SUSE CVE-2026-64594

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: initialize resetwork at allocation time ffsfskillsb unconditionally calls cancelworksync on ffs-resetwork when a functionfs instance is unmounted: ffsdataresetffs; cancelworksync&ffs-resetwork; However...

SUSE CVE-2026-64598

In the Linux kernel, the following vulnerability has been resolved: smb/client: Fix error code in smb2aeadreqalloc The "numsgs" variable is a u32 so "ERRPTRnumsgs" doesn't work. We would have to do something similar to the previous line where it's cast to int and then long. However, it's simpler ...

DEBIAN-CVE-2026-70638

llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android JNI wrapper where the new1batch function multiplies sizeofllamaseqid by an attacker-controlled nseqmax parameter without overflow validation, causing heap buffer allocation to wrap and allocate...

CVE-2026-43627

llama.cpp builds b1283 through b9058 contain an integer overflow vulnerability in the llamabatchinit function where unchecked multiplications in malloc calls can wrap past INT32MAX when computing allocation sizes. Attackers can pass specially crafted parameters to trigger integer overflow, causin...

CVE-2026-43627 llama.cpp b1283–b9058 Integer Overflow in llama_batch_init() Function

llama.cpp builds b1283 through b9058 contain an integer overflow vulnerability in the llamabatchinit function where unchecked multiplications in malloc calls can wrap past INT32MAX when computing allocation sizes. Attackers can pass specially crafted parameters to trigger integer overflow, causin...

CVE-2026-43627 llama.cpp b1283–b9058 Integer Overflow in llama_batch_init() Function

llama.cpp builds b1283 through b9058 contain an integer overflow vulnerability in the llamabatchinit function where unchecked multiplications in malloc calls can wrap past INT32MAX when computing allocation sizes. Attackers can pass specially crafted parameters to trigger integer overflow, causin...

CVE-2026-43627

The CVE-2026-43627 issue affects llama.cpp (b1283–b9058) in the llama_batch_init() function, where unchecked multiplications in malloc() cause allocation sizes to wrap past INT32_MAX. This leads to heap corruption and can potentially enable arbitrary code execution through subsequent batch operat...

CVE-2026-43622 llama.cpp b1886–b7445 Double Free via llama-android.cpp

llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper where new1batch allocates memory using malloc while free1batch deallocates it using the C++ delete operator, causing heap metadata corruption. Attackers can trigger this memory management...

CVE-2026-66733

Sonic 3 A.I.R. before commit 2492d18 contains an unbounded memory allocation vulnerability in ReceivedPacketCache::enqueuePacket that allows unauthenticated remote attackers to crash the server process by sending a crafted UDP packet with mUniquePacketID set to the maximum uint32 value. The...

CVE-2026-66733

Sonic 3 A.I.R. before commit 2492d18 contains an unbounded memory allocation vulnerability in ReceivedPacketCache::enqueuePacket that allows unauthenticated remote attackers to crash the server process by sending a crafted UDP packet with mUniquePacketID set to the maximum uint32 value. The...

CVE-2026-66733

Sonic 3 A.I.R. is affected by an unbounded memory allocation vulnerability in ReceivedPacketCache::enqueuePacket() prior to commit 2492d18. The mUniquePacketID field is read directly from the UDP wire-format header without bounds checking, causing the server to allocate one CacheItem per missing ...

CVE-2026-66733 Sonic 3 A.I.R. Unbounded Memory Allocation DoS via ReceivedPacketCache

Sonic 3 A.I.R. before commit 2492d18 contains an unbounded memory allocation vulnerability in ReceivedPacketCache::enqueuePacket that allows unauthenticated remote attackers to crash the server process by sending a crafted UDP packet with mUniquePacketID set to the maximum uint32 value. The...

CVE-2026-64576

A flaw was found in the Linux kernel. During nexthop resolution, an uninitialized variable is used if a memory allocation fails. This can lead to the system attempting to access uninitialized stack memory, causing a general protection fault and a kernel panic. This vulnerability results in a Deni...

SUSE-SU-2026:3515-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issue - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712...

CVE-2026-64579

A flaw was found in the Linux kernel's xfrm policy component. An issue in the xfrmhashrebuild function, specifically with the preallocation of inexact policy bins, can lead to memory allocation failures under memory pressure. This failure can corrupt internal data structures, allowing a local...

CVE-2026-64599

In the Linux kernel, the following vulnerability has been resolved: crypto: amlogic - avoid double cleanup in mesoncryptoprobe When mesonallocatechanlist fails after a partial allocation, it already unwinds the allocated chanlist state through its local error path. mesoncryptoprobe then jump to...

UBUNTU-CVE-2026-64599

In the Linux kernel, the following vulnerability has been resolved: crypto: amlogic - avoid double cleanup in mesoncryptoprobe When mesonallocatechanlist fails after a partial allocation, it already unwinds the allocated chanlist state through its local error path. mesoncryptoprobe then jump to...

CVE-2026-64599 crypto: amlogic - avoid double cleanup in meson_crypto_probe()

In the Linux kernel, the following vulnerability has been resolved: crypto: amlogic - avoid double cleanup in mesoncryptoprobe When mesonallocatechanlist fails after a partial allocation, it already unwinds the allocated chanlist state through its local error path. mesoncryptoprobe then jump to...

CVE-2026-64599

In the Linux kernel, the following vulnerability has been resolved: crypto: amlogic - avoid double cleanup in mesoncryptoprobe When mesonallocatechanlist fails after a partial allocation, it already unwinds the allocated chanlist state through its local error path. mesoncryptoprobe then jump to...

EUVD-2026-53786

In the Linux kernel, the following vulnerability has been resolved: crypto: amlogic - avoid double cleanup in mesoncryptoprobe When mesonallocatechanlist fails after a partial allocation, it already unwinds the allocated chanlist state through its local error path. mesoncryptoprobe then jump to...