CVE-2026-2273

CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability exist that could cause execution of untrusted commands on the engineering workstation which could result in a limited compromise of the workstation and a potential loss of Confidentiality, Integrity and Availability of...

PT-2026-44781

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 8.0.5 Description The NFS parser contains an issue related to unrestricted resource allocation. A remote attacker can exploit this flaw to cause a denial of service DoS, which is a condition where the system becomes...

OPENSUSE-SU-2026:10438-1 openbao-2.5.2-1.1 on GA media

These are all security issues fixed in the openbao-2.5.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10441-1 strongswan-6.0.5-1.1 on GA media

These are all security issues fixed in the strongswan-6.0.5-1.1 package on the GA media of openSUSE Tumbleweed...

Linux MPTCP Heap Buffer Overflow DoS

The vulnerability of the mptcpclosessk function in the net/mptcp/protocol.c module of the Linux kernel is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux kernel HID MCP2221 buffer overflow DoS

The vulnerability of the mcp2221hidunregister function in the driver module/hid/hid-mcp2221.c of the Linux kernel’s input device subsystem relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

Linux kernel rpmsg_chrdev_eptdev_destroy() Buffer Overflow

The vulnerability of the rpmsgchrdeveptdevdestroy function in the drivers/rpmsg/rpmsgchar.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

Atheros Wireless Driver Heap Buffer Overflow DoS

The vulnerability of the ath9khifusballoctxurbs function in the drivers/net/wireless/ath/ath9k/hifusb.c module of the Atheros/Qualcomm wireless adapter driver in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker t...

Ext4 Rename Function Use-After-Free

The vulnerability of the ext4rename function in the fs/ext4/namei.c file of the Ext4 file system in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

Linux hugetlbfs fallocate buffer overflow DoS

The vulnerability of the hugetlbfsfallocate function in the Linux file system support module fs/hugetlbfs/inode.c is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

Linux kernel RCU Heap Buffer Overflow DoS

The vulnerability of the rcuirqenterchecktick function in the kernel/rcu/tree.c module of the synchronization subsystem in multi-threaded Linux kernel systems is related to the execution of a loop with an unreachable exit condition „Infinite loop“. Exploiting this vulnerability could allow an...

Mellanox Ethernet network adapter driver Heap Buffer Overflow

The vulnerability of the mlx5tcctentryreplacerule function in the drivers/net/ethernet/mellanox/mlx5/core/en/tcct.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to...

Linux kernel clk-loongson2 driver structure Data Compromise

The vulnerability in determining the structure of loongson2clktype in the drivers/clk/clk-loongson2.c file of the Linux kernel synchronization driver relates to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...

Linux kernel Power Supply Function Data Compromise

The vulnerability of the powersupplytemp2resistsimple function in the drivers/power/supply/powersupplycore.c file of the Linux kernel’s power management driver module is related to the occurrence of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to...

OCFS2 Heap Buffer Overflow DoS

The vulnerability of the ocfs2writeendnolock function in the fs/ocfs2/aops.c file of the OCFS2 file system in Linux operating systems is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an...

Linux TCP BPF Sendmsg Redir

The vulnerability of the tcpbpfsendmsgredir function in the net/ipv4/tcpbpf.c module of the Linux kernel is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel MPTCP Heap Buffer Overflow DoS

The vulnerability of the mptcpclosessk and mptcpworker functions in the net/mptcp/protocol.c module of the Linux kernel is related to improper initialization. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

ata_tport_add() Function SPOOFING

The vulnerability of the atatportadd function in the drivers/ata/libata-transport.c file of the Linux SATA/PATA driver kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux veth_convert_skb_to_xdp_buff Heap Buffer Overflow DoS

The vulnerability of the vethconvertskbtoxdpbuff function in the drivers/net/veth.c module of the Linux kernel network device driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux net/ipv6/exthdrs_core ipv6_find_tlv Data Compromise

The vulnerability of the ipv6findtlv function in the net/ipv6/exthdrscore.c module of the Linux kernel involves reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...