289267 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-63794
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: SVM: Fix page overflow in sevdbgcrypt for ENCRYPT path In sevdbgcrypt, the per-iteration transfer length is bounded by the source page offset PAGESIZE - so...
PT-2026-61158
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/jpeg component where JPEG v5.0.1 rings do not support 64-bit user fence writes. This leads to a failure to reject Command Stream CS submissions that...
PT-2026-61164
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/jpeg component where JPEG v2.5 rings do not support 64-bit user fence writes. A user fence is a synchronization mechanism used to coordinate tasks betwe...
PT-2026-61516
Meshtastic is an open source mesh networking solution. Prior to version 2.7.21.1370b23, the Meshtastic GitHub repository's main matrix.yml workflow is triggered by pull request target and multiple jobs check out the attacker's fork code and execute it with access to repository secrets and elevate...
PT-2026-61208
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the thunderbolt component where the tb property parse dir function lacks a recursion depth counter when processing DIRECTORY entries. A malicious XDomain peer can crea...
PT-2026-61401
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read and write issue exists in the adm1266 gpio get multiple function. The function incorrectly uses the PMBus command code ADM1266 PDIO STATUS as an upper bound for...
PT-2026-61420
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the device removal path of the ISCI driver. The completion tasklet is initialized during isci host alloc and scheduled via MSI-X and legacy interrupt...
PT-2026-61249
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mhz19b receive buf function where serial data chunks are appended to the fixed MHZ19B CMD SIZE receive buffer without verifying if the chunk fits in the remaining...
PT-2026-61443
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth MGMT component where the MGMT OP ADD EXT ADV DATA command fails to verify if the specified advertising data lengths are within the actual command payload...
PT-2026-61263
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Bluetooth ISO implementation. The iso recv frame function reads the conn-sk pointer while holding the iso conn lock but releases the lock before...
PT-2026-61465
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the pds core component where the pdsc devcmd wait function fails to correctly handle errors, potentially returning a stale success status from the completion register...
PT-2026-61163
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/jpeg component where JPEG v3.0 rings do not support 64-bit user fence writes. This leads to a failure to reject Command Stream CS submissions that inclu...
PT-2026-61454
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the SMB client where the CIFS GENL CMD SWN NOTIFY userspace witness-notify command lacks a capability flag. This allows any local process to send RESOURCE CHANGE or CLIE...
MiracleLinux 9 : golang-1.26.3-1.el9_8 (AXSA:2026-1288:06)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1288:06 advisory. net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity...
PT-2026-61162
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/jpeg component where JPEG v4.0 rings do not support 64-bit user fence writes. A user fence is a synchronization mechanism used to coordinate tasks betwe...
PT-2026-61120
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the GFS2 file system within the gfs2 qd dealloc function. This function is executed as an RCU Read-Copy-Update callback—a mechanism used to synchronize...
Exploit for CVE-2026-46420
CVE-2026-46420 PoC Command injection in shivammathur/setup-p...
Updated perl-Config-IniFiles package fixes a security vulnerability
The updated package fixes a security vulnerability: Config::IniFiles versions before 3.001000 for Perl allow OS command injection and file overwrite via a 2-arg open of the -file argument in makefilehandle. CVE-2026-11527...
MGASA-2026-0263 Updated perl-Config-IniFiles package fixes a security vulnerability
The updated package fixes a security vulnerability: Config::IniFiles versions before 3.001000 for Perl allow OS command injection and file overwrite via a 2-arg open of the -file argument in makefilehandle. CVE-2026-11527...