39550 matches found
CVE-2026-97583
In the Linux kernel, the following vulnerability has been resolved: afs: Clear stale peer app data after address list changes afsfsprobefileserver fetches the current endpoint state under server-fslock, but leaves oldalist as NULL. Consequently, afssetpeerappdata treats every address list...
EUVD-2026-86881
In the Linux kernel, the following vulnerability has been resolved: bnxten: Handle buffer allocation failure in bnxtrxringreset bnxtrxringreset frees the ring buffers and then reallocates them, ignoring the result. bnxtalloconerxring can fail in bnxtalloconetpainfodata, which returns -ENOMEM on t...
CVE-2026-97573 bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset()
In the Linux kernel, the following vulnerability has been resolved: bnxten: Handle buffer allocation failure in bnxtrxringreset bnxtrxringreset frees the ring buffers and then reallocates them, ignoring the result. bnxtalloconerxring can fail in bnxtalloconetpainfodata, which returns -ENOMEM on t...
CVE-2026-97573
The Linux kernel contains a vulnerability in the bnxt_en driver. The function bnxt_rx_ring_reset() fails to properly handle memory allocation errors when reallocating ring buffers. Specifically, bnxt_alloc_one_rx_ring() can return -ENOMEM during bnxt_alloc_one_tpa_info_data(), leaving the rxr->...
CVE-2026-97573 bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset()
In the Linux kernel, the following vulnerability has been resolved: bnxten: Handle buffer allocation failure in bnxtrxringreset bnxtrxringreset frees the ring buffers and then reallocates them, ignoring the result. bnxtalloconerxring can fail in bnxtalloconetpainfodata, which returns -ENOMEM on t...
CVE-2026-97572 bnxt_en: Propagate RX ring init failures in bnxt_init_nic()
In the Linux kernel, the following vulnerability has been resolved: bnxten: Propagate RX ring init failures in bnxtinitnic bnxtinitrxrings returns an error when bnxtalloconerxring fails, but bnxtinitnic discards that return value and calls bnxtinitchip, which enables TPA. If an allocation fails,...
CVE-2026-97571 bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc()
In the Linux kernel, the following vulnerability has been resolved: bnxten: Propagate TPA buffer allocation failures in bnxtqueuememalloc bnxtalloconetpainfodata returns -ENOMEM as soon as one allocation fails. This leaves the remaining rxr-rxtpa entries zeroed. bnxtqueuememalloc discards that...
CVE-2026-97572
The Linux kernel contains a vulnerability in the bnxt_en driver where bnxt_init_nic() fails to propagate errors from bnxt_init_rx_rings(). Specifically, if bnxt_alloc_one_rx_ring() fails, the return value is ignored, allowing bnxt_init_chip() to enable TPA (TCP Segmentation Offload) on a partiall...
EUVD-2026-86879
In the Linux kernel, the following vulnerability has been resolved: bnxten: Propagate TPA buffer allocation failures in bnxtqueuememalloc bnxtalloconetpainfodata returns -ENOMEM as soon as one allocation fails. This leaves the remaining rxr-rxtpa entries zeroed. bnxtqueuememalloc discards that...
CVE-2026-97571
The Linux kernel contains a vulnerability in the bnxt_en driver within the bnxt_queue_mem_alloc() function. The issue stems from bnxt_alloc_one_tpa_info_data() returning -ENOMEM upon a single allocation failure while leaving remaining rxr->rx_tpa[] entries zeroed. Because bnxt_queue_mem_alloc(...
CVE-2026-97571 bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc()
In the Linux kernel, the following vulnerability has been resolved: bnxten: Propagate TPA buffer allocation failures in bnxtqueuememalloc bnxtalloconetpainfodata returns -ENOMEM as soon as one allocation fails. This leaves the remaining rxr-rxtpa entries zeroed. bnxtqueuememalloc discards that...
CVE-2026-97572 bnxt_en: Propagate RX ring init failures in bnxt_init_nic()
In the Linux kernel, the following vulnerability has been resolved: bnxten: Propagate RX ring init failures in bnxtinitnic bnxtinitrxrings returns an error when bnxtalloconerxring fails, but bnxtinitnic discards that return value and calls bnxtinitchip, which enables TPA. If an allocation fails,...
CVE-2026-80514
The wpForo Forum WordPress plugin from 3.0.0 before 3.1.6 does not verify the source of client-supplied IP address headers before using them to key its per-visitor rate limit on paid AI requests, allowing unauthenticated attackers to bypass the limit by spoofing the header and exhaust the site...
CVE-2026-79233
A flaw was found in CustomTabs in Google Chrome on Android. A remote attacker could exploit a user interface UI misrepresentation vulnerability by crafting a malicious HTML page. This could allow the attacker to spoof the address bar, potentially deceiving users about the authenticity of a websit...
CVE-2026-87463
A flaw was found in chromium-browser. This incorrect authorization in the Certificate component allows a remote attacker to potentially spoof the address bar. This could lead to users being misled about the authenticity of a website...
CryptoClipGuard
🛡️ CryptoClipGuard CryptoClipGuard is a real-time clipboard hijack detector and shield for Windows. It protects cryptocurrency users by monitoring clipboard changes and preventing malicious software from replacing your copied crypto addresses. 🤔 What is Clipboard Hijacking? Clipboard hijacking is ...
OESA-2026-4106 rubygem-mail security update
A really Ruby Mail handler. Security Fixes: Affected versions of this package are vulnerable to Improper Validation of Syntactic Correctness of Input through qvaluedecode and bvaluedecode in lib/mail/utilities.rb. An attacker can make a display name or local part decode to a different address tha...
OESA-2026-4104 rubygem-mail security update
A really Ruby Mail handler. Security Fixes: Affected versions of this package are vulnerable to Improper Validation of Syntactic Correctness of Input through qvaluedecode and bvaluedecode in lib/mail/utilities.rb. An attacker can make a display name or local part decode to a different address tha...
OESA-2026-4105 rubygem-mail security update
A really Ruby Mail handler. Security Fixes: Affected versions of this package are vulnerable to Improper Validation of Syntactic Correctness of Input through qvaluedecode and bvaluedecode in lib/mail/utilities.rb. An attacker can make a display name or local part decode to a different address tha...
CLEANSTART-2026-IG26427 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...
CVE-2026-56854 affects multiple packages. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references for individual vulnerability...