CVE-2026-68446

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmwsurfacemetadata::arraysize This field comes from userspace and should be validated against specific limits depending on which Shader Model SM is available...

CVE-2026-68446 drm/vmwgfx: Validate vmw_surface_metadata::array_size

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmwsurfacemetadata::arraysize This field comes from userspace and should be validated against specific limits depending on which Shader Model SM is available...

CVE-2026-68445 drm/vc4: Prevent shader BO mappings from becoming writable

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Prevent shader BO mappings from becoming writable vc4gemobjectmmap rejects a writable mapping of a validated shader BO, but leaves VMMAYWRITE set. Userspace can map the BO read-only and then turn it writable with mprotec...

CVE-2026-68445 drm/vc4: Prevent shader BO mappings from becoming writable

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Prevent shader BO mappings from becoming writable vc4gemobjectmmap rejects a writable mapping of a validated shader BO, but leaves VMMAYWRITE set. Userspace can map the BO read-only and then turn it writable with mprotec...

EUVD-2026-57020

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Prevent shader BO mappings from becoming writable vc4gemobjectmmap rejects a writable mapping of a validated shader BO, but leaves VMMAYWRITE set. Userspace can map the BO read-only and then turn it writable with mprotec...

CVE-2026-68445

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Prevent shader BO mappings from becoming writable vc4gemobjectmmap rejects a writable mapping of a validated shader BO, but leaves VMMAYWRITE set. Userspace can map the BO read-only and then turn it writable with mprotec...

EUVD-2026-57039

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate minimum PDU size for transform requests The receive path applies the minimum SMB2 PDU size check only when ProtocolId is SMB2PROTONUMBER. A packet carrying SMB2TRANSFORMPROTONUM bypasses the check even when the...

PT-2026-71166

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Insufficient input validation allows a remote authenticated attacker to execute arbitrary Control Language commands. Recommendations At the moment, there is no information about a newer version that...

PT-2026-71095

Vulnerability-Lookup contains a server-side request forgery SSRF vulnerability in the remote-instance synchronization functionality. Remote instance addresses were validated only for basic URL syntax before being stored, while the synchronization worker later dereferenced these addresses using...

PT-2026-71362

The web interface of the affected device relies on the HTTP referrer header as part of request validation. Requests containing empty Referer value, or omitting the Referer header entirely, may be accepted and processed due to insufficient validation logic. Successful exploitation may allow an...

EUVD-2025-210713

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped...

CVE-2025-59324

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped...

ROS-20260812-73-0029

The vulnerability in Wireshark is related to the lack of checks on input data for cyclic operations. Exploiting this vulnerability can allow a hacker to cause a service failure...

PT-2026-71299

Name of the Vulnerable Software and Affected Versions IBM Security Verify Access versions 10.0 through 10.0.9.2 IBM Verify Identity Access versions 11.0 through 11.0.3 IBM Verify Identity Access Container versions 11.0 through 11.0.3 Description Improper validation of user supplied input may allo...

PT-2026-71071

Name of the Vulnerable Software and Affected Versions CryptoPro Secure Disk for Bitlocker versions prior to 7.7.4 Description The software fails to validate the integrity of the DataStore, which is a non-partitioned filesystem used to store configuration and cryptographic details. An attacker can...

PT-2026-71191

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper validation of input size may allow a remote attacker to cause a denial of service. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

PT-2026-71072

Name of the Vulnerable Software and Affected Versions CryptoPro Secure Disk for Bitlocker versions prior to 7.7.4 Description The software fails to properly validate LUKS Linux Unified Key Setup encryption. When encryption is detected, the system skips all CryptoPro file integrity checks, which a...

CVE-2025-59324

CVE-2025-59324 affects CPSD CryptoPro Secure Disk for Bitlocker prior to v7.7.4. The vulnerability is that the component fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped. This can undermine integrity verification for protect...

The vulnerability of the Linux operating system’s kernel, related to incorrect checking of the specified index, position, or offset in input data, allows a perpetrator to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to the improper checking of the specified index, position, or offset in input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the bpf component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the bpf component in the Linux operating system’s kernel is related to insufficient checking of the type of input data provided. Exploiting this vulnerability can allow an attacker to cause a service failure...