CVE-2026-49424

The Linuxulator's waitid() syscall translates a FreeBSD siginfo_t into a stack-declared Linux siginfo_t without zeroing it first, leaking 104 bytes of uninitialized kernel stack data to unprivileged users. Affected: FreeBSD 14.3, 14.4, and 15.0. No workaround exists; systems not using the Linux b...

UBUNTU-CVE-2014-3180

In kernel/compat.c in the Linux kernel before 3.17, as used in Google Chrome OS and other products, there is a possible out-of-bounds read. restartsyscall uses uninitialized data when restarting compatsysnanosleep. NOTE: this is disputed because the code path is unreachable...