Astra Linux – Vulnerability in SOX

A vulnerability was discovered in SoX, where a heap buffer overflow occurs in the lsxreadwbuf function in the formatsi.c file. This vulnerability can be exploited by using a specially crafted file, which may cause the application to crash...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: dma-buf: heaps: Fixed potential Spectre v1 gadget It appears that nr could be a Spectre v1 gadget, as it is provided by a user and used as an array index. This issue prevents the contents of kernel memory from being leaked to use...

PT-2026-90998

An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680, W920, W930, and W1000. A double-free vulnerability in the Exynos MFC encoder driver due to improper cleanup of dma buf references...

CVE-2026-89551

CVE-2026-89551 is a CRITICAL (CVSS 9.8) integer underflow in the Linux kernel's SUNRPC subsystem. The xdr_buf_trim() function subtracts consumed bytes from buf->len without clamping, so when called from gss_krb5_unwrap_v2() with a small wire-derived buf->len while page-scale iov_lens are pr...

PT-2026-90267

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer underflow exists in the SUNRPC component. The xdr buf trim function trims bytes from the tail of an xdr buf by iterating through tail, pages, and head iovecs. A failure to cla...

PT-2026-96331

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field gss krb5 unwrap v2 sets buf-len to a logical length, which can be much smaller than head0.iov len the allocated receive-page capacity. It then calls xdr buf trim with a...

PT-2026-96420

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: xdr buf trim: clamp buf-len to avoid underflow xdr buf trim trims len bytes from the tail of an xdr buf by walking the tail, pages, and head iovecs. Each per-section step uses min t so it never removes more bytes than tha...

PT-2026-96375

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix use-after-free in smc rx pipe buf release smc rx splice hands RMB pages to a pipe and takes a socket reference per entry so the smc sock stays alive until the reader finishes. The connection does not: a concurrent...

PT-2026-96560

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-before-check of ReparseDataLength in reparse buf ptr reparse buf ptr reads buf-ReparseDataLength before checking that count covers the full fixed header: buf = struct reparse data buffer u8 io + off; len =...

Linux dma_buf_fd() Buffer Overflow

The vulnerability of the dmabuffd function in the drivers/dma-buf/dma-buf.c module of the Linux kernel is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053201)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053201 advisory. In the Linux kernel, the following vulnerability has been resolved: dma-buf/sw-sync: don't enable IRQ from syncprintobj Since commit a6aa8fca4d79 dma-buf/sw-sync:...

CVE-2026-80888

This Linux kernel vulnerability affects the drm/vmwgfx paravirtualized graphics driver. The function ttm_prime_fd_to_handle() returns -ENOSYS when an imported fd's dma_buf->ops do not match the ttm_object_device's ops, but fails to release the reference previously acquired by dma_buf_get(). As...

PT-2026-91801

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: drop dma buf reference on foreign-fd prime import ttm prime fd to handle returns -ENOSYS when the imported fd's dma buf-ops do not match the ttm object device's ops, but does so without releasing the reference acquire...

PT-2026-86179

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak occurs in the drm/vmwgfx component when importing a foreign file descriptor. The function ttm prime fd to handle returns an error when the imported file descriptor's dma...

Linux GPU DRM XE DMA Buffer Overflow

The vulnerability of the xegemprimeimport function in the drivers/gpu/drm/xe/xedmabuf.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

ai.pipestream.proto-toolchain:ai.pipestream.proto-toolchain.gradle.plugin (>=0.7.24, <=0.7.26), ai.pipestream:quarkus-buf-grpc-generator (>=0.7.24, <=0.7.26) +2144 more potentially affected by CVE-2026-83557 via tools.jackson.core:jackson-databind (>=3.2.0, <=3.2.1)

tools.jackson.core:jackson-databind MAVEN version =3.2.0, =0.7.24, =0.7.24, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.0.0-alpha4, =2.0.0-alpha4, =2.0.0-alpha4, =2.0.0-alpha4, =2.0.0-alpha4, =2.0.0-alpha6 - at.meks.quarkiverse.axonframework-extension:quarkus-axon-metrics...

ai.pipestream.proto-toolchain:ai.pipestream.proto-toolchain.gradle.plugin (>=0.7.24, <=0.7.26), ai.pipestream:quarkus-buf-grpc-generator (>=0.7.24, <=0.7.26) +2144 more potentially affected by CVE-2026-19032 via tools.jackson.core:jackson-databind (>=3.2.0, <=3.2.1)

tools.jackson.core:jackson-databind MAVEN version =3.2.0, =0.7.24, =0.7.24, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.0.0-alpha4, =2.0.0-alpha4, =2.0.0-alpha4, =2.0.0-alpha4, =2.0.0-alpha4, =2.0.0-alpha6 - at.meks.quarkiverse.axonframework-extension:quarkus-axon-metrics...

Linux Distros Unpatched Vulnerability : CVE-2026-80700

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vmwgfx: validate external BO copy bounds for both stride paths vmwexternalbocopy trusts caller- supplied offsets, strides, and heights and operates on...

Linux Distros Unpatched Vulnerability : CVE-2026-80633

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iommufd: Take dmaresv lock before dmabufunpin in release path dmabufunpin requires the call...

SUSE CVE-2026-80700

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate external BO copy bounds for both stride paths vmwexternalbocopy trusts caller-supplied offsets, strides, and heights and operates on imported dma-buf vmaps: - The equal-stride memcpy bound was clamped after...