2026-72150
A flaw was found in the Linux kernel's sunrpc component. The xprtcreateargs structure is allocated on the stack without initialization in rpcsysfsxprtswitchaddxprtstore. This can lead to critical fields containing uninitialized stack garbage. Exploiting this vulnerability can result in a kernel...
Linux Distros Unpatched Vulnerability : CVE-2026-72396
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: adm1275: Prevent reading uninitialized stack While adding support for the ROHM BD127X0 hot-swap controllers, sashiko reported an error in device-name...
CVE-2026-72396
In the Linux kernel, the following vulnerability has been resolved: hwmon: adm1275: Prevent reading uninitialized stack While adding support for the ROHM BD127X0 hot-swap controllers, sashiko reported an error in device-name comparison, which can lead to reading uninitialized stack memory. Quotin...
CVE-2026-72396
In the Linux kernel, the following vulnerability has been resolved: hwmon: adm1275: Prevent reading uninitialized stack While adding support for the ROHM BD127X0 hot-swap controllers, sashiko reported an error in device-name comparison, which can lead to reading uninitialized stack memory. Quotin...
CVE-2026-72479
CVE-2026-72479 affects the Linux kernel IIO MMA8452 accelerometer driver. The issue occurs in mma8452_read() when an I2C read call to i2c_smbus_read_i2c_block_data() fails but mma8452_set_runtime_pm_state() succeeds; in that path, mma8452_read() returns 0, causing mma8452_read_raw() to use an uni...
CVE-2026-72396
The CVE-2026-72396 issue affects the Linux kernel hwmon adm1275 component and was resolved by preventing an out-of-bounds read of uninitialized stack memory. The bug occurred during support for ROHM BD127X0 hot-swap controllers, where i2c_smbus_read_block_data() could write up to 32 bytes into bl...
CVE-2026-72479: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: iio: accel: mma8452: handle I2C read errors in mma8452read Currently, If i2csmbusreadi2cblockdata fails but mma8452setruntimepmstate succeeds, mma8452read returns 0. As a result, the caller mma8452readraw assumes the read was...
CVE-2026-72396: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: hwmon: adm1275: Prevent reading uninitialized stack While adding support for the ROHM BD127X0 hot-swap controllers, sashiko reported an error in device-name comparison, which can lead to reading uninitialized stack memory. Quotin...
CLSA-2026-1786471115 php: Fix of 2 CVEs
CVE-2026-7260: fix stack exhaustion on circular symlink chains in phar archives GHSA-vc5h-9ppw-p5f3 - CVE-2026-9672: fix uninitialized stack read in the bundled libgd GIF LZW decoder...
PT-2026-68077
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The nh res bucket migrate function passes an uninitialized netlink ext ack to call nexthop res bucket notifiers. If nh notifier res bucket info init fails, such as when kzalloc returns...
CVE-2026-62433 correct buffer checks for DM_OP hypercalls
Parts of the DMOP handling code assumes the caller has provided the required number of buffers for the given operation without any checking being done. As a result, certain operations might access stack rubble as structures are possibly uninitialized...
CVE-2026-63967
A flaw was found in the Linux kernel's stlsm6dsx driver. This vulnerability occurs in the tagged FIFO First-In, First-Out buffer path, where a buffer on the stack is not properly initialized. A local attacker could exploit this by reading uninitialized memory from the kernel stack, leading to...