Lucene search
+L

319203 matches found

CVE
CVE
added 2026/07/25 8:50 a.m.14 views

CVE-2026-64381

The CVE-2026-64381 issue is in the Linux kernel SMB client code path used by receive_encrypted_standard()/receive encrypted standard(): a next_buffer is allocated before validating that the number of compound PDUs has not exceeded MAX_COMPOUND. If the limit check fails, the function returns early...

5.9AI score0.00177EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2026/07/25 8:50 a.m.8 views

CVE-2026-64381

In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix next buffer leak in receiveencryptedstandard receiveencryptedstandard allocates nextbuffer before checking whether the number of compound PDUs already reached MAXCOMPOUND. If the limit check fails, the function...

5.9AI score0.00177EPSS
SaveExploits0
OSV
OSV
added 2026/07/25 8:50 a.m.5 views

CVE-2026-64381 smb: client: Fix next buffer leak in receive_encrypted_standard()

In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix next buffer leak in receiveencryptedstandard receiveencryptedstandard allocates nextbuffer before checking whether the number of compound PDUs already reached MAXCOMPOUND. If the limit check fails, the function...

5.9AI score
SaveExploits0References11
CVE
CVE
added 2026/07/25 8:50 a.m.29 views

CVE-2026-64382

CVE-2026-64382 describes a Linux kernel SMB client-use-after-free issue in SMB2_open() replay handling. The vulnerability arises because a response-bearing SMB2_open attempt could return a replayable error and free its response buffer; if SMB2_open_init() fails before the next send, cleanup may f...

8.8CVSS5.9AI score0.00354EPSS
SaveExploits0References5
CVE
CVE
added 2026/07/25 8:50 a.m.15 views

CVE-2026-64372

Summary: CVE-2026-64372 affects the Linux kernel cpufreq/pcc OSC evaluation path. The defect arises in pcc_cpufreq_do_osc(), which calls acpi_evaluate_object() twice for the two‑phase _OSC negotiation. Between the calls, output.pointer is freed while output.length remains, causing the second call...

7.8CVSS5.9AI score0.00126EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/07/25 8:50 a.m.29 views

CVE-2026-64367 HID: hid-goodix-spi: validate report size to prevent stack buffer overflow

In the Linux kernel, the following vulnerability has been resolved: HID: hid-goodix-spi: validate report size to prevent stack buffer overflow goodixhidsetrawreport builds a protocol frame in a 128-byte stack buffer tmpbuf, writing an 11-12 byte header followed by the caller-supplied report data...

7.8CVSS0.00142EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/25 8:50 a.m.15 views

CVE-2026-64367

CVE-2026-64367 : Linux kernel HID GOODIX SPI driver (hid-goodix-spi) vulnerability where goodix_hid_set_raw_report() copies payload into a 128-byte stack buffer without proper bounds checking. The header is ~11–12 bytes, and the HID core caps at HID_MAX_BUFFER_SIZE (16384) by default, but the dri...

7.8CVSS5.9AI score0.00142EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/07/25 8:50 a.m.8 views

EUVD-2026-48911

In the Linux kernel, the following vulnerability has been resolved: HID: hid-goodix-spi: validate report size to prevent stack buffer overflow goodixhidsetrawreport builds a protocol frame in a 128-byte stack buffer tmpbuf, writing an 11-12 byte header followed by the caller-supplied report data...

5.9AI score0.00142EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/25 8:50 a.m.17 views

CVE-2026-64360

CVE-2026-64360 affecting the Linux kernel’s HFS/HFS+ code (hfs_bnode_read) was fixed by zero-initializing the output buffer at the start of hfs_bnode_read to ensure deterministic zero values across all paths. The bug allowed early returns when is_bnode_offset_valid() failed or when check_and_corr...

5.9AI score0.00177EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2026/07/25 8:50 a.m.9 views

CVE-2026-64360

In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: zero-initialize buffer in hfsbnoderead hfsbnoderead can return early without writing to the output buffer when isbnodeoffsetvalid fails or when checkandcorrectrequested length corrects the length to zero. Callers suc...

5.9AI score0.00177EPSS
SaveExploits0
EUVD
EUVD
added 2026/07/25 8:50 a.m.9 views

EUVD-2026-48904

In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: zero-initialize buffer in hfsbnoderead hfsbnoderead can return early without writing to the output buffer when isbnodeoffsetvalid fails or when checkandcorrectrequested length corrects the length to zero. Callers suc...

5.9AI score0.00177EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/07/25 8:50 a.m.29 views

CVE-2026-64354 bpf: Validate BTF repeated field counts before expansion

In the Linux kernel, the following vulnerability has been resolved: bpf: Validate BTF repeated field counts before expansion btfparsestructmetas walks user-supplied BTF during BPFBTFLOAD, and btfrepeatfields expands repeatable fields from array elements into the fixed BTFFIELDSMAX scratch array...

7.8CVSS0.00129EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/07/25 8:50 a.m.9 views

EUVD-2026-48898

In the Linux kernel, the following vulnerability has been resolved: bpf: Validate BTF repeated field counts before expansion btfparsestructmetas walks user-supplied BTF during BPFBTFLOAD, and btfrepeatfields expands repeatable fields from array elements into the fixed BTFFIELDSMAX scratch array...

5.7AI score0.00129EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/07/25 8:50 a.m.7 views

EUVD-2026-48883

In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: bound bulk IN response length to the received transfer usbiobulkmsg copies bpktlen = le16tocpubpkt-len bytes out of the bulk IN buffer usbio-rxbuf, allocated with size usbio-rxbuflen into the caller's buffer...

6AI score0.00198EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/25 8:50 a.m.12 views

CVE-2026-64339

CVE-2026-64339 affects the Linux kernel USB IO stack (usbio_bulk_msg). A malicious device that advertises a large bulk OUT and small bulk IN endpoint can set bpkt_len (from bpkt->len) to exceed rxbuf_len, causing memcpy to read past rxbuf and leak adjacent slab memory via i2c-dev. The code alr...

6AI score0.00198EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/25 8:49 a.m.10 views

EUVD-2026-48877

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digiacceleport: fix write buffer corruption The digiwriteinbcommand is supposed to wait for the write urb to become available or return an error, but instead it updates the transfer buffer and tries to resubmit the u...

6AI score0.00164EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2026/07/25 8:49 a.m.12 views

CVE-2026-64333

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digiacceleport: fix write buffer corruption The digiwriteinbcommand is supposed to wait for the write urb to become available or return an error, but instead it updates the transfer buffer and tries to resubmit the u...

7.8CVSS5.9AI score0.00164EPSS
SaveExploits0
CVE
CVE
added 2026/07/25 8:49 a.m.18 views

CVE-2026-64333

The CVE-2026-64333 issue affects the Linux kernel USB serial driver digi_acceleport. The vulnerability was caused by digi_write_inb_command() not properly handling timeouts: it could update the transfer buffer and resubmit the URB on timeout, and for break-control type commands with no timeout it...

7.8CVSS6AI score0.00164EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/07/25 8:49 a.m.37 views

CVE-2026-64333 USB: serial: digi_acceleport: fix write buffer corruption

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digiacceleport: fix write buffer corruption The digiwriteinbcommand is supposed to wait for the write urb to become available or return an error, but instead it updates the transfer buffer and tries to resubmit the u...

7.8CVSS0.00164EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/25 8:49 a.m.8 views

CVE-2026-64333 USB: serial: digi_acceleport: fix write buffer corruption

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digiacceleport: fix write buffer corruption The digiwriteinbcommand is supposed to wait for the write urb to become available or return an error, but instead it updates the transfer buffer and tries to resubmit the u...

7.8CVSS5.9AI score
SaveExploits0References11
Rows per page
Query Builder