CVE-2026-12235 Out-of-bounds write in Xtensa llext PLT relocation from malformed ELF (CWE-787)

The Linkable Loadable Extensions llext subsystem mis-handles PLT/RELA relocation entries when linking a relocatable partially-linked ELF extension. In llextlinkplt subsys/llext/llextlink.c, the relocatable branch tgt != NULL, the path used for Xtensa relocatable objects computed the patch address...

EUVD-2026-57070

The Linkable Loadable Extensions llext subsystem mis-handles PLT/RELA relocation entries when linking a relocatable partially-linked ELF extension. In llextlinkplt subsys/llext/llextlink.c, the relocatable branch tgt != NULL, the path used for Xtensa relocatable objects computed the patch address...

CVE-2026-12235 Out-of-bounds write in Xtensa llext PLT relocation from malformed ELF (CWE-787)

The Linkable Loadable Extensions llext subsystem mis-handles PLT/RELA relocation entries when linking a relocatable partially-linked ELF extension. In llextlinkplt subsys/llext/llextlink.c, the relocatable branch tgt != NULL, the path used for Xtensa relocatable objects computed the patch address...

CVE-2026-12235

The CVE describes an out-of-bounds write in the Xtensa llext PLT relocation path. Specifically, during relocation in llext_link_plt(), the patch address is computed using rela.r_offset without validating it, allowing a crafted RELA entry with a large r_offset to write outside the extension’s text...

GHSA-MP77-8PGF-MVPR vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-19170 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-71870 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-G7PX-3Q98-P26J vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-19160 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-19141 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-QH77-M293-98R7 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-J6G7-XQFG-X7XX vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-G96H-6MVM-96FC vulnerabilities

Vulnerabilities for packages: chromium...

kernel: dm log: fix out-of-bounds write due to region_count overflow

A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

EUVD-2026-57005

The distributed Mira Android APK v4.5.15.4 allows an attacker read/write access to reproductive health profiles from internet connected hosts, which could result in forgery, deletion, or destruction of health information...

CVE-2026-68440

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...

DEBIAN-CVE-2026-68440

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...

CVE-2026-68440 net: txgbe: fix heap overflow when reading module EEPROM

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...

CVE-2026-68440

CVE-2026-68440 affects the Linux kernel txgbe driver: when reading module EEPROM via txgbe_read_eeprom_hostif(), the function copies round_up(length, 4) bytes into an ethtool caller buffer allocated with exactly length bytes. If length is not 4-byte aligned, this causes an out-of-bounds write (he...