556802 matches found
CVE-2026-68434 serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms
In the Linux kernel, the following vulnerability has been resolved: serial: 8250mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms Commit b1b4efea05a5 "serial: 8250mid: Disable DMA for selected platforms" replaced the dnvboard setup and exit callbacks with PTRIFfalse, ..., whic...
CVE-2026-68434
The CVE affects Linux kernel 8250_mid serial driver on Denverton (DNV), Ice Lake Xeon D (ICX-D) and Snowridge (SNR) platforms. Root cause: NULL function pointer dereference after changing setup/exit callbacks to PTR_IF(false, ...) without NULL checks in mid8250_probe() and mid8250_remove(), leadi...
CVE-2026-68434 serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms
In the Linux kernel, the following vulnerability has been resolved: serial: 8250mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms Commit b1b4efea05a5 "serial: 8250mid: Disable DMA for selected platforms" replaced the dnvboard setup and exit callbacks with PTRIFfalse, ..., whic...
EUVD-2026-57042
In the Linux kernel, the following vulnerability has been resolved: serial: 8250mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms Commit b1b4efea05a5 "serial: 8250mid: Disable DMA for selected platforms" replaced the dnvboard setup and exit callbacks with PTRIFfalse, ..., whic...
CVE-2026-68434
In the Linux kernel, the following vulnerability has been resolved: serial: 8250mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms Commit b1b4efea05a5 "serial: 8250mid: Disable DMA for selected platforms" replaced the dnvboard setup and exit callbacks with PTRIFfalse, ..., whic...
CVE-2026-68429 drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe()
In the Linux kernel, the following vulnerability has been resolved: drm/dpmst: Handle torn-down topology gracefully in drmdpmsttopologyqueueprobe A hotplug or link-loss event can tear down the MST topology setting mgr-mststate = false and mgr-mstprimary = NULL concurrently with a caller invoking...
CVE-2026-68429 drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe()
In the Linux kernel, the following vulnerability has been resolved: drm/dpmst: Handle torn-down topology gracefully in drmdpmsttopologyqueueprobe A hotplug or link-loss event can tear down the MST topology setting mgr-mststate = false and mgr-mstprimary = NULL concurrently with a caller invoking...
EUVD-2026-57037
In the Linux kernel, the following vulnerability has been resolved: drm/dpmst: Handle torn-down topology gracefully in drmdpmsttopologyqueueprobe A hotplug or link-loss event can tear down the MST topology setting mgr-mststate = false and mgr-mstprimary = NULL concurrently with a caller invoking...
CVE-2026-68429
The CVE-2026-68429 issue in the Linux kernel’s DRM MST path arises when a hotplug/link-loss event tears down the MST topology (mgr->mst_state = false; mgr->mst_primary = NULL) concurrently with a caller invoking drm_dp_mst_topology_queue_probe(). The race is observed with the check occurrin...
CVE-2026-68429
In the Linux kernel, the following vulnerability has been resolved: drm/dpmst: Handle torn-down topology gracefully in drmdpmsttopologyqueueprobe A hotplug or link-loss event can tear down the MST topology setting mgr-mststate = false and mgr-mstprimary = NULL concurrently with a caller invoking...
CVE-2026-68429
In the Linux kernel, the following vulnerability has been resolved: drm/dpmst: Handle torn-down topology gracefully in drmdpmsttopologyqueueprobe A hotplug or link-loss event can tear down the MST topology setting mgr-mststate = false and mgr-mstprimary = NULL concurrently with a caller invoking...
SUSE CVE-2026-6791
When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...
PT-2026-70972
Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.7.7 Description A remote attack can trigger a reachable assertion within the CER Handler component. The issue resides in the diam log func function located in the lib/diameter/common/init.c file. Recommendations...
PT-2026-70948
In the Linux kernel, the following vulnerability has been resolved: serial: 8250 mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms Commit b1b4efea05a5 "serial: 8250 mid: Disable DMA for selected platforms" replaced the dnv board setup and exit callbacks with PTR IFfalse, ...,...
PT-2026-70955
In the Linux kernel, the following vulnerability has been resolved: net/sched: Handle TC ACT REDIRECT from qdisc filter chains When a TC filter attached to a qdisc filter chain returns TC ACT REDIRECT ex: via an eBPF program calling bpf redirect or an act bpf action, the redirect was silently los...
PT-2026-71364
Name of the Vulnerable Software and Affected Versions OpenStack Designate versions prior to 22.0.2 Description The mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. If two zones with the same name exist across different pools, the lookup fails, leading th...
PT-2026-70980
Name of the Vulnerable Software and Affected Versions Zephyr affected versions not specified Description The Intel ALH digital-audio-interface driver contains an issue where the dai alh get properties function in drivers/dai/intel/alh/alh.c fails to validate the range of the caller-supplied strea...
PT-2026-71360
Name of the Vulnerable Software and Affected Versions search-v2-operator affected versions not specified Description A flaw in the search-v2-operator component allows a user with specific administrative permissions on a managed cluster to inject arbitrary configuration data. This is possible...
PT-2026-71342
Russh is a Rust SSH client & server library. Prior to 0.62.4, a malicious SSH server can crash a russh client session with a malformed KEX ECDH REPLY containing a server ephemeral value that is not 32 bytes long. The client-side Curve25519Kex::compute shared secret function in...
PT-2026-71145
Name of the Vulnerable Software and Affected Versions Semaphore UI versions prior to 2.18.17 Semaphore UI versions prior to 2.19.5-beta2 Description Improper handling of the git url variable allows a project Manager or Owner to execute arbitrary OS commands within the server process. This occurs...