Lucene search
+L

4098 matches found

CVE
CVE
added 2026/07/19 3:39 p.m.15 views

CVE-2026-64086

The CVE-2026-64086 issue affects the Linux kernel PMBUS adm1266 hwmon path. A read transaction for the pmbus_block_xfer path set .len to ADM1266_PMBUS_BLOCK_MAX + 2 while read_buf was declared as ADM1266_PMBUS_BLOCK_MAX + 1. For max-length block responses, this allowed writing 257 bytes into a 25...

7.8CVSS5.3AI score0.00139EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/07/19 3:39 p.m.8 views

EUVD-2026-45659

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 include PEC byte in pmbusblockxfer read buffer adm1266pmbusblockxfer sets up the read transaction with .buf = data-readbuf, .len = ADM1266PMBUSBLOCKMAX + 2, but readbuf in struct adm1266data is declared as u8...

5.3AI score0.00139EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/19 3:39 p.m.7 views

CVE-2026-64086 hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 include PEC byte in pmbusblockxfer read buffer adm1266pmbusblockxfer sets up the read transaction with .buf = data-readbuf, .len = ADM1266PMBUSBLOCKMAX + 2, but readbuf in struct adm1266data is declared as u8...

7.8CVSS5.3AI score
SaveExploits0References11
OSV
OSV
added 2026/07/19 2:56 p.m.5 views

CVE-2026-64006 netfilter: nf_tables: fix dst corruption in same register operation

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fix dst corruption in same register operation For lshift and rshift, the shift operations are performed in a loop over 32-bit words. The loop calculates the shifted value and write it to dst, and then...

5.5AI score
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2026/07/19 2:55 p.m.7 views

CVE-2026-63959

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm/tcpcimaxim: validate header NDO against RXBYTECNT A broken/malicious port can transmit a CRC-valid frame whose header advertises up to seven data objects but whose body carries fewer than that. Check for this, an...

5.3AI score0.002EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
added 2026/07/19 2:55 p.m.6 views

CVE-2026-63959

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm/tcpcimaxim: validate header NDO against RXBYTECNT A broken/malicious port can transmit a CRC-valid frame whose header advertises up to seven data objects but whose body carries fewer than that. Check for this, an...

5.2AI score0.002EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/07/19 2:55 p.m.36 views

CVE-2026-63959 usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm/tcpcimaxim: validate header NDO against RXBYTECNT A broken/malicious port can transmit a CRC-valid frame whose header advertises up to seven data objects but whose body carries fewer than that. Check for this, an...

0.002EPSS
SaveExploits0References5
CVE
CVE
added 2026/07/19 2:55 p.m.19 views

CVE-2026-63959

The CVE-2026-63959 vulnerability affects the Linux kernel USB Type-C support (tcpm/tcpci_maxim). A broken/malicious USB-C port could transmit a CRC-valid frame where the header advertises up to seven data objects but the body carries fewer, causing the driver to read from uninitialized stack memo...

5.3AI score0.002EPSS
SaveExploits0References5
CVE
CVE
added 2026/07/19 2:55 p.m.29 views

CVE-2026-63957

The CVE-2026-63957 issue affects the Linux kernel USB serial safe_serial implementation. The vulnerability is a memory corruption risk when using a small endpoint, arising from an inadequately sized bulk-out buffer; in safe mode, a malicious device reporting a smaller size could lead to user-cont...

5.7AI score0.00211EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/19 2:55 p.m.7 views

CVE-2026-63957 USB: serial: safe_serial: fix memory corruption with small endpoint

In the Linux kernel, the following vulnerability has been resolved: USB: serial: safeserial: fix memory corruption with small endpoint Make sure that the bulk-out buffer size is at least eight bytes to avoid user-controlled slab corruption in "safe" mode should a malicious device report a smaller...

5.7AI score
SaveExploits0References11
Debian CVE
Debian CVE
added 2026/07/19 2:55 p.m.8 views

CVE-2026-63957

In the Linux kernel, the following vulnerability has been resolved: USB: serial: safeserial: fix memory corruption with small endpoint Make sure that the bulk-out buffer size is at least eight bytes to avoid user-controlled slab corruption in "safe" mode should a malicious device report a smaller...

5.6AI score0.00211EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/07/19 2:55 p.m.30 views

CVE-2026-63957 USB: serial: safe_serial: fix memory corruption with small endpoint

In the Linux kernel, the following vulnerability has been resolved: USB: serial: safeserial: fix memory corruption with small endpoint Make sure that the bulk-out buffer size is at least eight bytes to avoid user-controlled slab corruption in "safe" mode should a malicious device report a smaller...

0.00211EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2026/07/19 2:55 p.m.7 views

CVE-2026-63956

In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypressm8: fix memory corruption with small endpoint Make sure that the interrupt-out endpoint max packet size is at least eight bytes to avoid user-controlled slab corruption or NULL-pointer dereference should a...

5.4AI score0.00211EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/07/19 2:55 p.m.30 views

CVE-2026-63956 USB: serial: cypress_m8: fix memory corruption with small endpoint

In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypressm8: fix memory corruption with small endpoint Make sure that the interrupt-out endpoint max packet size is at least eight bytes to avoid user-controlled slab corruption or NULL-pointer dereference should a...

0.00211EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2026/07/19 2:55 p.m.7 views

CVE-2026-63915

In the Linux kernel, the following vulnerability has been resolved: nfc: hci: fix out-of-bounds read in HCP header parsing Both nfchcirecvfromllc and ncihcidatareceivedcb read packet-header from skb-data at function entry without first checking that the buffer holds at least one byte. A malicious...

8.8CVSS5.4AI score0.00345EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/07/19 2:55 p.m.16 views

CVE-2026-63908

In the Linux kernel, the following vulnerability has been resolved: Input: atmelmxtts - fix boundary check in mxtpreparecfgmem When a configuration file provides an object size that is larger than the driver's known mxtobjsizeobject, the driver intends to discard the extra bytes. The loop iterate...

5.4AI score0.00211EPSS
SaveExploits0
OSV
OSV
added 2026/07/19 2:55 p.m.5 views

CVE-2026-63899 USB: serial: mxuport: fix memory corruption with small endpoint

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mxuport: fix memory corruption with small endpoint Make sure that the bulk-out endpoint max packet size is at least eight bytes to avoid user-controlled slab corruption should a malicious device report a smaller size...

5.5AI score
SaveExploits0References11
Cvelist
Cvelist
added 2026/07/19 2:55 p.m.31 views

CVE-2026-63898 USB: serial: mct_u232: fix memory corruption with small endpoint

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mctu232: fix memory corruption with small endpoint The driver overrides the maximum transfer size for a specific device which only accepts 16 byte packets for its 32 byte bulk-out endpoint. Make sure to never increas...

0.00211EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2026/07/19 2:55 p.m.8 views

CVE-2026-63898

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mctu232: fix memory corruption with small endpoint The driver overrides the maximum transfer size for a specific device which only accepts 16 byte packets for its 32 byte bulk-out endpoint. Make sure to never increas...

5.4AI score0.00211EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/19 12:0 a.m.10 views

PT-2026-61274

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Memory corruption occurs in the USB serial safe mode when a malicious device reports a bulk-out buffer size smaller than eight bytes. This can lead to user-controlled slab corruption,...

5.5AI score0.00211EPSS
SaveExploits0
Rows per page
Query Builder