3332 matches found
Linux kernel BPF verifier Heap Buffer Overflow DoS
The vulnerability of the checkmemaccess function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for the Linux operating system’s kernel, relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
SUSE CVE-2026-72111
In the Linux kernel, the following vulnerability has been resolved: bpf: Reset register bounds before narrowing retval range in checkmemaccess When the BPF verifier processes a context load of an LSM hook return value, it calls markregs32range to narrow the register to the hook's valid range...
Linux kernel BPF verifier Heap Buffer Overflow DoS
The vulnerability of the computeinsnlive regs function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter for Linux operating systems, is related to incorrect calculations. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...
SUSE CVE-2026-74338
In the Linux kernel, the following vulnerability has been resolved: bpf: Reject sleepable BPFLSMCGROUP programs at load time The cgroup shim runs under rcureadlockdontmigrate, so we should not attach any sleepable BPF programs there. Add support to the verifier to explicitly reject attempts to lo...
SUSE CVE-2026-80533
In the Linux kernel, the following vulnerability has been resolved: xfs: don't walk off the end of a null sc-sa.agibp in AGI repair LOLLM noticed a longstanding bug where xrepiunlinkwalkondiskbucket tries to walk ragi-sc-sa.agibp to rebuild the unlinked inode lists. Unfortunately, it's possible f...
BPF Kernel Heap Buffer Overflow DoS
The vulnerability of the scalarbyteswap function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter for Linux kernel, relates to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
CVE-2026-80533
In the Linux kernel, the following vulnerability has been resolved: xfs: don't walk off the end of a null sc-sa.agibp in AGI repair LOLLM noticed a longstanding bug where xrepiunlinkwalkondiskbucket tries to walk ragi-sc-sa.agibp to rebuild the unlinked inode lists. Unfortunately, it's possible f...
UBUNTU-CVE-2026-80533
In the Linux kernel, the following vulnerability has been resolved: xfs: don't walk off the end of a null sc-sa.agibp in AGI repair LOLLM noticed a longstanding bug where xrepiunlinkwalkondiskbucket tries to walk ragi-sc-sa.agibp to rebuild the unlinked inode lists. Unfortunately, it's possible f...
CVE-2026-80533
CVE-2026-80533 is a Linux kernel bug in the XFS filesystem's AGI repair path. The function xrep_iunlink_walk_ondisk_bucket walks ragi->sc->sa.agi_bp to rebuild unlinked inode lists, but agi_bp can be null if the buffer verifier fails, causing an out-of-bounds walk. The fix substitutes ragi-...
EUVD-2026-66448
In the Linux kernel, the following vulnerability has been resolved: xfs: don't walk off the end of a null sc-sa.agibp in AGI repair LOLLM noticed a longstanding bug where xrepiunlinkwalkondiskbucket tries to walk ragi-sc-sa.agibp to rebuild the unlinked inode lists. Unfortunately, it's possible f...
SUSE CVE-2026-68462
In the Linux kernel, the following vulnerability has been resolved: bpf: Reject negative const offsets for buffer pointers The verifier rejects variable offsets for PTRTOTPBUFFER and PTRTOBUF accesses, but it currently accepts a constant negative offset produced by pointer arithmetic. Commit...
Linux Distros Unpatched Vulnerability : CVE-2026-80533
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: don't walk off the end of a null sc-sa.agibp in AGI repair LOLLM noticed a longstanding bug where xrepiunlinkwalkondiskbucket tries to walk ragi-sc-sa.agib...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098777)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098777 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Forget ranges when refining tnum after JSET Syzbot reported a kernel warning due to a range...
PT-2026-82149
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bug exists in the XFS file system during AGI Allocation Group Inode repair. The function xrep iunlink walk ondisk bucket attempts to use sc-sa.agi bp to rebuild unlinked inode lists...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098863)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098863 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Check the helper function is valid in gethelperproto kernel test robot reported verifier bug...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098979)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098979 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Prevent tail call between progs attached to different hooks bpf progs can be attached to...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098676)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098676 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: support non-r10 register spill/fill to/from stack in precision tracking Use instruction jump...
CVE-2026-71511
Dolibarr before 24.0.0 contains a sensitive data exposure vulnerability in its Members REST API . Authenticated users with member-read privileges can query individual member or member list endpoints and retrieve bcrypt password verifiers that are not filtered by the base API serializer or the Mem...
CVE-2026-71511 Dolibarr < 24.0.0 Members REST API Sensitive Data Exposure via Member Endpoints
Dolibarr before 24.0.0 contains a sensitive data exposure vulnerability in the Members REST API that allows authenticated attackers with member-read rights to retrieve bcrypt password verifiers by querying member endpoints. Attackers can call the individual member or member list endpoints to obta...
CVE-2026-9728
CVE-2026-9728 is a time-of-check/time-of-use (TOCTOU) race condition in the Zephyr RTOS userspace mailbox subsystem. The syscall verifier z_vrfy_mbox_send() in drivers/mbox/mbox_handlers.c validates msg->data/msg->size by reading them directly from live userspace memory, then forwards the o...