Lucene search
+L

1761 matches found

osv_cve
osv_cve
•added 2026/10/06 8:45 a.m.•45 views

CVE-2026-98263 ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt712-sdca-dmic: fix uninitialized streamconfig-type streamconfig is not initialized before being passed to sdwstreamaddslave. The type field may contain garbage and is later copied to stream-type by sdwconfigstream...

5.9AI score0.00168EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/10/06 8:45 a.m.•14 views

EUVD-2026-93191

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt712-sdca-dmic: fix uninitialized streamconfig-type streamconfig is not initialized before being passed to sdwstreamaddslave. The type field may contain garbage and is later copied to stream-type by sdwconfigstream...

5.9AI score0.00168EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2026/10/06 8:45 a.m.•16 views

CVE-2026-98263

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt712-sdca-dmic: fix uninitialized streamconfig-type streamconfig is not initialized before being passed to sdwstreamaddslave. The type field may contain garbage and is later copied to stream-type by sdwconfigstream...

6.1AI score0.00168EPSS
SaveExploits0
osv_cve
osv_cve
•added 2026/10/06 8:45 a.m.•13 views

CVE-2026-98240 net: ip_tunnel: initialize `options_len` before referencing options

In the Linux kernel, the following vulnerability has been resolved: net: iptunnel: initialize optionslen before referencing options The following command triggers a kernel panic: ip link add d0 type dummy; ip link set d0 up ip route add 10.30.0.0/16 \ encap ip id 300 geneveopts 4660:66:11223344 d...

6AI score
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•9 views

CVE-2026-98263: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt712-sdca-dmic: fix uninitialized streamconfig-type streamconfig is not initialized before being passed to sdwstreamaddslave. The type field may contain garbage and is later copied to stream-type by sdwconfigstream...

5.9AI score0.00168EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/10/06 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-98263

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: codecs: rt712-sdca-dmic: fix uninitialized streamconfig-type streamconfig is not initialized before being passed to sdwstreamaddslave. The type field may...

5.9AI score0.00168EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•11 views

PT-2026-106592

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the ASOC codecs component specifically affecting the rt712-sdca-dmic. The stream config structure is not initialized before being passed to the sdw stream add slave...

8.8CVSS5.9AI score0.00501EPSS
SaveExploits1References230
SUSE CVE
SUSE CVE
•added 2026/10/05 11:56 p.m.•6 views

SUSE CVE-2026-66859

NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

8.7CVSS5.9AI score0.00316EPSS
SaveExploits0References3
AstraLinux
AstraLinux
•added 2026/10/05 11:39 a.m.•17 views

Astra Linux – Vulnerability in libstb

stbimage is a single-file library licensed under MIT, used for processing images. If stbiloadgifmain in stbiloadgiffrommemory fails, it returns a null pointer and may leave the z variable uninitialized. If the caller also sets the vertical flipping flag, the process continues by calling...

7.5CVSS7AI score0.01269EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/10/05 11:39 a.m.•13 views

Astra Linux – Vulnerability in Linux 5.10

Ubuntu Linux 6.8 contains SAUCE patches that may involve the use of an uninitialized variable in the AppArmor AFINET/AFINET6 socket mediation code. This bug can be triggered by a non-privileged local user, and it could lead to incorrect, fine-grained mediation of network sockets...

3.3CVSS7.7AI score0.00094EPSS
SaveExploits0References1
AstraLinux
AstraLinux
•added 2026/10/05 11:39 a.m.•8 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: fixed the issue where an uninitialized rtpaddr was used in processsdp. The processsdp function declares a union nfinetaddr rtpaddr on the stack and passes it to the nfnatsip sdpsession hook after...

5.5CVSS5.7AI score0.0012EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•14 views

CVE-2026-55280: Use of Uninitialized Variable

In multiple locations, there is a possible out-of-bounds write due to uninitialized data. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.8CVSS6AI score0.00231EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/03 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2026-66859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users ar...

8.7CVSS5.9AI score0.00316EPSS
SaveExploits0References3
osv_azl
osv_azl
•added 2026/10/02 1:17 p.m.•26 views

AZL-106590 CVE-2026-66859 affecting package thrift 0.24.0-1

NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

8.7CVSS5.9AI score0.00316EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/02 1:17 p.m.•21 views

CVE-2026-66859

NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

8.7CVSS0.00316EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/10/02 1:17 p.m.•19 views

DEBIAN-CVE-2026-66859

NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

8.7CVSS5.9AI score0.00316EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/10/02 1:17 p.m.•17 views

CVE-2026-66859

NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

8.7CVSS5.9AI score0.00316EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2026/10/02 1:17 p.m.•25 views

UBUNTU-CVE-2026-66859

NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

8.7CVSS5.9AI score0.00316EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/10/02 12:23 p.m.•16 views

CVE-2026-66859 Apache Thrift: c_glib multiplexed processor crashes on a message it cannot route

NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

8.7CVSS5.9AI score0.00316EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/02 12:23 p.m.•48 views

CVE-2026-66859 Apache Thrift: c_glib multiplexed processor crashes on a message it cannot route

NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

8.7CVSS0.00316EPSS
SaveExploits0References2
Rows per page
Query Builder