DEBIAN-CVE-2026-68440

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...

CVE-2026-68440

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...

CVE-2026-68440 net: txgbe: fix heap overflow when reading module EEPROM

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...

CVE-2026-68440

CVE-2026-68440 affects the Linux kernel txgbe driver: when reading module EEPROM via txgbe_read_eeprom_hostif(), the function copies round_up(length, 4) bytes into an ethtool caller buffer allocated with exactly length bytes. If length is not 4-byte aligned, this causes an out-of-bounds write (he...

CVE-2026-68440 net: txgbe: fix heap overflow when reading module EEPROM

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...

CVE-2026-68440

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...

CVE-2026-68440

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...

EUVD-2026-57048

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...

SUSE CVE-2026-19387

A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to cause writes beyond the allocated output buffer. Thi...

PT-2026-71277

An out-of-bounds write issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862 might allow a remote authenticated user to cause a crash or heap memory corruption in an application that processes crafted Base64-encoded input. To remediate this issue, users should upgrade to version...

PT-2026-71314

A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can result in an out-of-bounds write in the client application process. Triggering this issue requires control over the server the driver connects to, or the ability to respond in its...

Linux Distros Unpatched Vulnerability : CVE-2026-20337

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This...

Linux Distros Unpatched Vulnerability : CVE-2026-73242

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage...

Linux Distros Unpatched Vulnerability : CVE-2026-68262

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/imagination: Fix user array stride in pvrsetuobjarray pvrsetuobjarray copies an array of kernel objects to a userspace array whose element size is described...

Linux Distros Unpatched Vulnerability : CVE-2026-68128

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ice: reject out-of-range ptype in iceparserprofileinit setbitrslt-ptype, prof-ptypes operates on a DECLAREBITMAP of ICEFLOWPTYPEMAX 1024 bits. Nothing prevents ...

Security update for chromium (critical)

openSUSE security update: security update for chromium ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21561-1 Rating: critical References: bsc1274549 Cross-References: CVE-2026-19137 CVE-2026-19138 CVE-2026-19139 CVE-2026-19140 CVE-2026-19141...

PT-2026-71188

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description An out-of-bounds write allows a remote attacker to execute arbitrary code. An out-of-bounds write occurs when a program writes data past the end of the intended buffer, potentially overwriting adjacen...

Linux Distros Unpatched Vulnerability : CVE-2026-68145

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iomap: fix out-of-bounds bitmapset with zero-length range ifssetrangedirty and ifssetrangeuptodate compute lastblk as off + len - 1 iblkbits. When off is 0 and...

RHEL 8 : kernel (RHSA-2026:53989)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:53989 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xen/privcmd: fix double free...

PT-2026-71265

A flaw was found in GStreamer gst-plugins-good avidemux. When parsing FUJIFILM metadata in an AVI strd chunk, gst avi demux parse strd decrements a remaining-length counter by fixed offsets 98 and 10 bytes without verifying sufficient data remains. For crafted strd payloads of exactly 106 or 107...