CVE-2026-72238

A flaw was found in the Linux kernel. A local user could cause a system hang during early boot by providing an invalid baud rate for the console=uart8250 parameter. This invalid input leads to a division-by-zero error in the earlyserialinit function, resulting in a Denial of Service DoS...

CVE-2026-72238 x86/boot: Validate console=uart8250 baud rate to fix early boot hang

In the Linux kernel, the following vulnerability has been resolved: x86/boot: Validate console=uart8250 baud rate to fix early boot hang When the baud rate is empty, 0, invalid, or overflows to 0 when stored as an int, the system will hang during early boot because of a division by zero in...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013618)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013618 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: fix out-of-bounds access in ttydriverlookuptty When specifying an invalid console= device li...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-013189)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013189 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: fix out-of-bounds access in ttydriverlookuptty When specifying an invalid console= device li...

EUVD-2023-60443

In the Linux kernel, the following vulnerability has been resolved: tty: fix out-of-bounds access in ttydriverlookuptty When specifying an invalid console= device like console=tty3270, ttydriverlookuptty returns the tty struct without checking whether index is a valid number. To reproduce:...

CVE-2023-54198

In the Linux kernel, the following vulnerability has been resolved: tty: fix out-of-bounds access in ttydriverlookuptty When specifying an invalid console= device like console=tty3270, ttydriverlookuptty returns the tty struct without checking whether index is a valid number. To reproduce:...

SUSE CVE-2013-4967

Puppet Enterprise before 3.0.1 allows remote attackers to obtain the database password via vectors related to how the password is "seeded as a console parameter," External Node Classifiers, and the lack of access control for /nodes...

CVE-2013-4967

Puppet Enterprise before 3.0.1 allows remote attackers to obtain the database password via vectors related to how the password is "seeded as a console parameter," External Node Classifiers, and the lack of access control for /nodes...