121427 matches found
The vulnerability of the icmpv6_rcv() function in the net/ipv6/icmp.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the icmpv6rcv function in the net/ipv6/icmp.c module of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the qp_send_message() function in the drivers/crypto/hisilicon/sec2/sec_crypto.c file of the Linux kernel cryptographic accelerator driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the qpsendmessage function in the drivers/crypto/hisilicon/sec2/seccrypto.c file of the Linux kernel cryptographic accelerator driver relates to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow a remote attacker to...
The vulnerability of the sctp_sock_dump_one() function in the net/sctp/diag.c module of the Linux operating system’s SCTP (Stream Control Transmission Protocol) kernel allows a attacker to gain access to protected information or cause service failures.
The vulnerability of the sctpsockdumpone function in the net/sctp/diag.c module of the Linux operating system’s SCTP Stream Control Transmission Protocol kernel is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to...
Fedora 43 : chromium (2026-ee60d45695)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ee60d45695 advisory. - Update to 152.0.7977.75 CVE-2026-84353: Use after free in Shared Tab Groups CVE-2026-84352: Use after free in WebGL CVE-2026-84354: Incorrect...
Linux Distros Unpatched Vulnerability : CVE-2026-80767
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: sensor: custom: Fix use-after-free in enablesensor enablesensorstore can call setpowerreportstate, which dereferences sensorinst-powerstate and...
Linux Distros Unpatched Vulnerability : CVE-2026-80826
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: c67x00: fix use-after-free in c67x00addisourb When TD creation fails for the last packet of an isochronous URB, c67x00addisourb gives the URB back before...
Linux Distros Unpatched Vulnerability : CVE-2026-80824
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: usbfs: fix use-after-free of usbdevice in usbdevrelease usbdevrelease drops its reference to the struct usbdevice before draining the list of completed asy...
Linux Distros Unpatched Vulnerability : CVE-2026-80830
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: core: Add lock to usbwakeupnotification Add a spin lock to usbwakeup notification to prevent a race condition with dereferencing freed memory. This could b...
Linux Distros Unpatched Vulnerability : CVE-2026-80737
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: amba-pl011: synchronize DMA teardown dmaengineterminateall does not wait for a running callback, so the TX callback can still touch the TX buffer after ...
Linux Distros Unpatched Vulnerability : CVE-2026-80849
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/tcp-ao: fix use-after-free of currentkey on reconnect to another peer tcpinboundaohash is called before bhlocksocknested is taken, with only rcureadlock hel...
Linux Distros Unpatched Vulnerability : CVE-2026-80726
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its pare...
Linux Distros Unpatched Vulnerability : CVE-2026-80770
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: nintendo: stop device IO before hidhwstop on probe failure nintendohidprobe calls hiddeviceiostart before joyconinit and joyconledscreate. If either fails,...
Linux Distros Unpatched Vulnerability : CVE-2026-80764
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcievent: fix LE list UAF on reset hciccreset clears the LE accept and resolving lists without taking hdev-lock. Other command-complete handlers...
Linux Distros Unpatched Vulnerability : CVE-2026-80782
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: magicmouse: do not keep a stale msc-input if no input is claimed magicmouseinputmapping caches the first hidinput's inputdev in msc-input while the report...
Linux Distros Unpatched Vulnerability : CVE-2026-80766
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: uclogic: fix use-after-free of inrangetimer on remove uclogicremove cancels the pen in-range timer and then stops the device:...
Linux Distros Unpatched Vulnerability : CVE-2026-85197
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libsoup. A malicious HTTP/2 server or a Man-in-the-Middle MITM attacker can exploit a heap use-after-free vulnerability in the HTTP/2 client...
UBUNTU-CVE-2026-80732
In the Linux kernel, the following vulnerability has been resolved: ata: patasl82c105: fix bridge revision use-after-free pcigetslot returns a referenced PCI device. Commit 44c10138fd4b "PCI: Change all drivers to use pcidevice-revision" replaced a configuration-space read with direct access to t...
PT-2026-85728
In the Linux kernel, the following vulnerability has been resolved: tcp: fix AO info use-after-free in tcp ao connect init tcp v4 connect adds a SYN-SENT socket to the ehash before calling tcp connect. If TCP-AO is configured, tcp connect first verifies that a key matches the peer and the bound...
MiracleLinux 8 : nodejs:22 (AXSA:2026-1753:01)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1753:01 advisory. nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion vi...
Linux Distros Unpatched Vulnerability : CVE-2026-80857
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: wait for FRFINISHED on abortonkill to prevent use-after-free The abortonkill path in requestwaitanswer calls fuseabortconn and returns without waiting for...