EUVD-2026-76520

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: pass packet set buffer size to parser ecryptfsparsepacketset receives a pointer into the file header, but it calculates the remaining packet buffer size from PAGESIZE - 8. For version 1 headers the packet set starts lat...

CVE-2026-89608

CVE-2026-89608 affects the Linux kernel's ecryptfs filesystem. The vulnerability is in ecryptfs_parse_packet_set(), which calculates the remaining packet buffer size as PAGE_SIZE - 8 instead of using the actual buffer length. For version 1 headers , where the packet set starts later in the header...

EUVD-2026-73895

Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network...

The vulnerability of the get_ext_report() function in the drivers/virt/coco/sev-guest/sev-guest.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the getextreport function in the drivers/virt/coco/sev-guest/sev-guest.c module of the Linux kernel is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the __efi_capsule_setup_info() function in the drivers/firmware/efi/capsule-loader.c file of the Linux kernel’s firmware module allows a hacker to trigger a system failure.

The vulnerability of the eficapsulesetupinfo function in the drivers/firmware/efi/capsule-loader.c file of the Linux kernel firmware module is related to incorrect calculation of buffer size. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2026-80551 s390/vfio_ccw: Ensure first IDAW remains constant

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Ensure first IDAW remains constant The first IDAW in a list does not need to be on a 2K/4K boundary like all others, and so is read separately to accurately calculate the size of the buffer needed to read the full...

The vulnerability of the efi component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the efi component in the Linux operating system’s kernel is related to incorrect calculation of the buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-74657

CVE-2026-74657 affects the Linux kernel IPv4 FIB netlink size calculation. The function fib_nlmsg_size() incorrectly estimates nexthop space by assuming all gateways are encoded as IPv4 RTA_GATEWAY attributes. However, IPv4 routes can carry IPv6 gateways , which are dumped as RTA_VIA by fib_nexth...

Linux Distros Unpatched Vulnerability : CVE-2026-74712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vdpa/mlx5: Fix buffer length in createdirectkeys We have seen in our CI the following KASAN message: BUG: KASAN: slab-out-of-bounds in cmdexec+0x550/0xca0...

The vulnerability of DRM/V3D components in Linux operating systems allows a perpetrator to trigger a service failure.

The vulnerability of DRM/V3D components in the Linux operating system is related to incorrect calculation of buffer sizes. Exploiting this vulnerability can allow a hacker to cause service interruptions...

EUVD-2026-59423

In the Linux kernel, the following vulnerability has been resolved: spi: xilinx: use FIFO occupancy register to determine buffer size The method the driver uses to determine the size of the FIFO has a problem. What it currently does is this: It stops the SPI hardware and writes to the TX FIFO...

CVE-2026-73434

A flaw was found in GStreamer gst-plugins-good avidemux. In gstavidemuxriffparsevprp, the number of available gstriffvprpvideofielddesc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp-fields value, rather than by sizeofgstriffvprpvideofielddesc. This ca...

The vulnerability of the scarlett2_usb_get_config() function in the sound/usb/mixer_scarlett2.c module, which supports USB audio devices in Linux operating systems, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the scarlett2usbgetconfig function in the sound/usb/mixerscarlett2.c module, which supports USB audio devices in Linux operating systems, is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to compromise the...

PT-2026-55578

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A heap buffer overflow exists in the Paint Shop Pro PSP file format parser. The issue occurs when the software incorrectly calculates buffer sizes while processing low bit-depth images, which...

The vulnerability of the MIFF encoder in the console-based image editing tool ImageMagick allows a hacker to trigger a service failure.

The vulnerability of the MIFF encoder in the console-based ImageMagick graphics editor is related to incorrect calculations of the buffer size allocated. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-42915

Incorrect calculation of buffer size in Windows TCP/IP allows an authorized attacker to deny service over an adjacent network...

CVE-2026-42915

Incorrect calculation of buffer size in Windows VMSwitch allows an authorized attacker to deny service locally...

CVE-2026-47333

Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which can potentially incorrectly compute the size of an internal buffer, leading to a heap memory out-of-bounds read in notification handling code. The bug can be triggered by an unprivileged local user and can result in invalid data...

CVE-2026-47333

Summary (MODE C) : Ubuntu Linux 6.8, 6.17 and 7.0 include AppArmor SAUCE patches which may miscompute an internal buffer size, causing a heap memory out-of-bounds read in the AppArmor DFA policy engine’s notification handling code. The issue can be triggered by an unprivileged local user and can ...

EUVD-2026-32988

Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which can potentially incorrectly compute the size of an internal buffer, leading to a heap memory out-of-bounds read in notification handling code. The bug can be triggered by an unprivileged local user and can result in invalid data...