263824 matches found
PT-2026-72874
In the Linux kernel, the following vulnerability has been resolved: crypto: sun4i-ss - Remove insecure and unused rng alg Remove sun4i ss rng, as it is insecure and unused: - It has multiple vulnerabilities. sun4i ss prng seed is missing locking and has a buffer overflow. sun4i ss prng generate...
PT-2026-72255
In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Bound hotplug states sysfs output states show adds CPU hotplug state names into a single sysfs buffer using sprintf. With enough registered states, this can write past the end of the PAGE SIZE buffer. Use sysfs emit...
PT-2026-72174
In the Linux kernel, the following vulnerability has been resolved: bpf: Reject negative const offsets for buffer pointers The verifier rejects variable offsets for PTR TO TP BUFFER and PTR TO BUF accesses, but it currently accepts a constant negative offset produced by pointer arithmetic. Commit...
Linux Distros Unpatched Vulnerability : CVE-2026-74497
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: Clamp frame size in implicit-feedback mode sndusbhandlesyncurb scales received sync packet sizes by the sender's stride and stores the result...
Linux Distros Unpatched Vulnerability : CVE-2026-72470
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: resize log-onepagebuf when adopting on-disk page size logreplay allocates log-onepagebuf using the page size that was chosen from the host PAGESIZE:...
Linux Distros Unpatched Vulnerability : CVE-2026-74438
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: sun4i-ss - Remove insecure and unused rngalg Remove sun4issrng, as it is insecure and unused: - It has multiple vulnerabilities. sun4issprngseed is...
Linux Distros Unpatched Vulnerability : CVE-2026-74460
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: emsusb: validate CPC message lengths emsusbreadbulkcallback walks CPC messages packed in one USB receive buffer. Check that each declared message fits in t...
Linux Distros Unpatched Vulnerability : CVE-2026-74469
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: prevent peer transport count overflow sctpassocaddpeer increments the association's 16-bit transportcount for every new unique peer. Adding the 65,536th...
Linux Distros Unpatched Vulnerability : CVE-2026-74391
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Bound synthetic-field strings with seqbuf The synthetic field helpers build a prefixed synthetic variable name and a generated hist command in fixed...
Linux Distros Unpatched Vulnerability : CVE-2026-72106
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-ioctl: fix a possible overflow in listversiongetinfo sizeoftt-version is 12 bytes, but the code writes 16 bytes into the output buffer - info-vers-version0,...
Linux Distros Unpatched Vulnerability : CVE-2026-74488
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames mwifiex11ndispatchamsdupkt splits an A-MSDU with ieee80211amsduto8023s and walks the...
Linux Distros Unpatched Vulnerability : CVE-2026-72066
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpu: hotplug: Bound hotplug states sysfs output statesshow adds CPU hotplug state names into a single sysfs buffer using sprintf. With enough registered states,...
PT-2026-72949
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp frame size in implicit-feedback mode snd usb handle sync urb scales received sync packet sizes by the sender's stride and stores the result directly in out packet-packet sizei. If a connected USB device sen...
Linux Distros Unpatched Vulnerability : CVE-2026-74556
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: libiscsitcp: Bound SCSI Response data segment to the connection buffer iscsitcphdrdissect receives the data segment of several PDU types into the fixed-si...
PT-2026-72288
In the Linux kernel, the following vulnerability has been resolved: dm-integrity: don't increment hash offset twice hash offset is already incremented in the loop "for i = 0; i to copy; i++, ts--". Do not increment it again...
PT-2026-72736
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci: validate codec capability element length Read Local Codec Capabilities returns a sequence of capability elements. Each element starts with a one-byte length followed by that many payload bytes. hci read codec...
PT-2026-72835
In the Linux kernel, the following vulnerability has been resolved: evm: terminate and bound the evm xattrs read buffer evm read xattrs allocates size + 1 bytes, fills them from the list of enabled xattrs, and then passes strlentemp to simple read from buffer. When no configured xattrs are enable...
PT-2026-72303
In the Linux kernel, the following vulnerability has been resolved: can: bcm: validate frame length in bcm rx setup for RTR replies bcm tx setup validates cf-len against the CAN/CAN FD DLC limits before installing frames for TX SETUP, but bcm rx setup never did the same for the RTR-reply frame...
PT-2026-72786
In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate fast symlink target during inode read ocfs2 validate inode block already rejects several inconsistent self-contained dinodes before they are exposed to the rest of the filesystem. Fast symlinks need the same...