1177 matches found
kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access
A flaw was found in the Linux kernel's mana network driver. In Confidential Virtual Machines VMs, a missing bounds check when processing network events can allow a malicious hardware component or a compromised VM to write data outside of an intended memory region. This out-of-bounds access could...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: handle extreme intervals in damonhotscore Three issues in damonhotscore have been fixed due to improper handling of user-defined extreme zero or excessively high monitoring intervals. When the user sets the...
CVE-2026-89814
A flaw was found in the Linux kernel's drm/amdgpu component. This vulnerability occurs when a graphics ring is not assigned to a partition, leading to an out-of-bounds array access during SDMA submissions. A local attacker could potentially exploit this to cause a system crash, resulting in a...
CVE-2026-90025
A flaw was found in the Linux kernel's USB Type-C DisplayPort UCSI displayport driver. An attacker with physical proximity or control over a connected USB-C device could provide a specially crafted response from the Port Partner Manager PPM. This invalid response could cause an out-of-bounds arra...
CLEANSTART-2025-GY66443 malformed input file can lead to a segfault due to an out of bounds array access in raptor_xml_writer_start_element_common
Security vulnerability affects the raptor2 package. A malformed input file can lead to a segfault due to an out of bounds array access in raptorxmlwriterstartelementcommon...
CLEANSTART-2025-RO23679 FFmpeg before commit bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 contains an out of array access vulnerability in MXF format demuxer that can result in DoS
Security vulnerability affects the ffmpeg package. FFmpeg before commit bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 contains an out of array access vulnerability in MXF format demuxer that can result in DoS...
CLEANSTART-2025-YA40749 FFmpeg before commit cced03dd667a5df6df8fd40d8de0bff477ee02e8 contains multiple out of array access vulnerabilities in the mms protocol that can result in attackers accessing out of bound data
Security vulnerability affects the ffmpeg package. FFmpeg before commit cced03dd667a5df6df8fd40d8de0bff477ee02e8 contains multiple out of array access vulnerabilities in the mms protocol that can result in attackers accessing out of bound data...
CrowdStrike Channel File 291: An Engineering Analysis of a Global Endpoint Outage
On July 19, 2024, a CrowdStrike Falcon content update caused Windows systems to crash, affecting about 8.5 million devices according to a Microsoft estimate. The immediate defect was an inconsistency between a detection template that declared 21 inputs and sensor code that supplied 20. A new...
Astra Linux – vulnerability in linux-6.1, linux-6.12
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: add bounds check to cgxspeedmbps index cgxspeedmbps has 13 elements, but RESPLINKSTATSPEED can return values from 0 to 15. If it returns a value greater than or equal to 13, this results in an out-of-bounds arr...
Astra Linux – vulnerability in linux-6.12
In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: validate connector number in ucsinotifycommon The connector number extracted from CCI via UCSICCICONNECTOR is a 7-bit field 0-127 used to index into the connector array in ucsiconnectorchange. However, the array...
Astra Linux – vulnerability in linux-6.12
In the Linux kernel, the following vulnerability has been resolved: iio: light: veml6075: add bounds check to veml6075itms index VEML6075ITMS has 5 elements, but VEML6075CONFIT can return values ranging from 0 to 7. If it returns a value greater than or equal to 5, this results in an out-of-bound...
Astra Linux – vulnerability in linux-6.1, linux-6.12
In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access at reading cache findcontrol to retrieve a cached info accesses the array with the given index blindly, which may lead to an OOB array access. Add a sanity check for avoiding it...
Astra Linux – vulnerability in linux-6.12
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1298: add bounds check to pgasettings index ads1298pgasettings has 7 elements, but ADS1298MASKCHPGA can produce values from 0 to 7. If it produces a value greater than or equal to 7, this results in an out-of-boun...
Astra Linux – vulnerability in linux-6.1, linux-6.12
In the Linux kernel, the following vulnerability has been resolved: net: mana: validate rxreqidx to prevent out-of-bounds array access In manahwcrxeventhandler, rxreqidx is derived from sge-address in DMA-coherent memory. In Confidential VMs SEV-SNP/TDX, this memory is shared unencrypted and HW c...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.2 contains security vulnerabilities. These vulnerabilities stem from the kionix-kx022a driver’s improper array boundary checking when converting register values to array indices. As a result, sizeofarray is incorrectly interpreted as the last valid index, potentially...
Linux Distros Unpatched Vulnerability : CVE-2026-98291
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintelpcie: fix off-by- one bounds check in RX submit btintelpciesubmitrx used...
SUSE CVE-2026-47507
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds array access. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure,...
CLEANSTART-2024-MH90303 FFmpeg before commit bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 contains an out of array access vulnerability in MXF format demuxer that can result in DoS
Security vulnerability affects the ffmpeg4 package. FFmpeg before commit bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 contains an out of array access vulnerability in MXF format demuxer that can result in DoS...
CLEANSTART-2024-ZP45224 FFmpeg before commit cced03dd667a5df6df8fd40d8de0bff477ee02e8 contains multiple out of array access vulnerabilities in the mms protocol that can result in attackers accessing out of bound data
Security vulnerability affects the ffmpeg4 package. FFmpeg before commit cced03dd667a5df6df8fd40d8de0bff477ee02e8 contains multiple out of array access vulnerabilities in the mms protocol that can result in attackers accessing out of bound data...