PT-2026-61195

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu component where the kvcalloc function in amdgpu gem.c uses the user-supplied num entries variable without an upper bounds check. Because num entries is ...

PT-2026-61302

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the ethtool EEPROM Netlink fallback path within the fallback set params function. While the function validates that the offset is less than eeprom len, it fails to verif...

PT-2026-61335

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mana hwc rx event handler function where the rx req idx variable, derived from sge-address in DMA-coherent memory, is used to index the reqs array without a bounds...

PT-2026-61353

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The css rstat updated function, exposed as a BPF kfunc, fails to validate the cpu argument provided by the caller before using it for per-cpu rstat lookups. A BPF iter/cgroup program wit...

PT-2026-61443

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth MGMT component where the MGMT OP ADD EXT ADV DATA command fails to verify if the specified advertising data lengths are within the actual command payload...

PT-2026-61503

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds memory access issue exists in the AMD IOMMU debugfs implementation. In the iommu mmio write and iommu capability write functions, the variables dbg mmio offset and dbg c...

PT-2026-61155

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access issue exists in the ASoC rsnd component. The component dais array is zero-initialized and populated via the rsnd dai of node function. Because the boundary check ...

PT-2026-61237

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An unprivileged slab-out-of-bounds read exists in the Linux kernel. The ip6 datagram recv specific ctl function trusts the on-wire hdrlen byte when computing the length for put cmsg, but...

PT-2026-61218

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Memory corruption occurs in the digi acceleport USB serial driver due to missing sanity checks for bulk-out buffer sizes. A malicious device reporting smaller buffers than expected can...

PT-2026-61226

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the smb check perm dacl function within the ksmbd module. This issue occurs during ACE-walk loops when a transposed bounds check fails to properly validat...

PT-2026-61266

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the linedisp display function within the auxdisplay line-display component. The issue occurs when a zero-byte write is performed on the message sysfs...

PT-2026-61279

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the USB Type-C TCPM component where the svdm consume modes function fails to perform bound checks on the altmode desc array during each iteration of its loop. While a...

PT-2026-61347

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access occurs in the ieee80211 ml epcs function when processing a PRIO ACCESS ML element PER STA PROFILE subelement. A connected WiFi 7 AP can trigger this by sending an...

PT-2026-61401

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read and write issue exists in the adm1266 gpio get multiple function. The function incorrectly uses the PMBus command code ADM1266 PDIO STATUS as an upper bound for...

CVE-2026-16095

A flaw has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. Affected by this issue is the function setupconntrack of the file /sbin/rc. Executing a manipulation of the argument cttcptimeout can lead to out-of-bounds write. The attack may be performed from remote. This project is supersed...

CVE-2026-16095 Shibby Tomato rc setup_conntrack out-of-bounds write

A flaw has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. Affected by this issue is the function setupconntrack of the file /sbin/rc. Executing a manipulation of the argument cttcptimeout can lead to out-of-bounds write. The attack may be performed from remote. This project is supersed...

EUVD-2026-45370

A flaw has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. Affected by this issue is the function setupconntrack of the file /sbin/rc. Executing a manipulation of the argument cttcptimeout can lead to out-of-bounds write. The attack may be performed from remote. This project is supersed...

CVE-2026-16095

The CVE-2026-16095 issue affects Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. Affects the function setup_conntrack in /sbin/rc. Manipulating the argument ct_tcp_timeout can cause an out-of-bounds write, with a remote attacker able to trigger it. The project is superseded by FreshTomato. No remedia...

Chromium: CVE-2026-15903 Out of bounds read and write in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Linux Distros Unpatched Vulnerability : CVE-2026-15903

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read and write in V8 in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted...