AZL-101187 CVE-2026-90035 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix division by zero in getestimatedbw getestimatedbw divides by link-dpiabwallocconfig.bwgranularity, which is zeroed by resetbwallocstruct and only populated once DPTUNNELINGBWALLOCCAPCHANGED has been handled...

AZL-101474 CVE-2026-89821 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid divide-by-zero in islutlinear islutlinear computes the expected value of each entry with expected = i MAXDRMLUTVALUE / size - 1; If it is ever called with a single-entry LUT, size - 1 is zero and the kernel...

CVE-2026-89819

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: validate plane degamma LUT size for private color prop Unlike the CRTC degamma path, which is guarded by amdgpudmverifylutsizes, the per-plane degamma LUT size was never validated before use. setdmplanedegamma...

EUVD-2026-80643

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix division by zero in getestimatedbw getestimatedbw divides by link-dpiabwallocconfig.bwgranularity, which is zeroed by resetbwallocstruct and only populated once DPTUNNELINGBWALLOCCAPCHANGED has been handled...

CVE-2026-90035

CVE-2026-90035 affects the Linux kernel AMD display driver (drm/amd/display ). The root cause is a division by zero in the get_estimated_bw() function, which divides by link->dpia_bw_alloc_config.bw_granularity—a value zeroed by reset_bw_alloc_struct() and only populated after DP_TUNNELING_BW_...

CVE-2026-90035 drm/amd/display: fix division by zero in get_estimated_bw()

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix division by zero in getestimatedbw getestimatedbw divides by link-dpiabwallocconfig.bwgranularity, which is zeroed by resetbwallocstruct and only populated once DPTUNNELINGBWALLOCCAPCHANGED has been handled...

CVE-2026-89821 drm/amd/display: avoid divide-by-zero in __is_lut_linear()

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid divide-by-zero in islutlinear islutlinear computes the expected value of each entry with expected = i MAXDRMLUTVALUE / size - 1; If it is ever called with a single-entry LUT, size - 1 is zero and the kernel...

CVE-2026-89821

CVE-2026-89821 affects the Linux kernel DRM AMD display subsystem. The function __is_lut_linear() computes each LUT entry as i * MAX_DRM_LUT_VALUE / (size - 1). When called with a single-entry LUT , the divisor becomes zero, triggering a kernel divide error (#DE) . Since a LUT with fewer than two...

EUVD-2026-80421

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid divide-by-zero in islutlinear islutlinear computes the expected value of each entry with expected = i MAXDRMLUTVALUE / size - 1; If it is ever called with a single-entry LUT, size - 1 is zero and the kernel...

CVE-2026-89819 drm/amd/display: validate plane degamma LUT size for private color prop

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: validate plane degamma LUT size for private color prop Unlike the CRTC degamma path, which is guarded by amdgpudmverifylutsizes, the per-plane degamma LUT size was never validated before use. setdmplanedegamma...

CVE-2026-89819 drm/amd/display: validate plane degamma LUT size for private color prop

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: validate plane degamma LUT size for private color prop Unlike the CRTC degamma path, which is guarded by amdgpudmverifylutsizes, the per-plane degamma LUT size was never validated before use. setdmplanedegamma...

EUVD-2026-80419

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: validate plane degamma LUT size for private color prop Unlike the CRTC degamma path, which is guarded by amdgpudmverifylutsizes, the per-plane degamma LUT size was never validated before use. setdmplanedegamma...

CVE-2026-89819

CVE-2026-89819 is a Linux kernel vulnerability in the AMD display driver (drm/amd/display). The per-plane degamma LUT size was never validated before use, unlike the CRTC degamma path which is guarded by amdgpu_dm_verify_lut_sizes(). A malformed AMD_PLANE_DEGAMMA_LUT blob could trigger a divide-b...

CVE-2023-40296

CVE-2023-40296 async-sockets-cpp 0.3.1まで には、udpsocket.hpp の160〜167行目付近にある static void ReceiveFromUDPSocket udpSocket において、off-by-one バッファオーバーフローの脆弱性が存在します。このバッファオーバーフローは、対応するすべてのUDPサーバーに影響を与えます。リモートからのバッファオーバーフローは、UDPソケットに接続し、大きなバイトバッファを送信することで引き起こされます。...

CVE-2024-6460

CVE--2024-6460 Grow by Tradedoubler 2.0.22 未満 - 認証なし LFI 使用法 root@kitploit: ausage: CVE-2024-6460.py -h -u URL -U USERNAME -P PASSWORD -c COMPONENT Grow by Tradedoubler 2.0.22 - Unauthenticated LFI options: -h, --help show this help message and exit -u URL, --url URL Target WordPress site URL e.g...

CVE-2026-89783

In the Linux kernel, the following vulnerability has been resolved: xfrm6: fix out-of-bounds write in xfrm6inputaddr when secpath is full The depth check in xfrm6inputaddr is off by one: if 1 + sp-len == XFRMMAXDEPTH goto drop; ... sp-xvecsp-len++ = x; xfrminput can leave sp-len == XFRMMAXDEPTH,...

CVE-2026-89790 ipv6: avoid divide by zero in rt6_multipath_rebalance

In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid divide by zero in rt6multipathrebalance rt6multipathrebalance calculates the total eligible nexthop weight in one pass and programs upper bounds in a second pass. Since RTMNEWROUTE is RTNL-free, a concurrent...

CVE-2026-89790

CVE-2026-89790 is a divide-by-zero vulnerability in the Linux kernel IPv6 routing code, specifically in rt6_multipath_rebalance() (net/ipv6/route.c). Because RTM_NEWROUTE operates without the RTNL lock, a concurrent update to ignore_routes_with_linkdown can cause the first pass to compute a zero ...

EUVD-2026-80311

In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid divide by zero in rt6multipathrebalance rt6multipathrebalance calculates the total eligible nexthop weight in one pass and programs upper bounds in a second pass. Since RTMNEWROUTE is RTNL-free, a concurrent...

CVE-2026-89790

In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid divide by zero in rt6multipathrebalance rt6multipathrebalance calculates the total eligible nexthop weight in one pass and programs upper bounds in a second pass. Since RTMNEWROUTE is RTNL-free, a concurrent...