PT-2026-87600

Name of the Vulnerable Software and Affected Versions Windows iSCSI affected versions not specified Description An incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Recommendations At the...

CVE-2026-69598: Incorrect Calculation of Buffer Size

Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network...

CVE-2026-86736: Incorrect Calculation

snipe-it before 8.7.0 contains an incorrect calculation vulnerability in checkout request handling that allows authenticated users to corrupt the assets.requestscounter through duplicate submissions and cancellations without active requests. Attackers can repeatedly call cancel endpoints without...

CVE-2026-78221

An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7alpha1 through 2.7.6 allows local authenticated users to cause memory corruption or disclose sensitive information via crafted NRPT inputs...

EUVD-2026-72276

An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7alpha1 through 2.7.6 allows local authenticated users to cause memory corruption or disclose sensitive information via crafted NRPT inputs...

ROS-20260907-73-0040

The vulnerability in ffmpeg is related to incorrect calculation of buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053224)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053224 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix Virtual Memory mapping boundaries calculation Calculating the size of the mappe...

SUSE CVE-2026-80907

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD dpb min size calculation for H264 This should use actual number of references from the decode message, instead of maximum derived from level. cherry picked from commit 64b525edb7e7bdfcdc77883c5e413804e2396856...

SUSE CVE-2026-80909

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with invalid number of h265 refs Same change as for h264, avoids overflow later when calculating min dpb size. cherry picked from commit a4b0720e4f1601f97f59a2be9c1b4b94fa6527d5...

AZL-99648 CVE-2026-80907 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD dpb min size calculation for H264 This should use actual number of references from the decode message, instead of maximum derived from level. cherry picked from commit 64b525edb7e7bdfcdc77883c5e413804e2396856...

AZL-99636 CVE-2026-80909 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with invalid number of h265 refs Same change as for h264, avoids overflow later when calculating min dpb size. cherry picked from commit a4b0720e4f1601f97f59a2be9c1b4b94fa6527d5...

CVE-2026-80908 drm/amdgpu: Reject UVD message with dimensions above 4096

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with dimensions above 4096 Fixes potential overflow in DPB size calculations. cherry picked from commit 05e1387d151f71569fbe122d2c89f9db0c21dc10...

CVE-2026-80907 drm/amdgpu: Fix UVD dpb min size calculation for H264

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD dpb min size calculation for H264 This should use actual number of references from the decode message, instead of maximum derived from level. cherry picked from commit 64b525edb7e7bdfcdc77883c5e413804e2396856...

EUVD-2026-71666

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD dpb min size calculation for H264 This should use actual number of references from the decode message, instead of maximum derived from level. cherry picked from commit 64b525edb7e7bdfcdc77883c5e413804e2396856...

CVE-2026-80907 drm/amdgpu: Fix UVD dpb min size calculation for H264

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD dpb min size calculation for H264 This should use actual number of references from the decode message, instead of maximum derived from level. cherry picked from commit 64b525edb7e7bdfcdc77883c5e413804e2396856...

PT-2026-86199

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential overflow exists in the DPB size calculations within the drm/amdgpu component. This occurs when processing UVD messages with dimensions exceeding 4096. Recommendations At the...

CVE-2026-80907: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD dpb min size calculation for H264 This should use actual number of references from the decode message, instead of maximum derived from level. cherry picked from commit 64b525edb7e7bdfcdc77883c5e413804e2396856...

Linux Distros Unpatched Vulnerability : CVE-2026-80901

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvs: fix the checksum validations ipvsinicmpv6 is missing checksum validation for ICMPv6 packets from clients. In fact, as for TCP/UDP we should validate the...

PT-2026-86192

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the IPVS IP Virtual Server component where checksum validations are missing or incorrect for certain packet types. Specifically, the ip vs in icmp v6 function fails to...

The vulnerability of the macvlan_get_size() function in the drivers/net/macvlan.c module of the Linux kernel’s network device drivers allows a attacker to cause a service failure.

The vulnerability of the macvlangetsize function in the drivers/net/macvlan.c file of the Linux kernel’s network device driver module is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...