44567 matches found
STMicroelectronics Ethernet Driver Heap Buffer Overflow DoS
The vulnerability of the dwmac4mapmtldma function in the drivers/net/ethernet/stmicro/stmmac/dwmac4core.c file of the Ethernet driver module from STMicroelectronics’ operating system Linux is related to the occurrence of operations outside the buffer boundaries in memory. Exploiting this...
Linux veth_convert_skb_to_xdp_buff Heap Buffer Overflow DoS
The vulnerability of the vethconvertskbtoxdpbuff function in the drivers/net/veth.c module of the Linux kernel network device driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
Linux hugetlbfs fallocate buffer overflow DoS
The vulnerability of the hugetlbfsfallocate function in the Linux file system support module fs/hugetlbfs/inode.c is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...
EUVD-2026-15196
Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow error. This issue affects Kea versions 2.6.0 through 2.6.4 and 3.0.0 through 3.0.2...
ALPINE-CVE-2026-3608
Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow error. This issue affects Kea versions 2.6.0 through 2.6.4 and 3.0.0 through 3.0.2...
DEBIAN-CVE-2026-3608
Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow error. This issue affects Kea versions 2.6.0 through 2.6.4 and 3.0.0 through 3.0.2...
CVE-2026-3608
CVE-2026-3608 affects Kea daemons (kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, kea-dhcp6). A maliciously crafted message over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow. Affected versions: 2.6.0–2.6.4 and 3.0.0–3.0.2. Exploitation details a...
CVE-2026-3608 Stack overflow in Kea daemons
Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow error. This issue affects Kea versions 2.6.0 through 2.6.4 and 3.0.0 through 3.0.2...
OPENSUSE-SU-2026:10421-1 kea-3.0.3-1.1 on GA media
These are all security issues fixed in the kea-3.0.3-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10426-1 python311-intake-2.0.9-1.1 on GA media
These are all security issues fixed in the python311-intake-2.0.9-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10431-1 python311-oci-sdk-2.168.3-1.1 on GA media
These are all security issues fixed in the python311-oci-sdk-2.168.3-1.1 package on the GA media of openSUSE Tumbleweed...
Linux Atheros Wireless Driver Heap Buffer Overflow DoS
The vulnerability of the ath9kwmicmd function in the drivers/net/wireless/ath/ath9k/wmi.c driver for the Atheros/Qualcomm wireless adapter in the Linux operating system is related to buffer overflow exploits. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
OPENSUSE-SU-2026:10428-1 python311-jupyter-ydoc-3.4.0-2.1 on GA media
These are all security issues fixed in the python311-jupyter-ydoc-3.4.0-2.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-3608
Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow error. This issue affects Kea versions 2.6.0 through 2.6.4 and 3.0.0 through 3.0.2...
PT-2026-40510
Уязвимость функции hci cmd sync queue once ядра операционных систем Linux связана с неосвобождением ресурса после истечения действительного срока его эксплуатирования. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность и доступность защищаемой информации...
Linux net/ipv6/addrconf.c Heap Buffer Overflow DoS
The vulnerability of the addrconfinitnet function in the net/ipv6/addrconf.c module of the Linux kernel is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
ftrace Heap Buffer Overflow DoS
The vulnerability of the lookuprec function in the kernel/trace/ftrace.c module, which supports kernel tracing in Linux operating systems, is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...
Linux kernel kprobes Heap Buffer Overflow DoS
The vulnerability of the unregisterkprobetop function in the kernel/kprobes.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
Linux kernel block devices driver Loop Queue RCE
The vulnerability of the loopqueuerq function in the drivers/block/loop.c module of the Linux kernel’s block devices driver is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
Linux kernel User Interface Driver Heap Buffer Overflow DoS
The vulnerability of the floattoint function in the drivers/hid/amd-sfh-hid/sfh11/amdsfhdesc.c file of the Linux kernel subsystem for user interface devices’ driver lies in the handling of buffer overflows. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...