CVE-2026-97522

A flaw was found in the Linux kernel's MultiPath TCP MPTCP subsystem. When an error occurs while pushing pending data across subflows, the kernel improperly updates the transmitted byte counter with a negative error code instead of only accounting for successful transmissions. This accounting...

CVE-2026-97399 One-byte overread in strncasecmp on Power8

The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker...

CVE-2026-97399 One-byte overread in strncasecmp on Power8

The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker...

CVE-2026-97399

The GNU C Library (glibc) 2.24 and later versions optimized for the Power8 architecture contain a one-byte overread in the strncasecmp function. This vulnerability occurs when attacker-controlled input strings match up to the edge of a memory page, causing the function to read one byte into a nei...

CVE-2026-94285

An out-of-bounds read in libX11's byte-oriented codeset parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients...

CVE-2026-94285

A flaw was found in libX11. An out-of-bounds read vulnerability in the byte-oriented codeset parser allows a malicious X Window System server to cause a Denial of Service DoS by crashing connected client applications. This issue may also allow the server to access limited memory contents from the...

CVE-2026-94285

The libX11 library (versions before 1.8.14 ) is susceptible to an out-of-bounds read vulnerability within its byte-oriented codeset parser . This flaw could be exploited by a malicious X server to cause a crash in attached X clients. No information regarding specific exploits or in-the-wild explo...

Exploit for Incorrect Authorization in Traefik

CVE-2026-88008 — Traefik: unauthorised h2c upgrade tunnels pas...

CVE-2026-100505 Ghidra 9.2 through 12.1.4 Heap Out-of-Bounds Read via StringManager

Ghidra versions 9.2 through 12.1.4 contain a heap out-of-bounds read vulnerability in StringManager::getCodepoint when decoding multi-byte UTF-8, UTF-16, or UTF-32 characters without validating remaining buffer length. Attackers can craft malicious binaries containing strings or constant byte...

CVE-2026-92842

A flaw was found in PHP. When processing certain conversion stream filters with line-break settings containing a null byte, the filter duplicates the string but retains the original length rather than the truncated size. An attacker who can influence filter options could exploit this out-of-bound...

AZL-104675 CVE-2026-98115 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...

EUVD-2026-86946

In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...

CVE-2026-98115

The Linux kernel contains a vulnerability in ksmbd regarding the handling of SMB3 multichannel requests. The issue arises because shared session objects may be freed before all bound channels are processed. Additionally, a deferred byte-range lock can remain counted as a running request, waking o...

CVE-2026-98115: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...

ROS-20260925-73-0161

The vulnerability of the funexecop function in the drivers/mtd/nand/raw/fslupm.c file of the memory driver for the Linux operating system is related to a single-byte offset error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

Linux Distros Unpatched Vulnerability : CVE-2026-98115

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a...

SUSE CVE-2026-73064

In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers...

CVE-2026-73064

A flaw was found in Mbed TLS. An attacker who can cause an entropy source to fail can remove or inject bytes into the start of the Transport Layer Security TLS stream. This vulnerability specifically affects TLS 1.3 servers, potentially compromising the integrity of communication...

DEBIAN-CVE-2026-73064

In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers...

AZL-105561 CVE-2026-73064 affecting package nodejs 24.21.0-1

In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers...