12084 matches found
CVE-2026-68431
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate minimum PDU size for transform requests The receive path applies the minimum SMB2 PDU size check only when ProtocolId is SMB2PROTONUMBER. A packet carrying SMB2TRANSFORMPROTONUM bypasses the check even when the...
CVE-2026-68431 ksmbd: validate minimum PDU size for transform requests
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate minimum PDU size for transform requests The receive path applies the minimum SMB2 PDU size check only when ProtocolId is SMB2PROTONUMBER. A packet carrying SMB2TRANSFORMPROTONUM bypasses the check even when the...
EUVD-2026-57039
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate minimum PDU size for transform requests The receive path applies the minimum SMB2 PDU size check only when ProtocolId is SMB2PROTONUMBER. A packet carrying SMB2TRANSFORMPROTONUM bypasses the check even when the...
CVE-2026-68431
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate minimum PDU size for transform requests The receive path applies the minimum SMB2 PDU size check only when ProtocolId is SMB2PROTONUMBER. A packet carrying SMB2TRANSFORMPROTONUM bypasses the check even when the...
PT-2026-70963
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdkfd component where the CRIU checkpoint process copies the MQD control stack using the cp hqd cntl stack size value from hardware without bounding it to the...
Linux Distros Unpatched Vulnerability : CVE-2026-68339
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: btusb: validate Realtek vendor event length btusbrecveventrealtek reads the event code at data0 and the Realtek subevent code at data2 before decidin...
Linux Distros Unpatched Vulnerability : CVE-2026-68431
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: validate minimum PDU size for transform requests The receive path applies the minimum SMB2 PDU size check only when ProtocolId is SMB2PROTONUMBER. A pack...
PT-2026-71343
Name of the Vulnerable Software and Affected Versions Russh versions prior to 0.62.4 Description An unauthenticated SSH client can trigger a denial of service by sending an SSH MSG KEX ECDH INIT message containing a 32-byte all-zero Q C value. The Curve25519Kex::server dh function in...
SUSE CVE-2026-68348
In the Linux kernel, the following vulnerability has been resolved: ASoC: tas2781: bound firmware description string parsing The TAS2781 firmware parser reads several variable-length description strings with strlen before checking that the string terminator is present inside the firmware blob. A...
CVE-2026-68348
A flaw was found in the Linux kernel's ASoC TAS2781 firmware parser. This vulnerability occurs when the parser reads variable-length description strings without properly checking for a null terminator within the firmware blob. A specially crafted, malformed firmware image could allow an attacker ...
CVE-2026-68819
Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network...
CVE-2026-65794
Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network...
CVE-2026-64905
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2026-62793
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally...
CVE-2026-62746
Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally...
CVE-2026-62730
Buffer over-read in Windows Wired AutoConfig Service allows an authorized attacker to disclose information locally...
CVE-2026-61347
Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally...
CVE-2026-61350
Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack...