4334 matches found
UBUNTU-CVE-2026-74371
In the Linux kernel, the following vulnerability has been resolved: bpf: fix BPFPROGQUERY OOB write and cgroup backward compat BPFPROGQUERY writes back the 'query.revision' field unconditionally to userspace. If userspace passes a smaller 'bpfattr' structure e.g. 40 bytes, which was the layout...
CVE-2026-74371
In the Linux kernel, the following vulnerability has been resolved: bpf: fix BPFPROGQUERY OOB write and cgroup backward compat BPFPROGQUERY writes back the 'query.revision' field unconditionally to userspace. If userspace passes a smaller 'bpfattr' structure e.g. 40 bytes, which was the layout...
CVE-2026-72215
In the Linux kernel, the following vulnerability has been resolved: MIPS: DEC: Ensure 32-bit stack location for o32 promprintf In 64-bit configurations calling any firmware entry points from a kernel thread other than the initial one will result in a situation where the stack has been placed in t...
UBUNTU-CVE-2026-72215
In the Linux kernel, the following vulnerability has been resolved: MIPS: DEC: Ensure 32-bit stack location for o32 promprintf In 64-bit configurations calling any firmware entry points from a kernel thread other than the initial one will result in a situation where the stack has been placed in t...
UBUNTU-CVE-2026-68473
In the Linux kernel, the following vulnerability has been resolved: powerpc/uaccess: correct check for CONFIGPPCE500 in maskuseraddress maskuseraddress incorrectly checks for CONFIGE500 instead of CONFIGPPCE500, causing maskuseraddressisel to not be used on E500 hardware. Fix the check to use the...
CVE-2026-74371 bpf: fix BPF_PROG_QUERY OOB write and cgroup backward compat
In the Linux kernel, the following vulnerability has been resolved: bpf: fix BPFPROGQUERY OOB write and cgroup backward compat BPFPROGQUERY writes back the 'query.revision' field unconditionally to userspace. If userspace passes a smaller 'bpfattr' structure e.g. 40 bytes, which was the layout...
EUVD-2026-59518
In the Linux kernel, the following vulnerability has been resolved: bpf: fix BPFPROGQUERY OOB write and cgroup backward compat BPFPROGQUERY writes back the 'query.revision' field unconditionally to userspace. If userspace passes a smaller 'bpfattr' structure e.g. 40 bytes, which was the layout...
CVE-2026-74371
CVE-2026-74371 concerns a Linux kernel BPF issue where BPF_PROG_QUERY could cause an OOB write by unconditionally writing query.revision to userspace when a smaller bpf_attr buffer is provided. The fixes propagate the user-supplied attribute size (uattr_size) down to cgroup query handlers and ski...
CVE-2026-74371
In the Linux kernel, the following vulnerability has been resolved: bpf: fix BPFPROGQUERY OOB write and cgroup backward compat BPFPROGQUERY writes back the 'query.revision' field unconditionally to userspace. If userspace passes a smaller 'bpfattr' structure e.g. 40 bytes, which was the layout...
CVE-2026-74371 bpf: fix BPF_PROG_QUERY OOB write and cgroup backward compat
In the Linux kernel, the following vulnerability has been resolved: bpf: fix BPFPROGQUERY OOB write and cgroup backward compat BPFPROGQUERY writes back the 'query.revision' field unconditionally to userspace. If userspace passes a smaller 'bpfattr' structure e.g. 40 bytes, which was the layout...
CVE-2026-72215
CVE-2026-72215 affects the Linux kernel on MIPS under 64-bit configurations. The issue arises when non-initial kernel threads call firmware entry points; the stack may be placed in XKPHYS 64-bit memory, making the stack pointer effectively 64-bit. Consequently, 32-bit ALU operations by 32-bit fir...
PT-2026-72807
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write occurs when BPF PROG QUERY unconditionally writes the query.revision field back to userspace. This happens if the userspace provides a bpf attr structure that is...
CVE-2026-53970
ZeroBrew version 0.3.1 and prior contains a missing integrity verification vulnerability in the Ruby compatibility shim that allows network attackers to execute arbitrary code by substituting malicious content at formula resource or URL-based patch URLs without checksum validation. Attackers can...
CVE-2026-53970
ZeroBrew 0.3.1 and earlier is affected by a missing integrity verification vulnerability in the Ruby compatibility shim (shim.rb). An attacker could substitute malicious content at formula resources or URL-based patch URLs without checksum validation, allowing remote code execution when downloads...
EUVD-2026-58684
ZeroBrew version 0.3.1 and prior contains a missing integrity verification vulnerability in the Ruby compatibility shim that allows network attackers to execute arbitrary code by substituting malicious content at formula resource or URL-based patch URLs without checksum validation. Attackers can...
CVE-2026-53970: Download of Code Without Integrity Check
ZeroBrew version 0.3.1 and prior contains a missing integrity verification vulnerability in the Ruby compatibility shim that allows network attackers to execute arbitrary code by substituting malicious content at formula resource or URL-based patch URLs without checksum validation. Attackers can...
openSUSE 16 Security Update : kak-lsp (openSUSE-SU-2026:21560-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21560-1 advisory. Changes in kak-lsp: - Update to version 21.0.2: Fix a regression that broke compatibility with Kakoune versions older than 2026.05.21 Add a...
Alibaba Cloud Linux 3 : 0254: pipewire (ALINUX3-SA-2026:0254)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0254 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-5674: A flaw was found in PipeWire, a...
TencentOS Server 4: pipewire (TSSA-2026:0798)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0798 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...