21512 matches found
CVE-2026-98270
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check ras and obj before dereference nbiov79handlerascontrollerintrnobifring dereferences ras and obj without checking either for NULL. Both amdgpurasgetcontext and amdgpurasfindobj can return NULL, e.g. during the...
UBUNTU-CVE-2026-98270
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check ras and obj before dereference nbiov79handlerascontrollerintrnobifring dereferences ras and obj without checking either for NULL. Both amdgpurasgetcontext and amdgpurasfindobj can return NULL, e.g. during the...
CVE-2026-98326
The Linux kernel contains a vulnerability in the wifi: mac80211: mesh component where the ieee80211_join_mesh() function acquires a channel context but fails to release it if the subsequent ieee80211_start_mesh() call fails. This improper handling leads to a warning during interface removal becau...
EUVD-2026-93311
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: mesh: release the channel if start fails ieee80211joinmesh acquires a channel context and then calls ieee80211startmesh, which can fail. In that case, the chanctx isn't released then interface removal will attempt...
CVE-2026-98326 wifi: mac80211: mesh: release the channel if start fails
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: mesh: release the channel if start fails ieee80211joinmesh acquires a channel context and then calls ieee80211startmesh, which can fail. In that case, the chanctx isn't released then interface removal will attempt...
EUVD-2026-93198
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check ras and obj before dereference nbiov79handlerascontrollerintrnobifring dereferences ras and obj without checking either for NULL. Both amdgpurasgetcontext and amdgpurasfindobj can return NULL, e.g. during the...
CVE-2026-98270
The Linux kernel contains a vulnerability in the drm/amdgpu component where the function nbio_v7_9_handle_ras_controller_intr_no_bifring() dereferences ras and obj without performing NULL checks. This occurs because amdgpu_ras_get_context() and amdgpu_ras_find_obj() can return NULL during a speci...
CVE-2026-98270 drm/amdgpu: check ras and obj before dereference
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check ras and obj before dereference nbiov79handlerascontrollerintrnobifring dereferences ras and obj without checking either for NULL. Both amdgpurasgetcontext and amdgpurasfindobj can return NULL, e.g. during the...
CVE-2026-98270 drm/amdgpu: check ras and obj before dereference
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check ras and obj before dereference nbiov79handlerascontrollerintrnobifring dereferences ras and obj without checking either for NULL. Both amdgpurasgetcontext and amdgpurasfindobj can return NULL, e.g. during the...
PT-2026-106599
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description In the drm/amdgpu component, the function nbio v7 9 handle ras controller intr no bifring dereferences ras and obj without verifying if they are NULL. Because amdgpu ras get context and...
PT-2026-106655
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the mac80211 mesh component where the ieee80211 join mesh function acquires a channel context and subsequently calls ieee80211 start mesh. If the start process fails, the...
Linux Distros Unpatched Vulnerability : CVE-2026-98270
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: check ras and obj before dereference nbiov79handlerascontrollerintrnobifring dereferences ras and obj without checking either for NULL. Both...
A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS.(CVE-2026-87664)
: A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing local inter-process communication IPC storage callbacks, the service accepts and registers session structures including administrative ro...
PT-2026-106552
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified openSUSE Tumbleweed versions prior to kernel-devel-7.2.10-1.1 Description An issue exists in the filemap component where fault-around can map ready dropbehind folios without utilizing the standard...
PT-2026-115067
Name of the Vulnerable Software and Affected Versions OpenPrinting CUPS versions prior to 2.4.20 Description The quote string function in backend/ipp.c fails to properly handle carriage-return and line-feed characters within a remote printer-controlled marker-message before the report attr functi...
EUVD-2026-87858
vm2: NodeVM custom resolution bypasses external path boundaries...
CVE-2026-105741
Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.5.0 until 1.10.3, an IP spoofing vulnerability in the Model Context Protocol MCP configuration installation endpoint POST /api/v1/mcp/project/projectid/install allowed authenticated remote attackers to bypass th...
CVE-2026-105741 Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write
Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.5.0 until 1.10.3, an IP spoofing vulnerability in the Model Context Protocol MCP configuration installation endpoint POST /api/v1/mcp/project/projectid/install allowed authenticated remote attackers to bypass th...
CVE-2026-105741
The software Langflow (versions 1.5.0 through 1.10.3) is vulnerable to an IP spoofing issue within the Model Context Protocol (MCP) configuration installation endpoint (POST /api/v1/mcp/project/{project_id}/install). An authenticated remote attacker can bypass "local-only" access restrictions by ...
CVE-2026-105741 Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write
Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.5.0 until 1.10.3, an IP spoofing vulnerability in the Model Context Protocol MCP configuration installation endpoint POST /api/v1/mcp/project/projectid/install allowed authenticated remote attackers to bypass th...