boringssl

BoringSSL BoringSSL is a fork of OpenSSL that is designed to meet Google's needs. Although BoringSSL is an open source project, it is not intended for general use, as OpenSSL is. We don't recommend that third parties depend upon it. Doing so is likely to be frustrating because there are no...

CVE-2026-104016

A flaw was found in jackson-dataformat-protobuf. This vulnerability allows a remote attacker to cause a Denial of Service DoS by sending specially crafted Protocol Buffers data. Due to an integer overflow during bounds checking for length-prefixed string and byte fields, the parser bypasses...

CVE-2026-43494-PinTheft-PoC

SLEY — PinTheft PoC CVE-2026-43494 Proof of concept — uid=1000raken → uid=0root after ./sley on WSL2 6.6.87.2-microsoft-standard-WSL2 Single-file proof-of-concept for CVE-2026-43494 PinTheft: a Linux kernel local privilege escalation that chains an RDS zerocopy reference-count bug with iouring...

CVE-2026-99047

A flaw was found in the Google Virtual Ethernet gve driver in the Linux kernel. When stopping network queues and resetting the ring state, the driver fails to release eXpress Data Path socket XSK buffers posted to the network interface. A local user with network administrative privileges can...

CVE-2026-99046

A flaw was found in the Linux kernel's Google Virtual Ethernet gve driver. A remote attacker could cause a Denial of Service DoS by generating network traffic that triggers receive errors on interfaces configured with zero-copy packet buffers. Because the driver fails to release the associated...

CVE-2026-99028

A flaw was found in the Linux kernel's Xilinx Axi Ethernet driver. During network interface shutdown, the driver fails to unmap and release active Direct Memory Access DMA buffers and suffers from a race condition during teardown. A privileged local user could exploit this vulnerability by...

CVE-2026-99164

In the Linux kernel, the following vulnerability has been resolved: spi: imx: fix slab corruption from undersized DMA bounce buffers Since commit faa8e404ad8e "spi: imx: support dynamic burst length for ECSPI DMA mode", the driver allocates its private DMA TX/RX buffers with kzallocdmalen, where...

CVE-2026-43494-PinTheft-PoC

SLEY — PinTheft PoC CVE-2026-43494 Proof of concept — uid=1000raken → uid=0root after ./sley on WSL2 6.6.87.2-microsoft-standard-WSL2 Single-file proof-of-concept for CVE-2026-43494 PinTheft: a Linux kernel local privilege escalation that chains an RDS zerocopy reference-count bug with iouring...

CVE-2026-99164

In the Linux kernel, the following vulnerability has been resolved: spi: imx: fix slab corruption from undersized DMA bounce buffers Since commit faa8e404ad8e "spi: imx: support dynamic burst length for ECSPI DMA mode", the driver allocates its private DMA TX/RX buffers with kzallocdmalen, where...

CVE-2026-99164 spi: imx: fix slab corruption from undersized DMA bounce buffers

In the Linux kernel, the following vulnerability has been resolved: spi: imx: fix slab corruption from undersized DMA bounce buffers Since commit faa8e404ad8e "spi: imx: support dynamic burst length for ECSPI DMA mode", the driver allocates its private DMA TX/RX buffers with kzallocdmalen, where...

EUVD-2026-111916

In the Linux kernel, the following vulnerability has been resolved: spi: imx: fix slab corruption from undersized DMA bounce buffers Since commit faa8e404ad8e "spi: imx: support dynamic burst length for ECSPI DMA mode", the driver allocates its private DMA TX/RX buffers with kzallocdmalen, where...

CVE-2026-99164

The Linux kernel contains a vulnerability in the spi: imx driver where private DMA TX/RX buffers are allocated with kzalloc(dma_len), rounding only to 4 bytes, while the DMA API maps, syncs, and unmaps them using DMA_CACHE_ALIGNED_LEN(dma_len). This mismatch causes the DMA API to operate on memor...

CVE-2026-99164 spi: imx: fix slab corruption from undersized DMA bounce buffers

In the Linux kernel, the following vulnerability has been resolved: spi: imx: fix slab corruption from undersized DMA bounce buffers Since commit faa8e404ad8e "spi: imx: support dynamic burst length for ECSPI DMA mode", the driver allocates its private DMA TX/RX buffers with kzallocdmalen, where...

CVE-2021-21401_nanopb-c_AOSP10_R33

Nanopb - Protocol Buffers for Embedded Systems Nanopb is a small code-size Protocol Buffers implementation in ansi C. It is especially suitable for use in microcontrollers, but fits any memory restricted system. Homepage: https://jpa.kapsi.fi/nanopb/ Documentation: https://jpa.kapsi.fi/nanopb/doc...

Linux Distros Unpatched Vulnerability : CVE-2026-99164

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: imx: fix slab corruption from undersized DMA bounce buffers Since commit faa8e404ad8e spi: imx: support dynamic burst length for ECSPI DMA mode, the driver...

UBUNTU-CVE-2026-99164

In the Linux kernel, the following vulnerability has been resolved: spi: imx: fix slab corruption from undersized DMA bounce buffers Since commit faa8e404ad8e "spi: imx: support dynamic burst length for ECSPI DMA mode", the driver allocates its private DMA TX/RX buffers with kzallocdmalen, where...

PT-2026-127241

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, app sms.c copies externally controlled SMS lengths into fixed in-struct buffers without sufficient bounds checks, allowing ...

CVE-2026-99028

In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Free outstanding DMA buffers on dmaengine stop In the dmaengine path the driver pre-submits RX buffers and holds in-flight TX buffers whose SKBs are DMA-mapped by the driver and freed only in the completion...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.17. It stems from GVE failing to release XSK buffers when stopping queues and resetting ring states, resulting in a leak of XSK buffers submitted to the NIC...

CVE-2026-98668

A flaw was found in the Linux kernel's Industrial I/O IIO subsystem. This vulnerability allows information disclosure when the kernel processes unaligned data buffers with timestamps enabled. Because the allocated buffer is not properly cleared before being shared with user space, a local user ca...