CVE-2026-64088

A flaw was found in the Linux kernel's batman-adv component. An integer overflow vulnerability exists where the 'ttbufflen' variable, intended to be a positive length, can become a negative value. This occurs when a large value is assigned, causing it to wrap around. This incorrect negative value...

CVE-2026-64081

A flaw was found in the Linux kernel's ARM Firmware Framework for Arm armffa component. This vulnerability arises from insufficient validation of framework notification message layouts. A local attacker, by providing specially crafted firmware data in the shared RX buffer, could trigger an...

CVE-2026-64135

A flaw was found in the Linux kernel's pmbus/adm1266 driver. This vulnerability occurs because the adm1266nvmemreadblackbox function uses a small, fixed-size buffer to read data from an I2C Inter-Integrated Circuit device. If the device sends more data than the buffer can hold, it causes a buffer...

CVE-2026-64089

A flaw was found in the Linux kernel's batman-adv module. An integer overflow vulnerability in the lastchangesetlen field can cause it to become a negative value. This leads to a buffer being improperly initialized, potentially exposing sensitive information. A local attacker could exploit this t...

CVE-2026-64085

A flaw was found in the Linux kernel's pmbus/adm1266 driver, which is responsible for hardware monitoring. This vulnerability occurs because the driver does not properly handle data sizes when reading blackbox records from a device. A malicious or malformed device could send more data than...

CVE-2026-64056

A flaw was found in the Linux kernel's Cortina ethernet driver for Gemini devices. The driver used a single, shared buffer SKB, or Socket Kernel Buffer for assembling incoming network packets across multiple ethernet ports. This shared resource could lead to race conditions, where simultaneous...

PT-2026-61847

Name of the Vulnerable Software and Affected Versions libssh affected versions not specified Description A flaw exists in libssh during SFTP server directory listing. The longname field is constructed using unsafe concatenation into a fixed-size stack buffer. An attacker can trigger a stack buffe...

PT-2026-62037

Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description Buffer overflow vulnerabilities exist in the command line interface of AOS-CX. A remote high-privileged user could exploit these issues to execute arbitrary code as a privileged user on the...

PT-2026-62001

Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description A buffer overflow occurs in the command line interface, which could allow a remote low-privileged user to execute arbitrary code with privileged permissions on the underlying operating system...

PT-2026-62124

The CONFIG USERSPACE syscall verifier z vrfy k poll in kernel/poll.c allocates a kernel-side copy of the user-supplied k poll event via z thread malloc and then validates each event's object handle. Before this fix, validation used K OOPSK SYSCALL OBJ... inline inside the loop, which kills the...

EulerOS Virtualization 2.10.1 : httpd (EulerOS-SA-2026-2822)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's modmd via OCSP response data.CVE-2026-291...

AlmaLinux 9 : httpd (ALSA-2026:41906)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:41906 advisory. httpd: incomplete fix for CVE-2023-38709 CVE-2024-42516 Apache HTTP Server: modrewrite: Apache HTTP Server: Privilege Escalation via .htaccess file...

EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2735)

According to the versions of the package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to...

ALSA-2026:42828 Important: httpd:2.4 security, bug fix, and enhancement update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: incomplete fix for CVE-2023-38709 CVE-2024-42516 httpd: NULL pointer dereference via specially crafted request CVE-2026-29169 httpd: Apache HTTP Server: Heap-based Buffer...

Debian dla-4690 : liblzma-dev - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4690 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4690-1 [email protected] https://www.debian.org/lts/security/...

Oracle Linux 10 : nginx (ELSA-2026-36364)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-36364 advisory. - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers CVE-2026-420...

EulerOS Virtualization 2.10.0 : httpd (EulerOS-SA-2026-2853)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's modmd via OCSP response data.CVE-2026-291...

ALSA-2026:42668 Important: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image CVE-2026-12912 For more details about the security issues, including the impact, a CVSS...

PT-2026-61996

In Eclipse OpenJ9 versions up to 0.60, using -Xtrace to trace method arguments can lead to buffer underflow...

HPESBNW05081 rev.2 - Multiple Vulnerabilities in HPE Aruba Networking AOS-CX

Potential Security Impact: Remote: Directory Traversal, Unauthorized Access, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba CX 10000 Switch Series See Affected Products section for impacted versions. Aruba CX 4100i Switch Series See Affected Products section...