EUVD-2026-59132

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: reacquire gw address after skb realloc The pskbmaypull called by batadvblaisbackbonegw could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an...

CVE-2026-64095

A flaw was found in the Linux kernel's batman-adv module, which handles bridge loop avoidance. A race condition allows the bla.numrequests counter to be decremented multiple times due to non-atomic operations. This can lead to an inconsistent state within the kernel, potentially enabling a local...

CVE-2026-64095

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid double decrement of bla.numrequests The bla.numrequests is increased when no requestsent was in progress. And it is decremented in various places announcement was received, backbone is purged, periodic work...

CVE-2026-64095

Concrete details confirm CVE-2026-64095 affects Linux kernel batman-adv (bla.num_requests) where double decrement occurs due to non-atomic checks of request_sent and bla.num_requests. The root cause: several code paths modify state and counts without atomic synchronization, allowing TOCTOU races....

CVE-2026-64095 batman-adv: bla: avoid double decrement of bla.num_requests

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid double decrement of bla.numrequests The bla.numrequests is increased when no requestsent was in progress. And it is decremented in various places announcement was received, backbone is purged, periodic work...

EUVD-2026-45780

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid double decrement of bla.numrequests The bla.numrequests is increased when no requestsent was in progress. And it is decremented in various places announcement was received, backbone is purged, periodic work...

CVE-2026-64095 batman-adv: bla: avoid double decrement of bla.num_requests

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid double decrement of bla.numrequests The bla.numrequests is increased when no requestsent was in progress. And it is decremented in various places announcement was received, backbone is purged, periodic work...

CVE-2026-46231 batman-adv: bla: put backbone reference on failed claim hash insert

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: put backbone reference on failed claim hash insert When batadvblaaddclaim fails to insert a new claim into the hash, it leaked a reference to the backbonegw for which the claim was intended. Call...

AZL-83810 CVE-2026-31657 affecting package kernel for versions less than 6.6.137.1-1

In the Linux kernel, the following vulnerability has been resolved: batman-adv: hold claim backbone gateways by reference batadvblaaddclaim can replace claim-backbonegw and drop the old gateway's last reference while readers still follow the pointer. The netlink claim dump path dereferences...

Malicious code in @zalastax/nolb-bla (npm)

The package @zalastax/nolb-bla was found to contain malicious code...

Malicious code in generator-test-bla (npm)

The package generator-test-bla was found to contain malicious code...

MAL-2025-21307 Malicious code in generator-test-bla (npm)

The package generator-test-bla was found to contain malicious code...

MAL-2025-10794 Malicious code in @zalastax/nolb-bla (npm)

The package @zalastax/nolb-bla was found to contain malicious code...

PT-2020-10157

Name of the Vulnerable Software and Affected Versions Huawei smart phones versions earlier than 8.0.0.168 Huawei smart phones versions earlier than 9.0.0.177 Huawei smart phones versions earlier than 9.0.0.181 Huawei smart phones versions earlier than 9.0.0.201 Huawei smart phones versions earlie...

Huawei Data Communication: SegmentSmack Vulnerability in Linux Kernel (huawei-sa-20181031-02-linux)

There is a DoS vulnerability in the Linux Kernel versions 4.9+ and supported versions known as a SegmentSmack attack. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

PT-2019-4371

Name of the Vulnerable Software and Affected Versions Huawei Mate 20 versions earlier than 9.1.0.131C00E131R3P1 Huawei Mate 20 Pro versions earlier than 9.1.0.310C185E10R2P1 Huawei Mate 20 RS versions earlier than 9.1.0.135C786E133R3P1 Huawei Mate 20 X versions earlier than 9.1.0.135C00E133R2P1...

CVE-2018-7910

CVE-2018-7910 applies to several Huawei smartphones (e.g., ALP-AL00B, ALP-TL00B, BLA-AL00B, BLA-L09C, BLA-L29C) running Android 8.x with builds such as 8.0.0.118D(C00/ C01), 8.0.0.127/128/137(C432). The flaw is an authentication bypass that lets an attacker replace the boot/startup program when t...

PT-2018-18320

Name of the Vulnerable Software and Affected Versions: Huawei ALP-AL00B versions 8.0.0.106C00 through 8.0.0.129SP2C01 Huawei BLA-TL00B versions 8.0.0.113SP7C01 through 8.0.0.129SP2C01 Huawei Charlotte-AL00A versions 8.1.0.105SP7C00 through 8.1.0.109SP5C00 Huawei Emily-AL00A versions 8.1.0.105SP6C...

CVE-2018-7989

Huawei Mate 10 pro smartphones with the versions before BLA-AL00B 8.1.0.326C00 have an improper authentication vulnerability. App Lock is a function to prevent unauthorized use of apps on smartphones, an attacker could directly change the lock password after a series of operations. Successful...

Design/Logic Flaw

RCS module in Huawei ALP-AL00B smart phones with software versions earlier than 8.0.0.129, BLA-AL00B smart phones with software versions earlier than 8.0.0.129 has a remote control vulnerability. An attacker can trick a user to install a malicious application. When the application connects with R...