CVE-2026-10678 NULL-pointer / out-of-bounds write in Zephyr MCTP I2C+GPIO target binding driven by an unauthenticated I2C controller

The MCTP-over-I2C+GPIO target binding in Zephyr subsys/pmci/mctp/mctpi2cgpiotarget.c processes pseudo-register writes from an I2C bus master byte-by-byte in mctpi2cgpiotargetwritereceived without validating the order or the receive buffer. In the affected versions the MCTPI2CGPIORXMSGADDR data...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the svcrdmabuildwrites function potentially overstepping its bounds to access the segment array of the Write...

The vulnerability of the Sentinel LDK RTE platform for software protection and licensing arises from an operation that goes beyond buffer boundaries in memory, allowing a malicious actor to trigger a service failure.

The vulnerability of the Sentinel LDK RTE platform for software protection and licensing stems from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure remotely...